last executing test programs: 15.507242805s ago: executing program 0 (id=1168): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) write$binfmt_aout(r2, &(0x7f00000004c0)={{0xcc, 0x10, 0x8, 0x97, 0x1a2, 0xfff, 0x321, 0xc90d}, "6954b5132b643999f73cbde1fcd3f2b87b71506a1f28179f3976dce3d518ae56da28614bc855a9bf1142124730478549b73bb78d2c476932b4c60563218500120563e026fa366871dc0d07533562ee808c03c308f45e8035cc2db9821fb0e8d375049a20f8bb49e12a2802315f759bbd0b8843ab8efaf38e8144aba40afd84f53cee313865557f393bea80bfa6a8117e6f7659b4daf5e3b0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b8) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x40585414) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_UNREGISTER(r4, 0xc020aa04, &(0x7f0000000180)={&(0x7f000063c000/0x4000)=nil, 0x4000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.561852695s ago: executing program 0 (id=1170): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.254179866s ago: executing program 0 (id=1172): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x48, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x891b, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x94, 0x6, "a009155528c029b13e8d3e46508904ca6ce5a86a20f77964fce7d7a3308d64cf2ed471cb925f2a35f0fea5a623a4dad07d7a9bd5ece6e8942cfd05169257e5a79620ce1cc502fd86ed1f3aa2edcc9559ef2e41b41f2d9452fdfa5e4fd268105becf879492b5d51c6759bac459cd71d2c8730291accc2d8d072607b7c7b91f29ed0ec6d6ce00fe36b57d9e52b5ca18c9e"}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x144}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r4, &(0x7f0000000180)="982476d6ce9a6fdc412f4564d356ae6f4c7081467c589f0b89b087", 0x1b, 0x1000000, 0x0, 0x10}]) openat$uinput(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000500"/20, @ANYRES32, @ANYBLOB="002300000000000000000000000000000000270f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x81, 0x0, {0xa}}) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) socket$isdn(0x22, 0x3, 0x24) socket(0x1d, 0x2, 0x6) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) 12.460001185s ago: executing program 0 (id=1176): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x3, &(0x7f0000006680)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000000000000}]) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 11.871401967s ago: executing program 0 (id=1181): prctl$PR_SCHED_CORE(0x3e, 0x10000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffcc, &(0x7f0000000840)=0x3cca) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_clone3(&(0x7f0000000400)={0xd000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, {0x3e}, &(0x7f0000000280)=""/153, 0x99, &(0x7f0000000340)=""/91, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r0}}, 0x58) sched_setscheduler(r3, 0x0, &(0x7f0000000480)=0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket(0x0, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = getpid() ptrace(0x10, r6) sched_setscheduler(r6, 0x0, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x400, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x5, @local, 0x3}, {0xa, 0x4e1d, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0x20, 0x5, 0x0, 0x8, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}, 0x1c) sendmmsg$unix(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b00)="1f6e72995bc4277533902df46a9e79b239d10d3cf6cb00f17a3ba9808cc5f192d60cdb0ae5f1b6b6d0de0e00a3a996a55a5ac072c7bd8c268f86a8d252e7e3f68d65e5f2d7987a905be4b510b4a0752ac6477e45cabec3e291d2a5df9518f1c88d3c1b5c04d46ab56a837a76c6ee514d", 0x70}, {&(0x7f0000000540)="be3b435de075bb7c4a0ef41587d7459abb368f88648d5fb0bf67a24210a341a2c034aa", 0x23}, {&(0x7f0000000580)="41adf8658bc25b160f9fc5ff6e947cb3b905a061bb964b38ed45bb86e0dbc4f2b8491777918f6c2f296ebbb85d12943612a7b5e5005ef96544c7d542566f76370201003ae5804ab64db025591192d1331e820c297dad4711fd9047edb5", 0x5d}], 0x3, &(0x7f0000000680)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff, r8}}}, @cred={{0x18, 0x1, 0x2, {r4, 0x0, 0xee01}}}], 0x30, 0x4004000}}, {{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f00000008c0)="f6bf8de2cb108906ba2ffe88794166f3edfa0e89bb2d80d808563e8a124e86674de6052fafcac0c7b0afbfb2065edf88f63eafcea7acc39445f753ec1548149329fa3fef26713f905ee706fe53e7ba6b77c15c70d420141c64e09f7b66c2c5a2bc5e05a609487716cd8f70afad6e77a3987ad68dabba8ed54de127d5dd1b2b74fe20ee87e6d36c3aa493612c902388fbeff885824642d4e9bc500aa1e17c077a4da620d654ea4e691b152404b4ab77704d9d9dd3fe405829fce57340b274c491a6d178de44add7646c1d66e8ef525122b761f6b9288925183b4e5dc5c0672358aa8244", 0xe3}, {&(0x7f000001aa80)="14143a9601b828ad8f7197198b7c7e047bc68f14387d0b0c23bd8d7b7e8b02f9ff8a19b1dcffa80b512e5bb290274459e100c9ae38be2fae5d7d78702fa53eda187d66e42efb5fc9e1886d2a67881c4dbdb84cfbd137a9b03831c4f2dfd4ff5d157d1cfd3df4d02c8901e7882056c026b4795fcc529fd2e0190cc7cc89fbb1b8f7064f6c766fea036b1df54a964b19bd6db24838930c590798449fc9c9c3d4df29b4f9b7f2728c041bf6cb8cfb069377547e4048faa6659e16b6d70164b4ee467be8a2cce1cfb6be64a2e5ca0bd16540936027bdbdf257c782bb8920239da4c0cf4ecdadc920c7060722e57df2c14458431a0375982f21d734397ce9096bfbebfbd0db99d002f887fe57720756bdc1eabda329b112261f91f93d3ae1092aaadb4d27baa649b0a52e22c5027877184c8521d6765e9ae7295a1403a98bbb32dab3b9341966d8b4e557ec1ab0bf5d46515e0418459ac9469f1e744ca25383381817f74afa4b76fee070b4f62a3963d408c06ef63f8f38b1a9fc1080c1746aeb664a2c6fa85d54cbe139d30706d55644283291ff5d8df788bd706ab803fa7a4615da841e6107eb996b38908e824e97717097746eab4ca408bba09845f00a7c2277d308b26547474d8d1f0a8e78347138d40363e0c9414848927b602101ea71141add5760ef986c6b61ce6a1b3560adce5833961d30f483a73bf37b0643d405d995b092e7ae65a12952a9d22331016b50aecfd5b821e63ab27fff014cfe93deaaa81053d9b94eb6c6d2970247dbd7b4086a0304490c2ee7fb2569c0c9977b57bbc623ea8ef3dc4689397a7ccb64a045e4bc00cbf582772b981c08af979cf55bfb8966733fae4653f2f32f900c662ecf013d94de875f33c8810a032d4271a8c565cd084b88a71c8fe1bcfb2a6b32529baf45474af61de01c847a3eb64c77367b941f40aff7e48c8956529ff9d7e36b839794d393d119333f954aa36a5481622396cf8515906ce941753444a27fcd10603d482c4c687fb8e61a2da72cd15b012f23f1cb09b24c3fb1334bfd99556b98368bd1888f9f9983a4c572f91309e4ff2381ad81e78fd5236610ab56ea46933fda9950e92fd230a80b07c76960aa2595b65a962ab8778503b5f170e3a1e617096543eb3b707b9676410d8e54528b67fe7559c83a52d1f7d54eaf022c8ca6478a3c9b140a3eed038c0b68616eb4f8b56e0b40d0b8d1a78e537a24201a60229ff3b21ce647099df0c16d7383ec6dcaed70587adc8abb992ea8e46eb02dc92fbbe8c112ebeedec2e64203b83bd0fed3f7ee847662ff7c645df69502dc6758670bd47ccdf22359f492aed22875c7eb9c2a66a49baf8c1d8e1c90311f05ff9a948ee4362c573d7b5520a59aeb7145c564f438fcc787759bf5c5d484c85301ae32a7b146585582cb664044c86ea3b5b69c50e6de4b6556a6f1a7851d10fe028896587b71931921f093dc792b22b1449bda500f61526c599b951977f69927d1f8d8de97ce8b5dfa0a81b9ce4b476dd105a3d1881e8020429c601303e1a2dcf87088ec14cccd8c5f5783c57a7c8aa37d33d07a4d63d24ca6f2ec52a5b65e123391e5fa20beb910a570f28dc905f92321675eb57d9e5a2c3a20c2eba788400b853349a2a278c27ee0d4c8c816a409d870f761aa12a48835d57cd29e2dcb3d32b79c63743dd341762ef4ffdb888fb10a8cfff55c67cf06336663073be5a1c55805d352cafa68e12f8d147cc1e4123c2332410c3d544a0334a3c52371af8657e69bb0f7b690e8410ed26cb9d6e258fe06094d256922466599057ab0f3c99b1a0d9c8d9907d37e731ff828c025e71a67b468570af87b1240192eb25c7c1dee606653c369eab14ca97eb8c11a4d0091244053a353da0ebac05667ad57c16a0196440627713b0713f008b0e236e3b8c9539cf002558710967a4f74ef2ca72c8b28e08dc3c61055e6b4bb7b7922955eac7dc773ddb77bb17b55e3c81df6f543ba75ddc5087e681bc08a969db5b7382cb516955d119b4717fc41fcd1b2cb9e16c5a73665163eebe7adb89374c3805faa962cabe7b051d17f7da3f947d5825255adafcb6bae9ee80f83b64d3c0353c9a95924b2c5d0c1c22375446beb274225a653c26aed62fdf4ff6636f21265ac657567c128e56fa7e63b064b408b36c9af6be435665f7159fae6ef3989f2fa0c5ec5f210e2f939b800ac6f2dff3d86445057071f664efde6ef2fa7697d9483d20117085fa52cb8b8a2e678d41f1aad87efd1c9e425ef864a052066104222ceed9b8ad9a54cfba2775719537947afa28abc01c8c75625865ad0f8a3af9c3f07cba6d24e3c6c7c6714d571a8520d571093998bf7d34fbf4cbc4e4a3cd94fed4ad7c4418a2747e269da06869be1cd32fec8ba1acf910e05e6feaf14e588a0545478461ba068256935918b4eb9f95f856015251508a9603dcdab728f398e486a3a634c574fd1d133c9641c876ab0f06effeefb51e964aae60e72643ae6f32540b4ef58cab02b32614e0c0f99889c0c6ee504da31b39a79c548e3e5b97c7d79358a12513f1cefc16554cec0caec229fecfa35f2ff8b4a16b64b03b2688d9fbb13b9482962932b52a85a3b3a3932db0c43b7f581876eeffb56246e488a2887a78bd3836947d0cfee7315ef6c4b860015bdd2c1b737a4e742da94aa4bd68d72716f6fc772d6687c30ae2f7fd6e239bddd4e9c83e99433b59030e652c6221b260bce725e942baf3826f21326ca080a9340fc450c41c6d8cf2d6e53a4e21a76a391af69e181846e6b81105a6e0e468f34fc8f80fba5d14481f6e92f45e772027575d8a7f574d293d01d3df4485deee51d5766602fa606cd2c97dab1317fdd11014ea626381bb0677ec1bc815689607be3c4d80b52061e72e69049a039f4bd521b10cfef44ae715e5f812a161a63635c76c54fb8dc68ffeee85a6f043ddd44803a5fa240c3de4b243e0fe6770e2728adf98be256dfef7c24fd18b4a54f3aa17025ee71f01c6ae94997d46afe0aaa4fd56912de5483ee4e7c372f60cc0fd55b840ff20fca3186aa4887e17b929556bb038daff8b3c01e7af6cfcb2e941eae7d4cb65160209d9bf2f4d9e148e988383ff73a40b85661305d10d527ac3d184731194db50feae1961b6b24cad0e6abbe3593bd52343a25e3494cc490086b2b66b2f52b74045b26cef30eb1fe5efd05b78fc410cc856b41816ba6e28f69fa439399c7340aa23d2571312e140f00b4b8b71abede344c6fe152ea427583a8ba316a6fe91c371950526ea7879750c6da2c87aeb7b1a070e51459b71abe9c4fd689aa9cf1a5e0ffb30434b7d0c01b23d421c448f571a95e913b14c7afcf241e58dc480d1bd2393fd2afaa9fa7575f66c1b5e9c23d7c94d376ca4d1e84c25c1d4de3c326cc4f9e9cf0a6c20a3d3e9c842e8cd9c27d24fcec45bc3112f45e3d2c7f45fde45abfa06941dc22b2a549772569ce58e15958fa0855a22509e1ef2f05b7311261c69ec6143cbfa9002dfe483d9ca963cd312e0a88d0a2183b03adff5f7b31814ba8052cc2fbacfc4bc67c73c087410e9f6fd37a108844bb01a99ee2e4b0c428d2b5cfdf3ee3006c31a4cdd5a290c44b9d2c083150ae7feb49015c8363a496d22ebe508e9d2ef065c155c486de16c877faa3e6acb815f524b2287d80800bc29e8a232c8a486659e7ec8737fc919733778fba480c412f5a0b02e4679acc5553fed6494317cf97acec7b46718ba674e23cc4f0e0aa4592d8ce1c8638a0ff9fb6723bde4d4c8317253cab7d06ec7238b146209c919e577959a5b1f297ada1c20cd15afcddc73caf230855500444b43aa66daadde6a1f749305847afbdfe1d75a36fc90647caea25c08b6ea1b65a2d106180e7cad97d1a972a0d26385c5f154c7105e8dd233ed5b9574c60c2e42891f4d2ec85d857fee0821926f21a91aa07df36bf5a56c0339bae2337b0da8be6cb6ce903200df688359f135d7c07cc7a12bad7f665ebe2171c31449b576ecc2c690f62cc65eb1084c8c21139b186e6ccf1097d7b6d2618ea07dfe3e9326427db7e86c251629aefb2f68ae8c58dce17a1f6d42acc3ec3c5ea4967a08b3917f4674f840c6dbdb47d9086b0ea972ef0c91946d7df5126e127f9fb97017f55b3d6fe7b2b27642aed7fbe319870dc566a1a55c2fce24e37c67d91525bae1175710ebb81c28654c6cba53b5978c3ebb82575229c9083b3897d172674a7f3cf009e0f23c0d25e66ac459a1b40b573df0f30fdd4a810d3884d3668766dc05a354b64d4e18da22633830dda108392ea6941beff11a7d7f2b6474479c13fbca5cccc3c92b714d5371718b351c9893dd42d189f0a919efd7f4ac9bfd30ac4f548148a7b500916bc1ea52793f56ae7be49809e046d2ba89a90ad746b18d38075be5d002ef9a75433181cea40a029724c9be593d0460b8c42ae950732792e96f6f61a695aa4b931bb20c8f946f51599c853e98d959a580be6573a2b0e421abf7616abedf377a8300f4fd9f50c8de00ef0bbb4a8d33457093dc9b2875777c7258a7f5d648e66acedf573710880d2bfc0ac67b0f6dc0cda10d5c15c9d0ae375d305643e312ab11b977ecd48a369285cb84c751056383f0ec376459a45fa911e3266f11e5c161d700c5957f424dfd5c0efc6660c28e31276a39973813060d416bfa69a40ba4502b44c4d449d942de6710a7015ec7b893aaf2cb745001e607e3cee4ac942cecffa38a1ff7e6614a23ceea2ef036e4ce7da655687c107834ad1ca233e0ba942832dff207a871685cc69f8559a9cb17791d900868af27273aa743bd895834bc01eb711787545cfa3fdbbafceaa53732136d4b77409b185b3db5e1146de64aa5759c203676db2bd263c930bddd1b0c731d3c069b1ad8abcff0df794bff2daed18cfafb2ddcc8f2c4d77096d510e500d2c7b305c8018c2b235cd6b1b266138a0c7ea445b5f1d427e111b9b6926bd9d932ffb44f7f376d0f429cb6323f4bacbcbc42c36bb3aebda6f87c4b9c3b6a3424888776bdf6ceea78fbaa270281c9ed7db7e369e93392aee3a4cd69c2d8f839253662f689f45cf01ce1bab535a18fe40158b8badfa818b1ef246b87cbef16129d973cba4a2497587cb9d7d19aaaffd254ed321c868087cbb45145d5b545c0ea84c684294d4d61231cf5bff8da9b4fa6669ee0949edd6bda10b26c574fd79acc39cebcab0550ff7bf0f8e760880a417bfdeef723fea7393afd819a94545d08f5e02afc5846a9ef71b27283e0f13819c2eb1f62a7a149cc9ca74fda0376ae05ad76dbe5edb3cf48c62965fc7a5a0634828b967d0346117a1e0bbf92be204e4794bc53561424f41b7586e8d54365ae03c688a86a7a374064350c501b6ab7214af6e749ff88340f9049d62c7ff8cde4d3500a6d7ef2358d5df60b00f8c6131d4834eceb88a11ae69fa878c44304b6f33f3c2c47d174bff1e1318a43743080ca78e0e964dcb997170c72563edd8d6ae24e38086ef903cb0fba06aacab733d087015094e31e5986c017bfeeba5e9741afbf74f63916bf6e0221bb0c6fc42709819cae7e2f228b976a51cbebf6ca401624842ee916ce50252558d5ed3b2cb65ab70a7860cc6cad79672359a3223eb746984dc39a185dcc4a5e5250ea1f4923765ad1e4ea643cf2b019f8f3c3d1f71dc0f0064a6988c757053b1395b05941b76734ab7bc4aef3c87a96bc9279497573d28e24824a31ff865a9bdf4747eab2060142c91049a5d46105521900050d2f84b6b64ef9d86444faa610d8830ebd9d06cdded", 0x1000}, {&(0x7f000001ba80)="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", 0x1000}, {&(0x7f0000000740)="a7afa80c26e6913caf1c234a963bac5df709154c2da5551f65b327174187722104ae13e55508fe", 0x27}, {&(0x7f00000009c0)="07d986a307b93ab37690dc53536c0e44ab672c7fe1aeddfa769af923f5a4f7c4fa72983090ac98d0d11605697f3c86adf536c5b0d95445e336c4f6bfcb1d7e5048338f", 0x43}, {&(0x7f0000000d80)="33edec638917270752ce4549ed92a4e324eaa6717f59ab1dc88360a572ace8237224be6ba6cdc266c1424e83e033734fc5ba8646c250522a2aab1578b1242f78d790ac228241f42d6ca750e6a52e01974d9d0c0f9acca0414555e640246f60745bef0a6040a9308559545d54646f8797c4419f798c4f82de51da752ec5a3ed19822d456231706711535eb0ffbfef3275c8bd3c02cf5c87a6357f47f485fb91506c442066719968287e", 0xa9}, {&(0x7f0000000780)="16115f5b52ef4ac84f09b91d41fe1b75e9ba62587909255395bc298bffd7", 0x1e}, {&(0x7f0000000e40)="aa89280feb456156c1c9d6fe5e63306fe9881b8b702c74dcefec083ab14f1d88d25fd7c4a3b00bd7892100a19d1ee69ed3d914587dea86fc8aba6024e9b2239b77ba083c6a32c2136afa8282609175df6e5573216f9e657da506b645a669b9d6313230dde8f2ddfc9f9edaf4af95100176a4e47dc5f4ff27b4e4db805e6119932872ba4ac0b8797bc0e84d94", 0x8c}, {&(0x7f0000000f00)="c902e29b7e2064968cceecd9c6c799b9702a54ad062c72fe91deade68bbc167a8ecd1402584802c643d1548a5c83268384d17c470f3b534c2e21d2bd034a2afffdbd14fccce90163eb3978f16298f70539014fdeca57dc0eeffa2d06b8b4381c49e753b4ae87093166ebaeb7841029e8ac2daa74cf120e249b3af9a3cccf34a9b487db242b821fa73daf1d78516da6de200a1030ca347d535a6e2b9c255efbe559342f57e0daf0deb12da986b4c9b5606e10f5dec36c623f8ffb1f47a32bc338c7a230f4bbb3fa0f1567d708c72ec7bdf5c01d326e970a98887349fd7a3f1902ea66deca01af6a7a0a8d2fcf2476e55ac1dbcae9c8", 0xf5}, {&(0x7f0000000d00)="bef2d1622bc991", 0x7}], 0xa, &(0x7f00000010c0), 0x0, 0x40054}}], 0x2, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r10, 0x0, 0x0, 0x22044004, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a80)=ANY=[@ANYRESDEC=r8, @ANYRESDEC=r1, @ANYRESDEC=r7, @ANYRES16=r2, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x20004015) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x2, 0x2, 0x0, 'queue0\x00', 0x4}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200f8719001a9c", @ANYRES16=r12, @ANYBLOB="01000000000000000000020000000c0001800500020003000000"], 0x20}}, 0x0) 11.444784162s ago: executing program 0 (id=1187): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1000000, 0x0, 0x0, 0x2, 0x0) 10.68675742s ago: executing program 2 (id=1191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000480)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x1, 0x100000001, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x10001, 0x6c000000000000], 0x80a5000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.31520171s ago: executing program 2 (id=1193): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f00090504000004000000090507000004"], 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x21}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @loopback}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x35, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x65, 0x0, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) (async) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="3d00330080009d00ff96ffffffff0802110000005050505050500000000000000000000064000000000001000406000000000000060200000503000000000000"], 0x5c}}, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a181, 0x0) r10 = dup(r9) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000000c0)={0x600, 0x32200}) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r12 = dup(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r12, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9.214048837s ago: executing program 2 (id=1196): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@local, @initdev}, &(0x7f0000000080)=0xc) 8.958823802s ago: executing program 2 (id=1198): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000026c0)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0xfffffffffffffffd, 0x5, 0x1, 0x1, 0x2, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xe, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000300000006"], 0xfeffffff) 8.739204403s ago: executing program 2 (id=1199): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x80002) 7.257839703s ago: executing program 4 (id=1206): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800020025bd7000fbdbdf250a000002fc02c80a0008000008000300ea82aaae14779d2dccefe0287e10417adfb0316c33ab60b6bdbf656b4c9015fe68e9fb6208"], 0x24}}, 0x20004044) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x48) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x101, r3}, 0x2c) 5.754637142s ago: executing program 2 (id=1209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty=0x2000000}}}, &(0x7f0000000240)=0x9c) (async) dup3(r2, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c00000000000000000000089078ff5c8a906616aa3bbe26c4037c07aa05a8d3f52474faeb64cc5fa9ecdc2cbe35274729ce1d2ffd16b85fc93594aff05db2b754194420c980754682cdde9d00c88f867e2f1ce10e187c27555f3116a6dbb783aede68bd4f34ce725aa76600367328e0a06fb3ef50608440148fcf0e89c1336f7858366a9d3b342b94755db8dbb8a1d0d0904f0d"], 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x3, {0x1ff, 0x1, 0x6, 0x239d}}) (async) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000002100)=""/4096) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000008c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000035c0)=0x7) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000048c0)={0x8}) rt_sigtimedwait(&(0x7f0000004900)={[0x1]}, &(0x7f0000004940), &(0x7f0000000440)={0x77359400}, 0x8) (async) syz_emit_vhci(&(0x7f0000004a00)=ANY=[@ANYBLOB="02c93012040e00050015090a00010000800900f16e4e00"], 0x17) (async) ioprio_set$uid(0x3, 0x0, 0x4007) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca000904000066bbd63300ceb158402a301d6526d90e73be887ac281837aa279105788977b0d554d0971dac53ecab419b08ec66e90d424445e8706d8400b98e23c831c8d20a74cd06dd8568c52f7818999059ee068947787b88bf9fdd1a434fd795ef5c51e7734c83b07d8f40774278063c782977e0cb5c46d745b78ccb265e0e51b20a11f3328e2bdba3c22e17e45745104d23ab5925ed84a00"/201], 0x0) getdents64(r6, &(0x7f0000000000)=""/43, 0x2b) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x410, 0x130, 0x130, 0x0, 0x218, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (async) r7 = syz_io_uring_setup(0x24f5, &(0x7f0000000840)={0x0, 0x0, 0x80}, &(0x7f0000000800), &(0x7f0000000100)) r8 = io_uring_setup(0x7d7e, &(0x7f0000000580)={0x0, 0x0, 0x20, 0xffffffff, 0x231, 0x0, r3}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x16, 0x20000000, r9) socket$nl_xfrm(0x10, 0x3, 0x6) 5.694586849s ago: executing program 4 (id=1210): prctl$PR_SET_ENDIAN(0x14, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a300000000030000000030a00000000000000000000000000000900030073797a30000000000900010073797a300000000004000880140000001300010000000000000000000000000a"], 0x78}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100000009000300739c7a320000000014000480080002400000000008000140000000050900010073797a310000000044000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000018000480140003"], 0xcc}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0xab, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, 0x0, 0x58c, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x54}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @loopback}}, 0xaa, 0x0, 0x43, 0x0, "9e62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x16) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/locks\x00', 0x0, 0x0) read$hiddev(r8, &(0x7f00000000c0)=""/4092, 0xffc) r9 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x640042) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) connect$inet6(r2, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000050000002089b2a58d"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.218649582s ago: executing program 1 (id=1214): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000004c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r4}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x8, 0x3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe3ffffffffffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) socket$netlink(0x10, 0x3, 0x12) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071756f7461000000100002800c0001"], 0xe0}}, 0x0) iopl(0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 4.803189666s ago: executing program 1 (id=1215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000480)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x1, 0x100000001, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x10001, 0x6c000000000000], 0x80a5000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.434511874s ago: executing program 1 (id=1216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$zero(0xffffff9c, &(0x7f00000001c0), 0x52280, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r2 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x10000001}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000009c0)={{}, 'syz0\x00', 0x15}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000090430bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="00020000000000001c0012801100d80c3d8746b60b6b7665"], 0x3c}}, 0x40000) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x15b0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 3.932711597s ago: executing program 1 (id=1219): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000026c0)={0xfe54, 0xffffffffffffffda, r3}, 0x5c) write$nbd(0xffffffffffffffff, &(0x7f0000002200)={0x67446698, 0x1, 0x4, 0x3, 0x3, "cc7b0c18ba979d37a3a40de516c2e23e97a42297874047dd60e05da8b8d8efe7cd51bf6758e3d6d1e85523bcbdd43b307439c57cd0629ee167c4604007b72e97b6def34d30ced749ec4ba0"}, 0x5b) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0xfffffffffffffffd, 0x5, 0x1, 0x1, 0x2, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xe, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 3.810603147s ago: executing program 3 (id=1220): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f0000002800)=""/4114, 0x1012}, {&(0x7f0000001e00)=""/205, 0xcd}], 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/39) 3.634767304s ago: executing program 3 (id=1221): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000aa3a3740480b032061f50000000109020a"], 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)={0x1, 'vlan1\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x834a}, 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0x4, {0x4, 0x0, "54e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.495272742s ago: executing program 4 (id=1222): landlock_create_ruleset(&(0x7f0000000340)={0x21, 0x3}, 0xf, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000401c1b3e1b0000000000010902240001000000000904000001030000000921"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$packet(0x11, 0x0, 0x300) syz_open_dev$vcsu(0x0, 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r4, 0x8994, &(0x7f0000000140)={'bond0\x00', 0x0}) setuid(0x0) r5 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc0085666, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000600)={0x4, 0x0, [{0x0, 0x0, 0x300}, {}, {}, {}]}) pipe2(&(0x7f0000000040), 0x2080) fcntl$setlease(r1, 0x400, 0x0) 2.974283831s ago: executing program 1 (id=1223): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x91, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0201000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.722774909s ago: executing program 1 (id=1224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x1, 0x100000001, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x10001, 0x6c000000000000], 0x80a5000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.798311214s ago: executing program 3 (id=1226): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x13c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x15, 0x6, "2d6962cf83e1097cfd3038d0d5c6372645"}, @NFTA_TABLE_USERDATA={0x48, 0x6, "f7efc098b08de3959b07b4ac58c16f963abec10e178c0f31fafeb7fb75ad027c26540cba59f3d3c485fc4e9678acd15f05421c9319b91fc9782731518764b2d6b565f708"}, @NFTA_TABLE_USERDATA={0xbe, 0x6, "14532bf7d8bb69f6db4a424858eff93b09a5033459c375d6b66db0079bfda04a8b2db5bf216b3aabe37477890ec8f0936b4880f0b6b32f68ec1268b67e962a3592965f44a2b1d3ffa2b080e6283060e19da2436634ac6b55c7e63cd7454742221194e1340a627952b3f0150482f758845e8d50833019a3e363a19adac2817c8da69aa7eb4855616c35793718638f51ef24865b1c7ec93f80db6ea7c7dae98007fc0b5054a53a248a6b92a15ecd7e20f656bf9c5d91e59b04b917"}]}], {0x14}}, 0x178}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) unshare(0x2c060000) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) r3 = eventfd2(0x936, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x118, 0x2b8, 0x182, 0x118, 0x0, 0x1f0, 0x3a8, 0x3a8, 0x1f0, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x0, 0xa}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x8}}}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x4, 0x6, 0x3}, {0x0, 0x1}, 0x67a7, 0x9}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x314) 1.674772846s ago: executing program 3 (id=1227): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x12, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) prctl$PR_SET_MM_MAP(0x22, 0xe, 0x0, 0xfffffffffffffe31) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140a, 0x73b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20001800}, 0x20008080) 1.390667793s ago: executing program 3 (id=1228): socket$key(0xf, 0x3, 0x2) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000002c0)={0x6, 0x9, 0x2, 0x5, 0x6}) fsetxattr$security_ima(r0, &(0x7f0000000300), &(0x7f0000000340)=@sha1={0x1, "f13405cdf2638fc6e0a5afebe98367128f3e2271"}, 0x15, 0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)='c', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3e8, 0x178, 0x178, 0x3e8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0x90, 0xc, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r5], 0x0) r6 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r6, 0xc04c5611, &(0x7f00000000c0)=@fd={0xa, 0xa, 0x4, 0x4000, 0xc, {}, {0x5, 0xc, 0x6, 0x5, 0x47, 0x2d, "b8477e13"}, 0x4, 0x4, {}, 0x6}) 222.825901ms ago: executing program 4 (id=1229): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001300070500005d3f0000000006000000000000000400"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000040001"], 0x54}}, 0x0) 163.721539ms ago: executing program 4 (id=1230): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000007000000000000000000000000b7080000000000007b8a00fe00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000feffb70500000800000085000000b200000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 814.33µs ago: executing program 4 (id=1231): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000100)={0x4, 0x0, 0x80}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0xffff, 0x9, 0x4}}) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf777, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 0s ago: executing program 3 (id=1232): r0 = syz_io_uring_setup(0x4687, &(0x7f0000002180)={0x0, 0x9d62, 0x7, 0x2000000, 0x32a}, &(0x7f00000000c0), &(0x7f0000002240)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = io_uring_setup(0x6e8f, &(0x7f0000000100)={0x0, 0xfffffffd, 0x400, 0xffffffff, 0x206}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000002340)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/snd/midiC#D#\x00'}, {0x20, 'rng\x00'}, {0x20, 'drbg_pr_ctr_aes256\x00'}, {0x20, '-'}, {0x20, '#! '}]}, 0x52) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x2000000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)) pipe(0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2727, &(0x7f0000000300)={0x0, 0x9fe9, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) kernel console output (not intermixed with test programs): 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 439.479519][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.526492][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.547675][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 439.547784][ T5277] usb 2-1: config 0 descriptor?? [ 439.555910][ T5228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.776400][T10741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.865299][T10741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.994855][T10741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.027912][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.067520][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.149494][T10741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.174593][ T46] gspca_ov534_9: reg_w failed -71 [ 440.207527][T11056] chnl_net:caif_netlink_parms(): no params data found [ 440.300797][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.315687][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.444787][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.467974][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.475291][T11056] bridge_slave_0: entered allmulticast mode [ 440.498812][T11056] bridge_slave_0: entered promiscuous mode [ 440.507249][ T46] gspca_ov534_9: Unknown sensor 0000 [ 440.507326][ T46] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 440.559314][ T46] usb 5-1: USB disconnect, device number 83 [ 440.591210][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.610263][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.627516][T11056] bridge_slave_1: entered allmulticast mode [ 440.649597][T11056] bridge_slave_1: entered promiscuous mode [ 440.759576][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.817015][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.830031][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.841986][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.852351][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 440.860157][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 441.001583][T11056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.044297][T11056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.152258][T10741] bridge_slave_1: left allmulticast mode [ 441.158625][T10741] bridge_slave_1: left promiscuous mode [ 441.164603][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.190685][T10741] bridge_slave_0: left allmulticast mode [ 441.196547][T10741] bridge_slave_0: left promiscuous mode [ 441.210504][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.416740][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.428334][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.436637][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.445840][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.469274][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 441.485979][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.648641][ T5231] Bluetooth: hci3: command tx timeout [ 441.658226][ T5278] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 441.731812][ T5277] usbhid 2-1:0.0: can't add hid device: -71 [ 441.762408][ T5277] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 441.804407][ T5277] usb 2-1: USB disconnect, device number 42 [ 441.890039][ T5278] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 441.899641][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.917363][ T5278] usb 5-1: Product: syz [ 441.921589][ T5278] usb 5-1: Manufacturer: syz [ 441.926219][ T5278] usb 5-1: SerialNumber: syz [ 441.927617][T11080] loop0: detected capacity change from 0 to 7 [ 441.938764][ T5278] usb 5-1: config 0 descriptor?? [ 441.943993][T11080] Dev loop0: unable to read RDB block 7 [ 441.950035][T11080] loop0: AHDI p2 [ 441.953968][T11080] loop0: partition table partially beyond EOD, truncated [ 441.976781][ T5278] ch341 5-1:0.0: ch341-uart converter detected [ 442.025645][T10741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.045025][T10741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.059124][T10741] bond0 (unregistering): Released all slaves [ 442.084548][T11056] team0: Port device team_slave_0 added [ 442.122056][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 442.213537][T11075] FAULT_INJECTION: forcing a failure. [ 442.213537][T11075] name failslab, interval 1, probability 0, space 0, times 0 [ 442.246469][T11075] CPU: 1 UID: 0 PID: 11075 Comm: syz.4.1006 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 442.256958][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 442.267147][T11075] Call Trace: [ 442.270469][T11075] [ 442.273443][T11075] dump_stack_lvl+0x241/0x360 [ 442.278180][T11075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.283434][T11075] ? __pfx__printk+0x10/0x10 [ 442.288080][T11075] ? __kmalloc_noprof+0xb0/0x400 [ 442.293072][T11075] ? __pfx___might_resched+0x10/0x10 [ 442.298414][T11075] should_fail_ex+0x3b0/0x4e0 [ 442.303170][T11075] ? alloc_pipe_info+0x1ff/0x4d0 [ 442.308155][T11075] should_failslab+0xac/0x100 [ 442.312887][T11075] ? alloc_pipe_info+0x1ff/0x4d0 [ 442.317870][T11075] __kmalloc_noprof+0xd8/0x400 [ 442.322701][T11075] alloc_pipe_info+0x1ff/0x4d0 [ 442.327515][T11075] splice_direct_to_actor+0xa9e/0xc80 [ 442.332949][T11075] ? aa_file_perm+0x3ef/0xf50 [ 442.337686][T11075] ? __pfx_aa_file_perm+0x10/0x10 [ 442.342760][T11075] ? __pfx_direct_splice_actor+0x10/0x10 [ 442.348449][T11075] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 