last executing test programs: 22.441974204s ago: executing program 4 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002a00090000000000002c05000b"], 0x1c}, 0x1, 0x3000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000260007000000000000000000037c00004cf0af40a1083d097de8b76fd98987d995aaf4f37abe2f2cdd143e1352cfda252a47cde0263c49b11a630e7017b95a1d2c6bd21847024ba9576e6dec6a96a0cf4bda69ae7630d7e8203ee332f5ed2129f77e3f1c7e90b6196f8d8c02949a55f13f3449ef8e25eadde38d2dec3a66e29dc95f05f700093fb8f40d578eb294d3453b6bfce7ca74eb61"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x6]}]}, 0x58}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000007c80000040000000000000000000000000f8000000"], 0x78) r8 = inotify_init1(0x0) dup3(r8, r7, 0x0) 13.130803729s ago: executing program 2 (id=433): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x15, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076"], 0x48}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000000000000007f000001000000000000000000000000000000000000000002"], 0xb8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) socket$inet(0x2, 0x1, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@local, @broadcast, @val, {@x25}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000c00)={'tunl0\x00', 0x0, 0x80, 0x700, 0x7, 0x1, {{0x2a, 0x4, 0x2, 0x2, 0xa8, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x2b, 0x7, [@multicast1, @broadcast, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @private=0xa010102, @multicast2, @multicast1]}, @ssrr={0x89, 0x3, 0x7}, @timestamp_prespec={0x44, 0x34, 0xcc, 0x3, 0x7, [{@multicast1, 0x80000000}, {@multicast1, 0x3244026}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1e5}, {@multicast1, 0x3}]}, @end, @lsrr={0x83, 0x7, 0xa5, [@empty]}, @lsrr={0x83, 0x17, 0xf, [@rand_addr=0x64010101, @rand_addr=0x64010100, @local, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0xf8, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}]}, @timestamp_prespec={0x44, 0x4, 0xd, 0x3, 0x5}, @noop]}}}}}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000b00)={@loopback, @local, r7}, 0xc) r8 = syz_open_dev$usbfs(&(0x7f0000000940), 0x7fff, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000000b40)=ANY=[@ANYBLOB="5133008602f000dd00fc16419000000000000000007c52fee38aa67a9dfda57647aba6e0aa19c26734333fadb380a9cfffc59b1da1b4d72c51ad80b9bec399bd9cdf55a013da31b4286b6d666dd674e7381afd2549d998b741c2ef0fe8ab75cea50e2b04aedd04f83ae5cc9c25ee9190210625c667141d45224b0162d638d9e3bf0332a1bc5444bcea1f46bea1a266fbd857af8341"]) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x22400, 0x51) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x3}}, @typedef={0x9}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x101, [{0xc, 0x0, 0x207}, {0x28c6f7db, 0x4, 0x6}, {0x1, 0x1, 0x3}, {0xa, 0x2, 0x2f935ac1}, {0x0, 0x4, 0x8}, {0xb, 0x0, 0x9}, {0xe, 0x3, 0x4a}]}, @struct={0xb, 0x4, 0x0, 0x4, 0x1, 0xff, [{0x5, 0x1, 0x4}, {0x6, 0x0, 0x603a}, {0xc, 0x5, 0x10}, {0x2, 0x3, 0x7fff}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @fwd={0x6}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x61, 0x30, 0x30, 0x0, 0x61, 0x61, 0x5f, 0x61]}}, &(0x7f0000000300)=""/71, 0x106, 0x47, 0x1, 0x52}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec40}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@generic={0x6, 0x2, 0xa, 0x8, 0x400}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0xe3, 0xf9, &(0x7f00000003c0)=""/249, 0x41000, 0x2, '\x00', r10, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r12], &(0x7f0000000780)=[{0x4, 0x5, 0xf}, {0x4, 0x1, 0xc, 0x2}], 0x10, 0xb}, 0x90) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfe}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r14, @ANYBLOB="05"], 0x0) 9.606636781s ago: executing program 0 (id=443): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0xc47c0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x10200, 0x0) write$binfmt_elf64(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/723], 0x2d1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) poll(0x0, 0x0, 0x3) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[]) getgid() getgid() getgid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500090001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='io\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x8, &(0x7f0000004200)) 7.906413557s ago: executing program 2 (id=447): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4d, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x34325258}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220501000000b6"], 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000540)={0x40, 0x31, 0xbc, {0xbc, 0xe, "fe4560409d6fa217bba2119c650c5f36200a5618e80eb4aa394afa6a4649c2ea3febebb1b9d7b1f526f7bdef46ef810b43cbbf892a27708be9c40144867b4e205da354379a267711bbbb6271b88a5df7b204c6d575c9d217521aaa2ac2dbf794e897bdb9959b71fb3b111415f6bf2e17acf036a3a1fe97a93faf54c47a2d8f06f8c16050154a52b57eb7ed58dfed90d6396a029d9592042db174983263ea21e48f1b4647902166e333838834b364c62c83c88f61836fb31cc146"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x11, 0xa1, "6fb2c4cb08c0faccc6b13351c008bc0abe4c9e2f65dd6e2fdc710b484df2513bb902fb567a24ec2630e8a492d028a5afe360f85109f5f3ee245e129b802e0936e670dc931631ee1505da6cbd7ab820aa6193a2ef153ab9ff075ac80ff61ffa7e7e9cec3333bd78c37038f962e81c9e692da3501abb5ed7417ea04ebda6ad6dd9340f1c381ac0aa721d72620bff701a008453a08d74451ea5d02907114efa881262"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x81, 0x2, "4aa8"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "10"}, &(0x7f0000000400)={0x20, 0x83, 0x1, "e8"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "3ff1"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "10d127"}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_uring_setup(0x2076, &(0x7f0000000100)={0x0, 0x2dc2, 0x1000, 0x3, 0x17e, 0x0, r2}) 7.029960834s ago: executing program 0 (id=449): socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x664b, 