442.354399][T11075] ? __fget_files+0x29/0x470 [ 442.359033][T11075] ? __pfx_lock_release+0x10/0x10 [ 442.364117][T11075] do_splice_direct+0x289/0x3e0 [ 442.369029][T11075] ? __pfx_do_splice_direct+0x10/0x10 [ 442.374455][T11075] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 442.380419][T11075] ? bpf_lsm_file_permission+0x9/0x10 [ 442.385844][T11075] ? security_file_permission+0x74/0x280 [ 442.391547][T11075] ? rw_verify_area+0x1c3/0x6f0 [ 442.396456][T11075] do_sendfile+0x561/0xe10 [ 442.400934][T11075] ? __pfx_do_sendfile+0x10/0x10 [ 442.405942][T11075] __se_compat_sys_sendfile+0x194/0x1f0 [ 442.411545][T11075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 442.417930][T11075] ? __pfx___se_compat_sys_sendfile+0x10/0x10 [ 442.424047][T11075] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 442.430695][T11075] ? lockdep_hardirqs_on+0x99/0x150 [ 442.435969][T11075] __do_fast_syscall_32+0xb4/0x110 [ 442.441134][T11075] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 442.447336][T11075] ? lockdep_hardirqs_on+0x99/0x150 [ 442.452586][T11075] do_fast_syscall_32+0x34/0x80 [ 442.457492][T11075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.463880][T11075] RIP: 0023:0xf7fc3579 [ 442.467989][T11075] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 442.487657][T11075] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 442.496145][T11075] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000003 [ 442.504170][T11075] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000000 [ 442.512189][T11075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.520211][T11075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 442.528230][T11075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.536266][T11075] [ 442.584320][ T5278] usb 5-1: failed to receive control message: -71 [ 442.610103][ T5278] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 442.637351][ T5278] usb 5-1: USB disconnect, device number 84 [ 442.650300][ T5278] ch341 5-1:0.0: device disconnected [ 442.670910][T11080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 442.680571][T11056] team0: Port device team_slave_1 added [ 442.693891][T11080] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 442.876711][T11080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 442.885104][T11080] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 442.904379][T11056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.911767][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.938591][T11056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.947703][ T5231] Bluetooth: hci1: command tx timeout [ 442.952199][T11056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.963154][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.989761][T11056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.082615][T11056] hsr_slave_0: entered promiscuous mode [ 443.111676][T11056] hsr_slave_1: entered promiscuous mode [ 443.134910][T11056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.155172][T11056] Cannot create hsr debugfs directory [ 443.532957][T11080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.549868][T11080] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 443.574883][ T5231] Bluetooth: hci0: command tx timeout [ 443.669936][T11080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 443.675914][T11080] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 443.712568][T11080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.744771][T11080] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 443.958207][T11067] chnl_net:caif_netlink_parms(): no params data found [ 444.188658][T10741] hsr_slave_0: left promiscuous mode [ 444.198351][T10741] hsr_slave_1: left promiscuous mode [ 444.200466][T11136] fuse: Unknown parameter 'groud' [ 444.215850][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.234261][T10741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.243296][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.251632][T10741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.280208][T10741] veth1_macvtap: left promiscuous mode [ 444.285768][T10741] veth0_macvtap: left promiscuous mode [ 444.291950][T10741] veth1_vlan: left promiscuous mode [ 444.298149][T10741] veth0_vlan: left promiscuous mode [ 444.573971][T11140] netlink: 'syz.1.1016': attribute type 11 has an invalid length. [ 445.074268][T10741] team0 (unregistering): Port device team_slave_1 removed [ 445.163222][T10741] team0 (unregistering): Port device team_slave_0 removed [ 445.577530][ T46] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 445.758151][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 445.763355][T11077] chnl_net:caif_netlink_parms(): no params data found [ 445.775173][ T46] usb 2-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 445.793023][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.802423][ T46] usb 2-1: Product: syz [ 445.814076][ T46] usb 2-1: Manufacturer: syz [ 445.829177][ T46] usb 2-1: SerialNumber: syz [ 445.838530][ T46] usb 2-1: config 0 descriptor?? [ 445.856285][ T46] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 445.964642][T11067] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.980863][T11067] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.993059][T11067] bridge_slave_0: entered allmulticast mode [ 446.004025][T11067] bridge_slave_0: entered promiscuous mode [ 446.113585][T11067] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.122085][T11067] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.142057][T11067] bridge_slave_1: entered allmulticast mode [ 446.158816][T11067] bridge_slave_1: entered promiscuous mode [ 446.235082][T11067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.287000][T11067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.309419][T11077] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.316560][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.328106][T11077] bridge_slave_0: entered allmulticast mode [ 446.335607][T11077] bridge_slave_0: entered promiscuous mode [ 446.346999][T11077] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.363517][T11077] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.374262][T11077] bridge_slave_1: entered allmulticast mode [ 446.391992][T11077] bridge_slave_1: entered promiscuous mode [ 446.460621][T11156] binder: 11153:11156 ioctl c0306201 20000080 returned -22 [ 446.482894][T11067] team0: Port device team_slave_0 added [ 446.521868][ T46] gspca_sonixj: reg_r err -71 [ 446.526759][ T46] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 446.542767][T11077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.547012][ T46] usb 2-1: USB disconnect, device number 43 [ 446.583279][T11067] team0: Port device team_slave_1 added [ 446.661713][T11077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.731899][T11067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.740528][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.768058][T11067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.810142][T11067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.823486][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.851651][T11067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.899563][T11077] team0: Port device team_slave_0 added [ 446.911284][T11077] team0: Port device team_slave_1 added [ 446.922443][T11056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.974795][T11056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.991717][T11056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 447.026472][T11056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 447.036928][ T46] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 447.056486][T11067] hsr_slave_0: entered promiscuous mode [ 447.066239][T11067] hsr_slave_1: entered promiscuous mode [ 447.073895][T11067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.082295][T11067] Cannot create hsr debugfs directory [ 447.089336][T11077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.096689][T11077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.151749][T11077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.213876][ T46] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 447.231385][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.247084][ T46] usb 2-1: Product: syz [ 447.251601][T10741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.274123][ T46] usb 2-1: Manufacturer: syz [ 447.283003][ T46] usb 2-1: SerialNumber: syz [ 447.290454][T11077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.297926][T11077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.309844][ T46] usb 2-1: config 0 descriptor?? [ 447.353001][ T46] ch341 2-1:0.0: ch341-uart converter detected [ 447.355369][T11077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.448038][T10741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.589666][T10741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.719705][T10741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.757910][T11077] hsr_slave_0: entered promiscuous mode [ 447.779581][T11077] hsr_slave_1: entered promiscuous mode [ 447.786566][T11077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.794437][T11077] Cannot create hsr debugfs directory [ 448.254795][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 448.270631][T10741] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.375616][ T46] usb 2-1: failed to receive control message: -110 [ 448.385834][ T46] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 448.448533][T10741] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.583112][T10741] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.741918][T10741] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.841027][T11056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.899600][T11056] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.948149][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.955303][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.982397][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.989600][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.276534][T10741] bridge_slave_1: left allmulticast mode [ 449.296179][T10741] bridge_slave_1: left promiscuous mode [ 449.308234][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.324182][T10741] bridge_slave_0: left allmulticast mode [ 449.330512][T10741] bridge_slave_0: left promiscuous mode [ 449.336321][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.353900][T10741] bridge_slave_1: left allmulticast mode [ 449.360416][T10741] bridge_slave_1: left promiscuous mode [ 449.366301][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.381506][T10741] bridge_slave_0: left allmulticast mode [ 449.393127][T10741] bridge_slave_0: left promiscuous mode [ 449.403354][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.805624][ T46] usb 2-1: USB disconnect, device number 44 [ 449.838132][ T46] ch341 2-1:0.0: device disconnected [ 450.418513][ T29] audit: type=1326 audit(1727125942.168:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.1.1034" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 450.567627][T10741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.591927][T10741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.610887][T10741] bond0 (unregistering): Released all slaves [ 450.865169][T10741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.909436][T10741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.931584][T10741] bond0 (unregistering): Released all slaves [ 450.966763][T11056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.150991][T11056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.159251][T11240] FAULT_INJECTION: forcing a failure. [ 451.159251][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 451.186621][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.4.1035 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 451.197106][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 451.207195][T11240] Call Trace: [ 451.210507][T11240] [ 451.213478][T11240] dump_stack_lvl+0x241/0x360 [ 451.215597][T11056] veth0_vlan: entered promiscuous mode [ 451.218186][T11240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.218223][T11240] ? __pfx__printk+0x10/0x10 [ 451.218254][T11240] ? __kmalloc_noprof+0xb0/0x400 [ 451.238453][T11240] ? __pfx___might_resched+0x10/0x10 [ 451.243785][T11240] should_fail_ex+0x3b0/0x4e0 [ 451.248509][T11240] ? video_usercopy+0x1f0/0x1180 [ 451.253518][T11240] should_failslab+0xac/0x100 [ 451.253611][T11056] veth1_vlan: entered promiscuous mode [ 451.258214][T11240] ? video_usercopy+0x1f0/0x1180 [ 451.258253][T11240] __kmalloc_noprof+0xd8/0x400 [ 451.273448][T11240] video_usercopy+0x1f0/0x1180 [ 451.278273][T11240] ? __pfx___video_do_ioctl+0x10/0x10 [ 451.283689][T11240] ? __pfx_video_usercopy+0x10/0x10 [ 451.288964][T11240] ? __fget_files+0x29/0x470 [ 451.293597][T11240] v4l2_ioctl+0x189/0x1e0 [ 451.297977][T11240] v4l2_compat_ioctl32+0x1d7/0x260 [ 451.303143][T11240] __se_compat_sys_ioctl+0x510/0xc90 [ 451.308476][T11240] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 451.314336][T11240] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 451.320357][T11240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 451.326702][T11240] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 451.333314][T11240] ? lockdep_hardirqs_on+0x99/0x150 [ 451.338583][T11240] __do_fast_syscall_32+0xb4/0x110 [ 451.343706][T11240] ? exc_page_fault+0x590/0x8c0 [ 451.348563][T11240] do_fast_syscall_32+0x34/0x80 [ 451.353420][T11240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 451.359760][T11240] RIP: 0023:0xf7fc3579 [ 451.363829][T11240] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 451.383445][T11240] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 451.391871][T11240] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000c0cc5605 [ 451.399858][T11240] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.407840][T11240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.415838][T11240] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 451.423818][T11240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.431828][T11240] [ 451.557591][T11056] veth0_macvtap: entered promiscuous mode [ 451.663162][T11056] veth1_macvtap: entered promiscuous mode [ 451.768063][ T5277] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 451.798715][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.833826][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.855701][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.878185][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.906948][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.921571][T11256] input: syz1 as /devices/virtual/input/input33 [ 451.931274][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.951736][ T5277] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 451.960234][ T5277] usb 2-1: config 0 has no interface number 0 [ 451.966374][ T5277] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 451.982857][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.994539][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.004737][ T5277] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 452.014178][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.024731][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.034397][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.045362][ T5277] usb 2-1: config 0 descriptor?? [ 452.062829][ T5277] ttusbir 2-1:0.83: cannot find expected altsetting [ 452.076636][T11056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.159911][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.176016][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.177514][ T5278] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 452.188702][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.205381][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.217669][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.228546][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.238726][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.249566][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.264724][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.275313][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.286619][T11056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.345015][T11056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.359088][T11056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.367468][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 452.371003][T11056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.381970][T11056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.386130][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.415294][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.425385][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.438498][ T5278] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.448723][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.472224][ T5278] usb 5-1: config 0 descriptor?? [ 452.681491][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.705758][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.735071][T11256] IPVS: Unknown mcast interface: pim6reg0 [ 452.800246][T10741] hsr_slave_0: left promiscuous mode [ 452.806688][T10741] hsr_slave_1: left promiscuous mode [ 452.813552][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.822090][T10741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.832003][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.840150][T10741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.853680][T10741] hsr_slave_0: left promiscuous mode [ 452.860127][T10741] hsr_slave_1: left promiscuous mode [ 452.866098][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.874536][T10741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.882851][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.891535][T10741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.939555][T10741] veth1_macvtap: left promiscuous mode [ 452.945263][T10741] veth0_macvtap: left promiscuous mode [ 452.951348][T10741] veth1_vlan: left promiscuous mode [ 452.956800][T10741] veth0_vlan: left promiscuous mode [ 452.964384][ T5278] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 452.977546][ T5278] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 452.986132][T10741] veth1_macvtap: left promiscuous mode [ 452.986905][ T5278] microsoft 0003:045E:07DA.0024: usage index exceeded [ 452.994371][T10741] veth0_macvtap: left promiscuous mode [ 452.999492][ T5278] microsoft 0003:045E:07DA.0024: item 0 4 2 0 parsing failed [ 453.004393][T10741] veth1_vlan: left promiscuous mode [ 453.015888][ T5278] microsoft 0003:045E:07DA.0024: parse failed [ 453.023854][ T5278] microsoft 0003:045E:07DA.0024: probe with driver microsoft failed with error -22 [ 453.025409][T10741] veth0_vlan: left promiscuous mode [ 453.193872][ T3210] usb 5-1: USB disconnect, device number 85 [ 453.905936][T11276] FAULT_INJECTION: forcing a failure. [ 453.905936][T11276] name failslab, interval 1, probability 0, space 0, times 0 [ 453.927388][T11276] CPU: 1 UID: 0 PID: 11276 Comm: syz.4.1042 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 453.937903][T11276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 453.947994][T11276] Call Trace: [ 453.951280][T11276] [ 453.954213][T11276] dump_stack_lvl+0x241/0x360 [ 453.958918][T11276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.964146][T11276] ? __pfx__printk+0x10/0x10 [ 453.968766][T11276] ? fs_reclaim_acquire+0x93/0x140 [ 453.973896][T11276] ? __pfx___might_resched+0x10/0x10 [ 453.979207][T11276] should_fail_ex+0x3b0/0x4e0 [ 453.983912][T11276] ? tomoyo_encode+0x26f/0x540 [ 453.988816][T11276] should_failslab+0xac/0x100 [ 453.993507][T11276] ? tomoyo_encode+0x26f/0x540 [ 453.998308][T11276] __kmalloc_noprof+0xd8/0x400 [ 454.003114][T11276] tomoyo_encode+0x26f/0x540 [ 454.007751][T11276] tomoyo_realpath_from_path+0x59e/0x5e0 [ 454.013407][T11276] tomoyo_path_number_perm+0x23a/0x880 [ 454.018882][T11276] ? tomoyo_path_number_perm+0x208/0x880 [ 454.024527][T11276] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 454.030537][T11276] ? __pfx_lock_acquire+0x10/0x10 [ 454.035611][T11276] ? __fget_files+0x29/0x470 [ 454.040245][T11276] ? __fget_files+0x3f3/0x470 [ 454.044942][T11276] security_file_ioctl_compat+0xc6/0x2a0 [ 454.050595][T11276] __se_compat_sys_ioctl+0xd6/0xc90 [ 454.055817][T11276] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 454.061664][T11276] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 454.067667][T11276] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.074020][T11276] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 454.080632][T11276] ? lockdep_hardirqs_on+0x99/0x150 [ 454.085866][T11276] __do_fast_syscall_32+0xb4/0x110 [ 454.090997][T11276] ? exc_page_fault+0x590/0x8c0 [ 454.095862][T11276] do_fast_syscall_32+0x34/0x80 [ 454.100816][T11276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.107258][T11276] RIP: 0023:0xf7fc3579 [ 454.111394][T11276] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 454.131059][T11276] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 454.139522][T11276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105518 [ 454.147532][T11276] RDX: 0000000020000c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.155541][T11276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.163521][T11276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 454.171527][T11276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.179525][T11276] [ 454.197468][T11276] ERROR: Out of memory at tomoyo_realpath_from_path. [ 454.239550][T10741] team0 (unregistering): Port device team_slave_1 removed [ 454.326846][T10741] team0 (unregistering): Port device team_slave_0 removed [ 454.535264][ T5277] usb 2-1: USB disconnect, device number 45 [ 454.855981][T11288] FAULT_INJECTION: forcing a failure. [ 454.855981][T11288] name failslab, interval 1, probability 0, space 0, times 0 [ 454.895283][T11288] CPU: 0 UID: 0 PID: 11288 Comm: syz.1.1045 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 454.905775][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 454.915890][T11288] Call Trace: [ 454.919191][T11288] [ 454.922156][T11288] dump_stack_lvl+0x241/0x360 [ 454.926856][T11288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.932106][T11288] ? __pfx__printk+0x10/0x10 [ 454.936742][T11288] ? fs_reclaim_acquire+0x93/0x140 [ 454.941892][T11288] ? __pfx___might_resched+0x10/0x10 [ 454.947230][T11288] should_fail_ex+0x3b0/0x4e0 [ 454.951927][T11288] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 454.957666][T11288] should_failslab+0xac/0x100 [ 454.962357][T11288] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 454.968125][T11288] __kmalloc_noprof+0xd8/0x400 [ 454.972958][T11288] tomoyo_realpath_from_path+0xcf/0x5e0 [ 454.978529][T11288] tomoyo_path_perm+0x2b7/0x740 [ 454.983390][T11288] ? tomoyo_path_perm+0x287/0x740 [ 454.988444][T11288] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 454.993865][T11288] ? __pfx_lock_release+0x10/0x10 [ 454.998939][T11288] ? __d_add+0x500/0x800 [ 455.003210][T11288] ? simple_lookup+0xc1/0xf0 [ 455.007809][T11288] ? lookup_one_qstr_excl+0x12f/0x260 [ 455.013199][T11288] tomoyo_path_symlink+0xde/0x120 [ 455.018246][T11288] ? __pfx_hook_path_symlink+0x10/0x10 [ 455.023764][T11288] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 455.029412][T11288] ? __pfx_filename_create+0x10/0x10 [ 455.034712][T11288] ? __might_fault+0xaa/0x120 [ 455.039516][T11288] security_path_symlink+0x16f/0x370 [ 455.044849][T11288] do_symlinkat+0x136/0x3a0 [ 455.049389][T11288] ? __pfx_do_symlinkat+0x10/0x10 [ 455.054453][T11288] ? getname_flags+0x1e3/0x540 [ 455.059229][T11288] __ia32_sys_symlink+0x7a/0x90 [ 455.064181][T11288] __do_fast_syscall_32+0xb4/0x110 [ 455.069319][T11288] ? exc_page_fault+0x590/0x8c0 [ 455.074191][T11288] do_fast_syscall_32+0x34/0x80 [ 455.079080][T11288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.085424][T11288] RIP: 0023:0xf741d579 [ 455.089511][T11288] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 455.109587][T11288] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 455.118033][T11288] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000020000000 [ 455.126016][T11288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.134000][T11288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.142000][T11288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.149999][T11288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.157990][T11288] [ 455.163604][T11288] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.484225][ T5278] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 455.659791][ T5278] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 455.669378][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.698709][ T5278] usb 2-1: config 0 descriptor?? [ 455.994935][T10741] team0 (unregistering): Port device team_slave_1 removed [ 456.042308][T11291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.066086][T11291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.078615][T11291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.106146][T11291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.139320][T10741] team0 (unregistering): Port device team_slave_0 removed [ 456.829476][T11279] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1043'. [ 456.879020][T11291] netlink: 'syz.1.1046': attribute type 10 has an invalid length. [ 456.900158][T11291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.911810][T11291] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 456.942578][ T5278] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 456.990883][ T5278] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 456.999436][ T5278] [drm:udl_init] *ERROR* Selecting channel failed [ 457.018759][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.059374][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.068518][ T5278] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 457.104023][ T5278] [drm] Initialized udl on minor 2 [ 457.121808][T11077] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 457.128978][ T5278] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 457.139174][ T5278] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 457.139334][ T5276] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 457.141574][T11077] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 457.158702][ T5276] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 457.171487][ T5278] usb 2-1: USB disconnect, device number 46 [ 457.197507][ T5276] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 457.264329][T11077] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 457.295365][T11077] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 457.393644][T11067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.430203][T11293] FAULT_INJECTION: forcing a failure. [ 457.430203][T11293] name failslab, interval 1, probability 0, space 0, times 0 [ 457.447177][T11067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 457.454671][T11293] CPU: 1 UID: 0 PID: 11293 Comm: syz.3.995 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 457.465080][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 457.475170][T11293] Call Trace: [ 457.478471][T11293] [ 457.481430][T11293] dump_stack_lvl+0x241/0x360 [ 457.486124][T11293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.491351][T11293] ? __pfx__printk+0x10/0x10 [ 457.495971][T11293] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 457.501968][T11293] ? __pfx___might_resched+0x10/0x10 [ 457.507270][T11293] should_fail_ex+0x3b0/0x4e0 [ 457.511987][T11293] should_failslab+0xac/0x100 [ 457.516698][T11293] ? __alloc_skb+0x1c3/0x440 [ 457.521303][T11293] kmem_cache_alloc_node_noprof+0x71/0x320 [ 457.527130][T11293] __alloc_skb+0x1c3/0x440 [ 457.531592][T11293] ? __pfx___alloc_skb+0x10/0x10 [ 457.536536][T11293] ? netlink_ack_tlv_len+0x6e/0x200 [ 457.541742][T11293] netlink_ack+0x13f/0xa30 [ 457.546340][T11293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.551814][T11293] netlink_rcv_skb+0x262/0x430 [ 457.556593][T11293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.562058][T11293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.567364][T11293] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.572585][T11293] netlink_unicast+0x7f6/0x990 [ 457.577369][T11293] ? __pfx_netlink_unicast+0x10/0x10 [ 457.582666][T11293] ? __virt_addr_valid+0x183/0x530 [ 457.587817][T11293] ? __check_object_size+0x48e/0x900 [ 457.593146][T11293] netlink_sendmsg+0x8e4/0xcb0 [ 457.598088][T11293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.603419][T11293] ? __pfx_lock_release+0x10/0x10 [ 457.608494][T11293] ? aa_sock_msg_perm+0x91/0x160 [ 457.613479][T11293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.618808][T11293] __sock_sendmsg+0x221/0x270 [ 457.623522][T11293] ____sys_sendmsg+0x52a/0x7e0 [ 457.628338][T11293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.633692][T11293] __sys_sendmsg+0x2aa/0x390 [ 457.638343][T11293] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.643502][T11293] ? vfs_write+0x7bf/0xc90 [ 457.648022][T11293] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 457.654649][T11293] ? lockdep_hardirqs_on+0x99/0x150 [ 457.659890][T11293] __do_fast_syscall_32+0xb4/0x110 [ 457.665047][T11293] ? exc_page_fault+0x590/0x8c0 [ 457.670032][T11293] do_fast_syscall_32+0x34/0x80 [ 457.674923][T11293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.681321][T11293] RIP: 0023:0xf746d579 [ 457.685421][T11293] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 457.705072][T11293] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 457.713547][T11293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 457.721562][T11293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.729886][T11293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.737899][T11293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 457.745904][T11293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.753945][T11293] [ 457.805324][T11067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 457.841393][T11067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 457.987530][ T5276] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 458.052310][T11300] netlink: 'syz.4.1049': attribute type 29 has an invalid length. [ 458.066540][T11300] netlink: 'syz.4.1049': attribute type 29 has an invalid length. [ 458.082021][T11077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.137493][T11077] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.172797][ T5277] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 458.194784][ T5276] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 458.227321][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.244920][T11067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.272000][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.279161][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.288489][ T5276] usb 2-1: config 0 descriptor?? [ 458.315074][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 458.341267][ T5277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.357038][ T5277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.379762][ T5277] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 458.399747][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 458.427703][ T5277] usb 4-1: SerialNumber: syz [ 458.568189][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 458.625404][T11315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.653166][T11315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.683311][T11297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.692238][ T29] audit: type=1326 audit(1727125950.418:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 458.783357][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 458.787958][T11315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.811009][T11297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.823832][T11067] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.826037][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 458.856888][ T29] audit: type=1326 audit(1727125950.418:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 458.866662][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 458.894799][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.897642][T11315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.902102][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.926572][ T29] audit: type=1326 audit(1727125950.418:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 458.952081][ T5277] usb 4-1: 0:2 : does not exist [ 458.961487][ T5277] usb 4-1: unit 5: unexpected type 0x0a [ 458.984110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.991324][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.003698][ T5277] usb 4-1: USB disconnect, device number 74 [ 459.019145][ T29] audit: type=1326 audit(1727125950.418:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 459.029162][ T9] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 459.078428][ T9762] udevd[9762]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.109198][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.126274][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.132947][ T9] usb 5-1: Product: syz [ 459.133425][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.138823][ T9] usb 5-1: Manufacturer: syz [ 459.149768][ T29] audit: type=1326 audit(1727125950.428:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 459.180716][T11315] netlink: 'syz.1.1047': attribute type 10 has an invalid length. [ 459.189198][ T29] audit: type=1326 audit(1727125950.428:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 459.215287][ T29] audit: type=1326 audit(1727125950.428:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 459.218551][ T9] usb 5-1: SerialNumber: syz [ 459.243504][ T29] audit: type=1326 audit(1727125950.428:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 459.289734][ T5276] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 459.302524][ T5276] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 459.311086][ T5276] [drm:udl_init] *ERROR* Selecting channel failed [ 459.319233][ T29] audit: type=1326 audit(1727125950.428:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 459.343094][ T9] usb 5-1: config 0 descriptor?? [ 459.365993][ T29] audit: type=1326 audit(1727125950.428:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 459.390030][T11077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.405413][ T5276] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 459.412577][ T5276] [drm] Initialized udl on minor 2 [ 459.418361][ T5276] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 459.429728][ T5276] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 459.437991][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 459.445960][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 459.458671][ T5276] usb 2-1: USB disconnect, device number 47 [ 459.603048][T11077] veth0_vlan: entered promiscuous mode [ 459.636746][ T9] usb 5-1: USB disconnect, device number 86 [ 459.638474][T11077] veth1_vlan: entered promiscuous mode [ 459.674342][T11067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.749120][T11077] veth0_macvtap: entered promiscuous mode [ 459.783015][T11067] veth0_vlan: entered promiscuous mode [ 459.794278][T11067] veth1_vlan: entered promiscuous mode [ 459.829790][T11067] veth0_macvtap: entered promiscuous mode [ 459.832082][T11067] veth1_macvtap: entered promiscuous mode [ 459.839790][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.839818][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.839834][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.839850][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.839865][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.839883][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.839898][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.839916][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.847507][T11067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.853077][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.853101][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.853114][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.853129][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.853142][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.853157][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.853170][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.853185][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.854175][T11067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.857866][T11067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.857923][T11067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.857957][T11067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.857989][T11067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.884597][T11077] veth1_macvtap: entered promiscuous mode [ 459.964233][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.964256][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.964267][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.964279][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.964289][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.964301][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.964312][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.964323][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.964334][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.964345][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.965341][T11077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.984392][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.984412][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.984423][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.984435][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.984446][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.984458][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.984468][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.984480][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.984490][T11077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.984515][T11077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.985588][T11077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.999390][T11077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.999433][T11077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.999467][T11077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.999511][T11077] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.036664][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.036691][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.167223][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.167250][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.631020][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.647277][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.672712][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.683337][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.008129][ T5276] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 461.178040][ T939] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 461.185852][T10290] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 461.193767][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 461.201995][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.221564][T11344] Cannot find set identified by id 0 to match [ 461.231279][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.253381][ T5276] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 461.263139][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.282772][ T5276] usb 5-1: config 0 descriptor?? [ 461.307956][ T5276] hub 5-1:0.0: USB hub found [ 461.349718][ T939] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 461.361704][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.373276][T10290] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 461.384458][T10290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.394344][ T939] usb 4-1: config 0 descriptor?? [ 461.428440][T10290] usb 2-1: config 0 descriptor?? [ 461.458911][T10290] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 461.471113][T11348] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1059'. [ 461.499788][ T5276] hub 5-1:0.0: 2 ports detected [ 461.560659][T11350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1060'. [ 461.589824][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1060'. [ 461.637700][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.676876][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.734250][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.794302][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.856813][T11334] netlink: 'syz.3.1055': attribute type 10 has an invalid length. [ 461.912054][T11334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.923683][T11334] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 461.961454][ T939] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 461.988620][ T939] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 462.017637][ T939] [drm:udl_init] *ERROR* Selecting channel failed [ 462.070895][ T939] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 462.082946][ T939] [drm] Initialized udl on minor 2 [ 462.090073][ T939] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 462.101051][ T939] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 462.110421][ T5278] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 462.121127][ T939] usb 4-1: USB disconnect, device number 75 [ 462.128977][ T5278] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 462.183516][T11335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.223180][T11335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.239807][T10290] gspca_sonixj: reg_w1 err -71 [ 462.244665][T10290] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 462.255703][T10290] usb 2-1: USB disconnect, device number 48 [ 462.987684][ T25] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 463.147519][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 463.154686][ T25] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 463.164540][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.166518][T11380] raw_sendmsg: syz.1.1069 forgot to set AF_INET. Fix it! [ 463.182166][ T25] usb 4-1: config 0 descriptor?? [ 463.206288][ T25] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 463.715464][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 463.715486][ T29] audit: type=1326 audit(1727125955.458:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.4.1054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7fc00000 [ 463.750370][ T5276] hub 5-1:0.0: set hub depth failed [ 463.774902][ T5276] usb 5-1: USB disconnect, device number 87 [ 463.787556][T10290] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 463.839643][ T29] audit: type=1326 audit(1727125955.588:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.4.1072" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 463.961370][T10290] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 463.975843][T10290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.993486][T10290] usb 3-1: Product: syz [ 463.998093][T10290] usb 3-1: Manufacturer: syz [ 464.002721][T10290] usb 3-1: SerialNumber: syz [ 464.021359][T10290] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 464.066782][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 464.977264][ T46] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 465.087819][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 465.097245][ T9] ath9k_htc: Failed to initialize the device [ 465.129814][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 465.130896][ T46] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 465.152944][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.167796][ T46] usb 5-1: config 0 descriptor?? [ 465.355184][ T9] usb 3-1: USB disconnect, device number 78 [ 465.392657][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.403057][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.414733][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.425293][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.440590][T11394] netlink: 'syz.4.1074': attribute type 10 has an invalid length. [ 465.462461][ T46] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 465.478602][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 465.486824][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 465.508418][ T46] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 465.515151][ T46] [drm] Initialized udl on minor 2 [ 465.529417][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 465.540435][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 465.553424][ T5277] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 465.563068][ T46] usb 5-1: USB disconnect, device number 88 [ 465.576235][ T5277] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 465.666070][ T9] usb 4-1: USB disconnect, device number 76 [ 465.852002][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 465.895950][ T5280] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 465.917274][ T5280] dvb_usb_az6027 1-1:2.75: probe with driver dvb_usb_az6027 failed with error -110 [ 465.990331][ T5280] usb 1-1: USB disconnect, device number 54 [ 466.300895][ T5280] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 466.327412][T10290] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 466.356873][T11416] netlink: 'syz.4.1082': attribute type 29 has an invalid length. [ 466.368250][T11416] netlink: 'syz.4.1082': attribute type 29 has an invalid length. [ 466.432344][T11418] netlink: 'syz.4.1083': attribute type 2 has an invalid length. [ 466.441828][T11418] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1083'. [ 466.467286][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 466.475022][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.489296][T10290] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 466.507376][ T5280] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 466.516632][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.525066][T10290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.548608][T10290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.565333][T10290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 466.579777][ T5280] usb 1-1: config 0 descriptor?? [ 466.593347][ T5280] hub 1-1:0.0: bad descriptor, ignoring hub [ 466.600411][ T5280] hub 1-1:0.0: probe with driver hub failed with error -5 [ 466.610904][T10290] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 466.621397][ T5280] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 466.628960][T10290] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 466.639533][T10290] usb 3-1: Manufacturer: syz [ 466.649821][T10290] usb 3-1: config 0 descriptor?? [ 466.788201][ T46] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 466.907614][ T5280] usb 1-1: USB disconnect, device number 55 [ 466.947289][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 466.954058][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 466.966093][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 466.975367][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.983433][ T46] usb 5-1: Product: syz [ 466.988708][ T46] usb 5-1: Manufacturer: syz [ 466.993438][ T46] usb 5-1: SerialNumber: syz [ 467.009168][ T46] usb 5-1: config 0 descriptor?? [ 467.025171][ T46] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 467.061549][T10290] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 467.069832][T10290] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 467.083911][T10290] appleir 0003:05AC:8243.0025: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 467.257392][ T5277] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 467.437261][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 467.444515][ T5277] usb 1-1: config index 0 descriptor too short (expected 156, got 36) [ 467.457135][ T5277] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 467.475181][ T5277] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 34, changing to 9 [ 467.486409][ T5277] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.502302][ T5277] usb 1-1: config 0 interface 0 altsetting 191 has 2 endpoint descriptors, different from the interface descriptor's value: 144 [ 467.516656][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.525850][ T5277] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 467.536008][ T5277] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 467.544568][ T5277] usb 1-1: Product: syz [ 467.549760][ T5277] usb 1-1: Manufacturer: syz [ 467.554407][ T5277] usb 1-1: SerialNumber: syz [ 467.561540][ T5277] usb 1-1: config 0 descriptor?? [ 467.569913][ T5277] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 467.584595][ T5277] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 467.786526][ T5277] usb 1-1: USB disconnect, device number 56 [ 467.833491][ T5277] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 467.874642][T11426] syz.3.1086 (11426): drop_caches: 0 [ 468.126621][ T29] audit: type=1326 audit(1727125959.868:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.3.1088" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0 [ 468.607253][T10290] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 468.759133][T10290] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 468.768884][T10290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.779478][T10290] usb 1-1: config 0 descriptor?? [ 469.019996][T11434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.041591][T11434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.050513][ T46] gspca_zc3xx: reg_r err -32 [ 469.066058][T11434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.109134][T11434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.132371][T11434] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 469.189683][T11434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.212271][T11434] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 469.242474][T10290] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 469.277232][T10290] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 469.285383][T10290] [drm:udl_init] *ERROR* Selecting channel failed [ 469.312809][T10290] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 469.327332][T10290] [drm] Initialized udl on minor 2 [ 469.339005][T10290] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.356153][T10290] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 469.366339][T11444] netlink: 'syz.2.1093': attribute type 29 has an invalid length. [ 469.383007][ T5278] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.386867][T11444] netlink: 'syz.2.1093': attribute type 29 has an invalid length. [ 469.397049][T10290] usb 1-1: USB disconnect, device number 57 [ 469.406387][ T5278] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 469.511045][ T3210] usb 3-1: USB disconnect, device number 79 [ 469.527450][T11452] netlink: 'syz.2.1095': attribute type 10 has an invalid length. [ 469.535331][T11452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1095'. [ 469.572105][T11452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.647483][ T46] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 469.661787][ T46] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 469.850307][T11452] futex_wake_op: syz.2.1095 tries to shift op by -1; fix this program [ 470.497452][ T25] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 470.502881][ T29] audit: type=1326 audit(1727125962.248:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1101" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 470.536191][T11473] can: request_module (can-proto-0) failed. [ 470.630062][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 470.677918][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 470.686436][ T25] usb 1-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 470.704799][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 470.715896][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.736687][ T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 470.746094][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.784055][T11480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.791965][T11480] IPv6: NLM_F_CREATE should be set when creating new route [ 470.799265][T11480] IPv6: NLM_F_CREATE should be set when creating new route [ 470.974541][ T46] usb 5-1: USB disconnect, device number 89 [ 470.981023][ T25] usb 1-1: string descriptor 0 read error: -71 [ 471.000099][T11484] netlink: 'syz.3.1105': attribute type 29 has an invalid length. [ 471.017701][ T25] hub 1-1:1.0: bad descriptor, ignoring hub [ 471.024066][ T25] hub 1-1:1.0: probe with driver hub failed with error -5 [ 471.044344][T11484] netlink: 'syz.3.1105': attribute type 29 has an invalid length. [ 471.053852][ T25] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 471.100974][ T25] usb 1-1: USB disconnect, device number 58 [ 471.389654][ T3210] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 471.539007][ T3210] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 471.558804][ T3210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.578536][ T3210] usb 4-1: config 0 descriptor?? [ 471.624014][ T29] audit: type=1326 audit(1727125963.368:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 471.674401][ T29] audit: type=1326 audit(1727125963.368:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 471.707444][ T29] audit: type=1326 audit(1727125963.368:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 471.747580][ T29] audit: type=1326 audit(1727125963.368:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 471.828167][ T29] audit: type=1326 audit(1727125963.368:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 471.894067][ T29] audit: type=1326 audit(1727125963.368:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 471.922274][ T2904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.961604][T11505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.979806][ T29] audit: type=1326 audit(1727125963.368:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 472.004174][T11505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.016793][T11505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.026786][T11505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.050738][T11505] netlink: 'syz.3.1107': attribute type 10 has an invalid length. [ 472.072353][ T29] audit: type=1326 audit(1727125963.368:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 472.096063][ T29] audit: type=1326 audit(1727125963.368:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.2.1109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 472.153461][ T2904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.175102][ T3210] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 472.198048][ T3210] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 472.213747][ T3210] [drm:udl_init] *ERROR* Selecting channel failed [ 472.239751][ T3210] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 472.246882][ T3210] [drm] Initialized udl on minor 2 [ 472.255581][ T3210] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 472.294647][ T3210] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 472.301912][ T46] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 472.330034][ T2904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.349952][ T46] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 472.358966][ T3210] usb 4-1: USB disconnect, device number 77 [ 472.379812][ T46] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 472.498688][ T2904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.520963][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.545438][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.559086][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.580330][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.589786][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 472.599051][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.709740][ T2904] bridge_slave_1: left allmulticast mode [ 472.715446][ T2904] bridge_slave_1: left promiscuous mode [ 472.717023][ T46] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 472.722255][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.771368][ T5277] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 472.805269][ T2904] bridge_slave_0: left allmulticast mode [ 472.811803][ T2904] bridge_slave_0: left promiscuous mode [ 472.817839][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.951488][ T46] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 472.960923][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.969258][ T46] usb 3-1: Product: syz [ 472.973461][ T46] usb 3-1: Manufacturer: syz [ 472.978677][ T46] usb 3-1: SerialNumber: syz [ 472.988917][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 473.004093][ T46] usb 3-1: config 0 descriptor?? [ 473.018685][ T46] ch341 3-1:0.0: ch341-uart converter detected [ 473.035090][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 473.051913][ T5277] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=c3.34 [ 473.076970][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.085599][ T5277] usb 5-1: Product: syz [ 473.090594][ T5277] usb 5-1: Manufacturer: syz [ 473.095267][ T5277] usb 5-1: SerialNumber: syz [ 473.104706][ T5277] usb 5-1: config 0 descriptor?? [ 473.113153][ T5277] sisusb 5-1:0.0: Invalid USB2VGA device [ 473.144105][ T5277] sisusb 5-1:0.0: probe with driver sisusb failed with error -22 [ 473.341847][ T5277] usb 5-1: USB disconnect, device number 90 [ 473.561968][ T5228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.591472][ T5228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.611204][ T5228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.628775][ T5228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.644247][ T5228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 473.663014][ T5228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 473.795081][ T2904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.813201][ T2904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.825565][ T2904] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 473.835358][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.846544][ T2904] bond0 (unregistering): Released all slaves [ 473.853039][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.084621][ T46] usb 3-1: failed to send control message: -71 [ 474.092229][ T46] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 474.118911][ T46] usb 3-1: USB disconnect, device number 80 [ 474.129853][ T46] ch341 3-1:0.0: device disconnected [ 474.172355][T11542] dccp_close: ABORT with 32 bytes unread [ 474.433471][T11532] chnl_net:caif_netlink_parms(): no params data found [ 474.674802][T11561] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1122'. [ 474.691850][ T5228] Bluetooth: hci1: command tx timeout [ 474.849166][ T2904] hsr_slave_0: left promiscuous mode [ 474.866466][ T2904] hsr_slave_1: left promiscuous mode [ 474.885285][ T2904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.951727][ T2904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.968751][ T2904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.986509][ T2904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.037345][ T25] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 475.074774][ T2904] veth1_macvtap: left promiscuous mode [ 475.087339][ T2904] veth0_macvtap: left promiscuous mode [ 475.099701][ T2904] veth1_vlan: left promiscuous mode [ 475.113303][ T2904] veth0_vlan: left promiscuous mode [ 475.127381][ T5896] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 475.218011][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 475.256064][ T25] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 475.277306][ T25] usb 3-1: config 0 has no interface number 0 [ 475.292878][ T25] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 475.317312][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.317548][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 475.334889][ T25] usb 3-1: Product: syz [ 475.341486][ T25] usb 3-1: Manufacturer: syz [ 475.346133][ T25] usb 3-1: SerialNumber: syz [ 475.355416][ T5896] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 475.370668][ T25] usb 3-1: config 0 descriptor?? [ 475.385601][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.409236][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 475.417608][ T5896] usb 5-1: SerialNumber: syz [ 475.677545][ T5276] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 475.703130][ T5896] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 475.735512][ T5228] Bluetooth: hci5: command tx timeout [ 475.811517][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.830027][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.859424][ T5276] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 475.877208][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.893114][ T5276] usb 4-1: config 0 descriptor?? [ 476.054679][ T2904] team0 (unregistering): Port device team_slave_1 removed [ 476.120390][T11578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.135191][T11578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.187177][ T2904] team0 (unregistering): Port device team_slave_0 removed [ 476.379125][ T5276] [drm:udl_init] *ERROR* Selecting channel failed [ 476.401245][ T5276] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 476.401277][ T5276] [drm] Initialized udl on minor 2 [ 476.407693][ T5276] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 476.408045][ T5276] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 476.408679][T10290] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 476.408797][T10290] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 476.484251][ T5276] usb 4-1: USB disconnect, device number 78 [ 476.657759][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.712617][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.769288][ T5228] Bluetooth: hci1: command tx timeout [ 477.372047][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.403134][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.425502][T11532] bridge_slave_0: entered allmulticast mode [ 477.433605][T11532] bridge_slave_0: entered promiscuous mode [ 477.456980][T11512] chnl_net:caif_netlink_parms(): no params data found [ 477.481489][T11532] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.495163][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.506649][T11532] bridge_slave_1: entered allmulticast mode [ 477.514492][T11532] bridge_slave_1: entered promiscuous mode [ 477.578337][T11532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.605777][T11532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.704319][T11532] team0: Port device team_slave_0 added [ 477.713054][T11532] team0: Port device team_slave_1 added [ 477.807403][ T5228] Bluetooth: hci5: command tx timeout [ 477.853985][T11532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.890307][T11532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.923320][ T25] usb 3-1: USB disconnect, device number 81 [ 477.930393][ T25] f81534a_ctrl 3-1:0.88: failed to set register 0x116: -19 [ 477.938291][ T25] f81534a_ctrl 3-1:0.88: failed to enable ports: -19 [ 477.986030][T11532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.031014][T11532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.050481][T11532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.102127][T11532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.118130][T11512] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.129578][T11512] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.144533][T11512] bridge_slave_0: entered allmulticast mode [ 478.166935][T11512] bridge_slave_0: entered promiscuous mode [ 478.233347][T11512] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.287563][T11512] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.294848][T11512] bridge_slave_1: entered allmulticast mode [ 478.312241][ T46] usb 5-1: USB disconnect, device number 91 [ 478.358834][T11512] bridge_slave_1: entered promiscuous mode [ 478.666852][T11532] hsr_slave_0: entered promiscuous mode [ 478.676876][T11532] hsr_slave_1: entered promiscuous mode [ 478.696133][T11532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.715944][T11532] Cannot create hsr debugfs directory [ 478.738832][T11512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.783406][T11512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.797542][ T46] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 478.800731][T11627] netlink: 'syz.3.1135': attribute type 11 has an invalid length. [ 478.847454][ T5228] Bluetooth: hci1: command tx timeout [ 478.901850][T11512] team0: Port device team_slave_0 added [ 478.911340][T11512] team0: Port device team_slave_1 added [ 478.937870][T10290] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 478.968880][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.982629][T11512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.989885][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.989892][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.989943][ T46] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 479.027654][T11512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.050371][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.088939][ T46] usb 5-1: config 0 descriptor?? [ 479.109596][T10290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.120671][T11512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.129235][T10290] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.130224][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.144963][T10290] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 479.185058][T11512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.196915][T10290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.218622][T10290] usb 3-1: config 0 descriptor?? [ 479.284444][T11633] netlink: 'syz.3.1137': attribute type 29 has an invalid length. [ 479.324428][T11512] hsr_slave_0: entered promiscuous mode [ 479.338121][T11512] hsr_slave_1: entered promiscuous mode [ 479.349941][T11512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.365465][T11512] Cannot create hsr debugfs directory [ 479.455177][T11532] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.495588][T11633] netlink: 'syz.3.1137': attribute type 29 has an invalid length. [ 479.529694][ T46] wacom 0003:056A:00D0.0026: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 479.549893][ T46] wacom 0003:056A:00D0.0026: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 479.578453][ T46] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0026/input/input37 [ 479.725124][T11532] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.814424][ T46] usb 5-1: USB disconnect, device number 92 [ 479.887330][ T5228] Bluetooth: hci5: command tx timeout [ 479.935183][T11532] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.994176][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 479.994194][ T29] audit: type=1326 audit(1727125971.728:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.3.1138" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0 [ 480.089680][T11532] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.259730][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 480.543941][T11665] fuse: Bad value for 'fd' [ 480.927394][ T5228] Bluetooth: hci1: command tx timeout [ 481.197303][T11532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.221597][T11532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.244251][T11532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.265969][T11532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.445086][T11512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.480446][T11512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 481.522664][T11512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 481.548591][T11512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 481.642172][T11532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.680450][T11532] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.704760][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.711963][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.778387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.785566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.819557][ T25] usb 3-1: USB disconnect, device number 82 [ 481.955744][T11512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.968035][ T5228] Bluetooth: hci5: command tx timeout [ 482.037969][ T5277] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 482.065148][T11512] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.093238][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.100438][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.140251][T11532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.163521][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.170697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.246265][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.278465][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.300231][T11532] veth0_vlan: entered promiscuous mode [ 482.306601][ T5277] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 482.322216][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.344926][T11532] veth1_vlan: entered promiscuous mode [ 482.392280][ T5277] usb 5-1: config 0 descriptor?? [ 482.411580][T11512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.499674][T11532] veth0_macvtap: entered promiscuous mode [ 482.521904][T11532] veth1_macvtap: entered promiscuous mode [ 482.576329][T11512] veth0_vlan: entered promiscuous mode [ 482.604596][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.627462][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.638337][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.649919][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.657277][ T5280] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 482.667185][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.696162][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.715372][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.735027][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.747172][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.757973][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.770674][T11532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.792195][T11512] veth1_vlan: entered promiscuous mode [ 482.812303][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.828739][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 482.840585][ T5280] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 482.841839][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.861280][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.868011][ T5277] lenovo 0003:17EF:6062.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 482.886515][ T5280] usb 3-1: Product: syz [ 482.893500][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.894551][ T5280] usb 3-1: Manufacturer: syz [ 482.920537][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.933118][ T5280] usb 3-1: SerialNumber: syz [ 482.946493][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.954754][ T5280] usb 3-1: config 0 descriptor?? [ 482.966542][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.988578][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.011855][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.028112][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.052957][ T3210] usb 5-1: USB disconnect, device number 93 [ 483.065236][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.102082][T11532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.156465][T11532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.165769][T11532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.176217][T11532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.187956][ T5280] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 483.197301][T11532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.294133][T11512] veth0_macvtap: entered promiscuous mode [ 483.331819][T11512] veth1_macvtap: entered promiscuous mode [ 483.399661][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.443960][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.469492][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.506462][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.532632][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.555300][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.568190][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.580640][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.594846][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.614841][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.634707][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.672256][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.692250][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.732682][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.782925][T11512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.816198][ T5280] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 483.829066][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.849832][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.862853][ T5280] usb 3-1: USB disconnect, device number 83 [ 483.890962][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.914380][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.926761][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.945358][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.956027][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.984649][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.003747][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.015341][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.033494][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.044540][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.061559][T11512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.119207][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.155533][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.193519][T11512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.217207][T11512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.225975][T11512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.253726][T11512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.734512][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.793344][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.872999][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.897456][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.027224][ T29] audit: type=1326 audit(1727125976.768:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.056720][T11755] syzkaller0: entered promiscuous mode [ 485.108259][T11755] syzkaller0: entered allmulticast mode [ 485.122803][ T29] audit: type=1326 audit(1727125976.768:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.173328][T10741] syzkaller0: tun_net_xmit 48 [ 485.204499][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 485.226117][ T29] audit: type=1326 audit(1727125976.768:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.305317][ T29] audit: type=1326 audit(1727125976.768:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.394643][ T29] audit: type=1326 audit(1727125976.808:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.437863][ T5276] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 485.484447][T11764] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 485.487532][ T29] audit: type=1326 audit(1727125976.808:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.524112][ T29] audit: type=1326 audit(1727125976.808:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.548663][ T29] audit: type=1326 audit(1727125976.808:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.602415][ T29] audit: type=1326 audit(1727125976.808:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.609067][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.643823][ T29] audit: type=1326 audit(1727125976.808:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11756 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 485.667679][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.715033][ T5276] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 485.734857][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.767028][ T5276] usb 2-1: config 0 descriptor?? [ 485.796347][ T5276] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 485.819917][ T46] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 486.028287][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 486.055121][ T46] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 486.066483][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.079022][ T46] usb 1-1: config 0 descriptor?? [ 486.109572][ T46] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 486.306017][ T46] usb 1-1: Detected FT232A [ 486.327982][ T46] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 486.388730][ T46] usb 1-1: USB disconnect, device number 59 [ 486.411027][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 486.467028][ T46] ftdi_sio 1-1:0.0: device disconnected [ 488.256727][T11856] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 488.263319][T11856] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 488.288589][T11856] vhci_hcd vhci_hcd.0: Device attached [ 488.334434][T11857] usbip_core: unknown command [ 488.343421][T11857] vhci_hcd: unknown pdu 3020988904 [ 488.351039][T11857] usbip_core: unknown command [ 488.372160][ T3004] vhci_hcd: stop threads [ 488.380416][ T3004] vhci_hcd: release socket [ 488.385589][ T3004] vhci_hcd: disconnect device [ 490.180447][ T5277] usb 2-1: USB disconnect, device number 49 [ 490.188323][T11876] FAULT_INJECTION: forcing a failure. [ 490.188323][T11876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.262522][T11876] CPU: 1 UID: 0 PID: 11876 Comm: syz.4.1174 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 490.273024][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 490.283128][T11876] Call Trace: [ 490.286458][T11876] [ 490.289428][T11876] dump_stack_lvl+0x241/0x360 [ 490.294164][T11876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.299436][T11876] ? __pfx__printk+0x10/0x10 [ 490.304121][T11876] ? snprintf+0xda/0x120 [ 490.308428][T11876] should_fail_ex+0x3b0/0x4e0 [ 490.313259][T11876] _copy_to_user+0x2f/0xb0 [ 490.317736][T11876] simple_read_from_buffer+0xca/0x150 [ 490.323172][T11876] proc_fail_nth_read+0x1e9/0x250 [ 490.328267][T11876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.333870][T11876] ? rw_verify_area+0x55e/0x6f0 [ 490.338789][T11876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.344376][T11876] vfs_read+0x201/0xbc0 [ 490.348557][T11876] ? __pfx_lock_release+0x10/0x10 [ 490.353639][T11876] ? __pfx_vfs_read+0x10/0x10 [ 490.358373][T11876] ? __fget_files+0x3f3/0x470 [ 490.363292][T11876] ? __fdget_pos+0x24e/0x320 [ 490.367924][T11876] ksys_read+0x1a0/0x2c0 [ 490.372196][T11876] ? __pfx_ksys_read+0x10/0x10 [ 490.376985][T11876] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 490.383601][T11876] ? lockdep_hardirqs_on+0x99/0x150 [ 490.388907][T11876] __do_fast_syscall_32+0xb4/0x110 [ 490.394038][T11876] ? exc_page_fault+0x590/0x8c0 [ 490.398905][T11876] do_fast_syscall_32+0x34/0x80 [ 490.403772][T11876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.410118][T11876] RIP: 0023:0xf7fc3579 [ 490.414198][T11876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 490.433863][T11876] RSP: 002b:00000000f57465a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 490.442317][T11876] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5746620 [ 490.450328][T11876] RDX: 000000000000000f RSI: 00000000f744bff4 RDI: 0000000000000000 [ 490.458326][T11876] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 490.466314][T11876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 490.474301][T11876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.482303][T11876] [ 490.778902][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 490.845810][T11896] batadv0: Device is already in use. [ 491.001367][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 491.327950][ T5277] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 491.372666][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.522200][ T5277] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.543589][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 491.573765][ T5277] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 491.604153][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.624167][ T5277] usb 2-1: Product: Й [ 491.633304][ T5277] usb 2-1: SerialNumber: 䝐꨺঱馱｝⅃ﳋ潙 [ 491.644114][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.655475][ T5276] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 491.664392][ T5277] usb 2-1: config 0 descriptor?? [ 491.763518][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.797288][ T5276] usb 4-1: device descriptor read/64, error -71 [ 491.894436][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.996672][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.008265][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.018444][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.033408][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.055583][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 492.062834][ T5276] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 492.070980][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.211078][ T5276] usb 4-1: device descriptor read/64, error -71 [ 492.359058][ T5276] usb usb4-port1: attempt power cycle [ 492.374270][ T11] bridge_slave_1: left allmulticast mode [ 492.381280][ T11] bridge_slave_1: left promiscuous mode [ 492.390548][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.409231][ T11] bridge_slave_0: left allmulticast mode [ 492.415139][ T11] bridge_slave_0: left promiscuous mode [ 492.421785][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.533119][ T5277] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 492.555402][ T5277] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 492.602938][ T5277] usb 2-1: USB disconnect, device number 50 [ 492.651728][ T46] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 492.718245][ T5276] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 492.755517][ T5276] usb 4-1: device descriptor read/8, error -71 [ 492.849338][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 492.860375][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 492.873367][ T46] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 492.883542][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.891720][ T46] usb 3-1: Product: syz [ 492.895913][ T46] usb 3-1: Manufacturer: syz [ 492.900686][ T46] usb 3-1: SerialNumber: syz [ 492.908726][ T46] usb 3-1: config 0 descriptor?? [ 492.930281][ T46] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 492.938788][ T46] usb 3-1: Detected SIO [ 492.946485][ T46] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 493.022667][ T5276] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 493.068916][ T5276] usb 4-1: device descriptor read/8, error -71 [ 493.106661][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.123145][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.139223][ T11] bond0 (unregistering): Released all slaves [ 493.182173][ T5276] usb usb4-port1: unable to enumerate USB device [ 493.337175][ T25] usb 3-1: USB disconnect, device number 84 [ 493.368574][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 493.380250][ T25] ftdi_sio 3-1:0.0: device disconnected [ 493.609061][ T5277] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 493.694994][T11944] chnl_net:caif_netlink_parms(): no params data found [ 493.767251][ T46] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 493.783745][ T11] hsr_slave_0: left promiscuous mode [ 493.797226][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 493.809813][ T5277] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 493.827319][ T11] hsr_slave_1: left promiscuous mode [ 493.835364][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.837254][ T5277] usb 5-1: config 0 has no interface number 0 [ 493.853059][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.868084][ T5277] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 493.882464][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.890304][ T5277] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 493.905715][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.915475][ T5277] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 493.926029][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 493.945868][ T5277] usb 5-1: Product: syz [ 493.950509][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 493.957607][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.971222][ T5277] usb 5-1: SerialNumber: syz [ 493.978505][ T46] usb 2-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=c0.3b [ 493.984598][ T11] veth1_macvtap: left promiscuous mode [ 493.989285][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.003076][ T5277] usb 5-1: config 0 descriptor?? [ 494.012665][ T11] veth0_macvtap: left promiscuous mode [ 494.022299][ T46] usb 2-1: Product: syz [ 494.026523][ T46] usb 2-1: Manufacturer: syz [ 494.031374][ T5277] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 494.040773][ T11] veth1_vlan: left promiscuous mode [ 494.046210][ T11] veth0_vlan: left promiscuous mode [ 494.053718][ T46] usb 2-1: SerialNumber: syz [ 494.087639][ T46] usb 2-1: config 0 descriptor?? [ 494.101493][ T46] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617 [ 494.127864][ T5228] Bluetooth: hci1: command tx timeout [ 494.297363][ T46] gspca_sn9c20x: Write register 1000 failed -71 [ 494.324573][ T46] gspca_sn9c20x: Device initialization failed [ 494.351284][ T46] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 494.381185][ T46] usb 2-1: USB disconnect, device number 51 [ 494.502081][ T5277] usb 5-1: USB disconnect, device number 94 [ 495.514695][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 495.914361][ T11] team0 (unregistering): Port device team_slave_1 removed [ 496.046722][ T11] team0 (unregistering): Port device team_slave_0 removed [ 496.095804][T12012] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 496.209035][ T5228] Bluetooth: hci1: command tx timeout [ 496.752977][T12002] dvmrp6: entered allmulticast mode [ 496.759271][T12003] dvmrp6: left allmulticast mode [ 497.061694][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.078918][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.086206][T11944] bridge_slave_0: entered allmulticast mode [ 497.128307][T11944] bridge_slave_0: entered promiscuous mode [ 497.184082][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.215695][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.248348][T11944] bridge_slave_1: entered allmulticast mode [ 497.255460][T11944] bridge_slave_1: entered promiscuous mode [ 497.267377][ T5277] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 497.401809][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.437154][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 497.445188][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.454488][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.501908][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.536816][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.587138][ T5277] usb 5-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 497.615745][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.623335][T11944] team0: Port device team_slave_0 added [ 497.654114][ T5277] usb 5-1: config 0 descriptor?? [ 497.663673][T11944] team0: Port device team_slave_1 added [ 497.839276][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.866840][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.892965][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.963440][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.999546][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.006591][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.051011][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 498.069781][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 498.078669][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 498.085873][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.109820][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 498.127722][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 498.135203][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 498.287524][ T5228] Bluetooth: hci1: command tx timeout [ 498.295325][ T5277] ntrig 0003:1B96:000C.0028: unknown main item tag 0x2 [ 498.310635][ T5277] ntrig 0003:1B96:000C.0028: hidraw0: USB HID v0.00 Device [HID 1b96:000c] on usb-dummy_hcd.4-1/input0 [ 498.385392][T11944] hsr_slave_0: entered promiscuous mode [ 498.408395][T11944] hsr_slave_1: entered promiscuous mode [ 498.426742][T11944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.443347][T12060] input: syz0 as /devices/virtual/input/input41 [ 498.477200][T11944] Cannot create hsr debugfs directory [ 498.515022][ T5277] usb 5-1: USB disconnect, device number 95 [ 498.563078][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 498.575554][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.826143][T12068] netlink: 'syz.3.1220': attribute type 29 has an invalid length. [ 498.839920][T12068] netlink: 'syz.3.1220': attribute type 29 has an invalid length. [ 498.875061][T12068] netlink: 'syz.3.1220': attribute type 29 has an invalid length. [ 499.197210][ T5277] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 499.369333][T12054] chnl_net:caif_netlink_parms(): no params data found [ 499.378925][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.403789][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.424402][ T5277] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 499.434665][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.450072][ T5277] usb 4-1: config 0 descriptor?? [ 499.487228][T10290] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 499.595462][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.609425][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.616741][T12054] bridge_slave_0: entered allmulticast mode [ 499.643794][T12054] bridge_slave_0: entered promiscuous mode [ 499.659966][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.681476][T10290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.697351][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.705068][T12054] bridge_slave_1: entered allmulticast mode [ 499.705763][T12074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.712882][T12054] bridge_slave_1: entered promiscuous mode [ 499.730319][T10290] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.761349][T10290] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 499.772521][T12074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.780990][T10290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.802692][T10290] usb 5-1: config 0 descriptor?? [ 499.816879][T10290] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 499.818530][T12054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.942943][ T3004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.989791][T12054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.025575][ T5277] wacom 0003:056A:0059.0029: unknown main item tag 0x0 [ 500.060627][ T5277] wacom 0003:056A:0059.0029: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.3-1/input0 [ 500.218211][ T5228] Bluetooth: hci0: command tx timeout [ 500.232629][T12054] team0: Port device team_slave_0 added [ 500.244642][ T5278] usb 4-1: USB disconnect, device number 83 [ 500.312364][ T3004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.359321][T12054] team0: Port device team_slave_1 added [ 500.377858][ T5228] Bluetooth: hci1: command tx timeout [ 500.514917][ T3004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.561172][T11944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.584694][T12054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.603169][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.630830][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 500.641608][T12054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.646153][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 500.663898][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 500.688642][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 500.688804][ T3004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.717343][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 500.727387][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 500.759561][T11944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.836099][T12054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.868666][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.955644][T12054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.001810][T11944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 501.020428][T11944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 501.182885][T12054] hsr_slave_0: entered promiscuous mode [ 501.195206][T12054] hsr_slave_1: entered promiscuous mode [ 501.208966][T12054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.218510][T12054] Cannot create hsr debugfs directory [ 501.548479][T10290] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 501.566488][ T3004] bridge_slave_1: left promiscuous mode [ 501.575892][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.595908][ T3004] bridge_slave_0: left allmulticast mode [ 501.605319][ T3004] bridge_slave_0: left promiscuous mode [ 501.615967][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.709295][T10290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.721169][T10290] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 501.745292][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.752028][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.767234][T10290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.787729][T10290] usb 4-1: config 0 descriptor?? [ 501.820251][T10290] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 501.839238][T10290] usb 4-1: No valid video chain found. [ 502.003182][T10290] usb 4-1: USB disconnect, device number 84 [ 502.289154][ T5231] Bluetooth: hci0: command tx timeout [ 502.352749][T10290] usb 5-1: USB disconnect, device number 96 [ 502.359621][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.406658][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.429484][ T3004] bond0 (unregistering): Released all slaves [ 502.687178][T12156] ------------[ cut here ]------------ [ 502.692722][T12156] WARNING: CPU: 1 PID: 12156 at include/linux/cpumask.h:135 io_sq_offload_create+0xd2f/0xfd0 [ 502.703148][T12156] Modules linked in: [ 502.707171][T12156] CPU: 1 UID: 0 PID: 12156 Comm: syz.3.1232 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 502.718080][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 502.729654][T12156] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 502.735706][T12156] Code: 3d f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 4c 2e 3d f6 e9 95 f3 ff ff e8 72 7a d3 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 502.756164][T12156] RSP: 0018:ffffc900046b7c20 EFLAGS: 00010283 [ 502.763081][T12156] RAX: ffffffff8bc13f3e RBX: ffffc900046b7dec RCX: 0000000000040000 [ 502.768250][ T5231] Bluetooth: hci5: command tx timeout [ 502.771427][T12156] RDX: ffffc9000acce000 RSI: 00000000000010f1 RDI: 00000000000010f2 [ 502.785219][T12156] RBP: ffffc900046b7d20 R08: ffffffff8bc13c2b R09: 1ffffffff2039055 [ 502.793405][T12156] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff888029f1e000 [ 502.801526][T12156] R13: 0000000002000000 R14: 1ffff920008d6f90 R15: ffffc900046b7ca0 [ 502.809847][T12156] FS: 0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f5756b40 [ 502.818913][T12156] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 502.825588][T12156] CR2: 00000000f7495008 CR3: 0000000051548000 CR4: 00000000003506f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 502.833756][T12156] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 502.841891][T12156] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 502.850701][T12156] Call Trace: [ 502.854042][T12156] [ 502.857017][T12156] ? __warn+0x168/0x4e0 [ 502.861673][T12156] ? io_sq_offload_create+0xd2f/0xfd0 [ 502.867168][T12156] ? report_bug+0x2b3/0x500 [ 502.871741][T12156] ? io_sq_offload_create+0xd2f/0xfd0 [ 502.877245][T12156] ? handle_bug+0x60/0x90 [ 502.881637][T12156] ? exc_invalid_op+0x1a/0x50 [ 502.886372][T12156] ? asm_exc_invalid_op+0x1a/0x20 [ 502.891548][T12156] ? io_sq_offload_create+0xa1b/0xfd0 [ 502.896975][T12156] ? io_sq_offload_create+0xd2e/0xfd0 [ 502.902517][T12156] ? io_sq_offload_create+0xd2f/0xfd0 [ 502.908028][T12156] ? __pfx_io_sq_offload_create+0x10/0x10 [ 502.913826][T12156] ? io_allocate_scq_urings+0x426/0x640 [ 502.919545][T12156] io_uring_create+0x792/0x1360 [ 502.924465][T12156] __se_sys_io_uring_setup+0x2ba/0x330 [ 502.930099][T12156] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 502.936159][T12156] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 502.942900][T12156] ? lockdep_hardirqs_on+0x99/0x150 [ 502.948672][T12156] __do_fast_syscall_32+0xb4/0x110 [ 502.954136][T12156] ? exc_page_fault+0x590/0x8c0 [ 502.959141][T12156] do_fast_syscall_32+0x34/0x80 [ 502.964054][T12156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.970649][T12156] RIP: 0023:0xf746d579 [ 502.974769][T12156] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 502.994519][T12156] RSP: 002b:00000000f575651c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 503.003146][T12156] RAX: ffffffffffffffda RBX: 0000000000004687 RCX: 0000000020002180 [ 503.011555][T12156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.019623][T12156] RBP: 00000000200000c0 R08: 0000000000000000 R09: 0000000000000000 [ 503.027727][T12156] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 503.035776][T12156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.044322][T12156] [ 503.047492][T12156] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 503.054902][T12156] CPU: 1 UID: 0 PID: 12156 Comm: syz.3.1232 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 503.065367][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 503.075465][T12156] Call Trace: [ 503.078778][T12156] [ 503.081737][T12156] dump_stack_lvl+0x241/0x360 [ 503.086463][T12156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.091709][T12156] ? __pfx__printk+0x10/0x10 [ 503.096346][T12156] ? vscnprintf+0x5d/0x90 [ 503.100735][T12156] panic+0x349/0x880 [ 503.104678][T12156] ? __warn+0x177/0x4e0 [ 503.108858][T12156] ? __pfx_panic+0x10/0x10 [ 503.113312][T12156] __warn+0x34b/0x4e0 [ 503.117312][T12156] ? io_sq_offload_create+0xd2f/0xfd0 [ 503.122700][T12156] report_bug+0x2b3/0x500 [ 503.127042][T12156] ? io_sq_offload_create+0xd2f/0xfd0 [ 503.132438][T12156] handle_bug+0x60/0x90 [ 503.136613][T12156] exc_invalid_op+0x1a/0x50 [ 503.141146][T12156] asm_exc_invalid_op+0x1a/0x20 [ 503.146012][T12156] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 503.152021][T12156] Code: 3d f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 4c 2e 3d f6 e9 95 f3 ff ff e8 72 7a d3 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 503.171651][T12156] RSP: 0018:ffffc900046b7c20 EFLAGS: 00010283 [ 503.177743][T12156] RAX: ffffffff8bc13f3e RBX: ffffc900046b7dec RCX: 0000000000040000 [ 503.185727][T12156] RDX: ffffc9000acce000 RSI: 00000000000010f1 RDI: 00000000000010f2 [ 503.193710][T12156] RBP: ffffc900046b7d20 R08: ffffffff8bc13c2b R09: 1ffffffff2039055 [ 503.201695][T12156] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff888029f1e000 [ 503.209773][T12156] R13: 0000000002000000 R14: 1ffff920008d6f90 R15: ffffc900046b7ca0 [ 503.217955][T12156] ? io_sq_offload_create+0xa1b/0xfd0 [ 503.223407][T12156] ? io_sq_offload_create+0xd2e/0xfd0 [ 503.228822][T12156] ? __pfx_io_sq_offload_create+0x10/0x10 [ 503.234570][T12156] ? io_allocate_scq_urings+0x426/0x640 [ 503.240137][T12156] io_uring_create+0x792/0x1360 [ 503.245007][T12156] __se_sys_io_uring_setup+0x2ba/0x330 [ 503.250516][T12156] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 503.256524][T12156] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 503.263137][T12156] ? lockdep_hardirqs_on+0x99/0x150 [ 503.268355][T12156] __do_fast_syscall_32+0xb4/0x110 [ 503.273491][T12156] ? exc_page_fault+0x590/0x8c0 [ 503.278365][T12156] do_fast_syscall_32+0x34/0x80 [ 503.283243][T12156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.289623][T12156] RIP: 0023:0xf746d579 [ 503.293703][T12156] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 503.313328][T12156] RSP: 002b:00000000f575651c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 503.321768][T12156] RAX: ffffffffffffffda RBX: 0000000000004687 RCX: 0000000020002180 [ 503.329790][T12156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.337778][T12156] RBP: 00000000200000c0 R08: 0000000000000000 R09: 0000000000000000 [ 503.345762][T12156] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 503.353760][T12156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.361757][T12156] [ 503.365027][T12156] Kernel Offset: disabled [ 503.369386][T12156] Rebooting in 86400 seconds..