0x0, &(0x7f0000000280), &(0x7f0000000340)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil) r4 = syz_open_procfs(0x0, 0x0) writev(r4, 0x0, 0x0) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0x208e24b) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16=r1, @ANYRES64=r0, @ANYRES16=r0]) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 6.720041648s ago: executing program 4 (id=407): socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000240)=0x1d4) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x7e3a, 0x101100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket(0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) 6.268973877s ago: executing program 1 (id=451): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="03c90081af6462f54ef987680ee163bf8514e0873c9e98d71c54649296d6e39234349f46c144b1806f12baa75a139b16633e8ae3143e542aeba10ee7ec62644226ed65bc4a014e1b423223fc7dcd12d6394e7902a9cec2af5b335e7dd851da31c75586bafa9236dc6aa53b5f33d94fd034272e1e55973bed4598a6c34e7a152f8be7130000000000"], 0x85) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x20000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000b80)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x14400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000240)={r7, 0x5, 0xc}) openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000001040)=ANY=[@ANYBLOB="050000000000000002"]) 5.98266052s ago: executing program 4 (id=453): socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000240)=0x1d4) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x7e3a, 0x101100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x200, 0x0, 0x10}, &(0x7f0000000080), &(0x7f0000000140)) 5.244853241s ago: executing program 0 (id=454): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="38000000000000000b00000007000000940400604424090100000000000000007f00000100000000e00000020000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x58}}], 0x1, 0x0) 5.180741685s ago: executing program 4 (id=455): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$kcm(0x29, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000180)=""/28, 0x1c}, {0x0}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000004c0)=""/143, 0x8f}], 0x4, 0x1, 0x6) syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000300)={0x2, 0x4021, @multicast1}, 0x10, 0x0}, 0x24000851) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000001c0)="14e8a1458a722ad71a", 0x9}], 0x1}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5.129808477s ago: executing program 2 (id=456): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r3}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) (async) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000440)={0x14, &(0x7f0000000500)={0x40, 0x22, 0x98, {0x98, 0xd, "a37fe0655b63897812902f93470350f3f40a3e264ad9b89814398100cdfbc1b0ca7f51634115a07b557f9658b1b34da6f947e3ff6ef73c4ab87ae727222cc3dfaf50cd6de5abc3107e2241b49a840a64f866520875a27b0d92278f57bed159a87aca94473012fc9f0436d21fc5ec52d438ea624723b54c44be29e1344034ff69bb519beba74663a9b6d10e6cdca22b97b8a1dd1cd638"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f00000005c0)={0x0, 0x17, 0xd8, "e72c6baf9346e7e5994d77ae7fc07a8a6c4cd73300d5161afd170f7522110234206c1632df9508ceb8c161b924c4058cbedd01e8f9700ebda67b6371e6e3fc05aec367ebd40e561fa5a5d3b1d9189ee56c20567a39f46f791d43dcabd8a1e72c5aea233f9cbc7af01b5d5e7d628b48cb32243354aefa97cea400d82e8f8cc2aec4dec870cac3012b3cbc7c018cb9f46b3dfb19b714c883b53fef8218269d05accfa4cbc52b6f1eb4cf94353542b1a8a22d90a8e1c6bcd8afc6505d06e08ff25058314ac6a0cd7527d26deb607ca8c0b6084472ba9c216fe9"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000006c0)={0x0, 0x8, 0x1}}) (async) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000440)={0x14, &(0x7f0000000500)={0x40, 0x22, 0x98, {0x98, 0xd, "a37fe0655b63897812902f93470350f3f40a3e264ad9b89814398100cdfbc1b0ca7f51634115a07b557f9658b1b34da6f947e3ff6ef73c4ab87ae727222cc3dfaf50cd6de5abc3107e2241b49a840a64f866520875a27b0d92278f57bed159a87aca94473012fc9f0436d21fc5ec52d438ea624723b54c44be29e1344034ff69bb519beba74663a9b6d10e6cdca22b97b8a1dd1cd638"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f00000005c0)={0x0, 0x17, 0xd8, "e72c6baf9346e7e5994d77ae7fc07a8a6c4cd73300d5161afd170f7522110234206c1632df9508ceb8c161b924c4058cbedd01e8f9700ebda67b6371e6e3fc05aec367ebd40e561fa5a5d3b1d9189ee56c20567a39f46f791d43dcabd8a1e72c5aea233f9cbc7af01b5d5e7d628b48cb32243354aefa97cea400d82e8f8cc2aec4dec870cac3012b3cbc7c018cb9f46b3dfb19b714c883b53fef8218269d05accfa4cbc52b6f1eb4cf94353542b1a8a22d90a8e1c6bcd8afc6505d06e08ff25058314ac6a0cd7527d26deb607ca8c0b6084472ba9c216fe9"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000006c0)={0x0, 0x8, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x60, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000240)={0x1, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.980917807s ago: executing program 0 (id=457): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000a38000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x1010, 0xffffffffffffffff, 0xfffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001714", @ANYRES8], 0x38}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x20) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_gettime(r5, 0x0) sendmmsg$sock(r0, &(0x7f0000000080), 0x0, 0x40010) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r8], 0x34}}, 0x0) fcntl$setlease(r6, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x8501) 4.955120307s ago: executing program 1 (id=458): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/dev\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, @sco, @nfc={0x27, r4, 0xffffffffffffffff, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x2400, &(0x7f0000000080)='bond_slave_1\x00', 0x3, 0x5, 0x14cd}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000"], 0x57) r5 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000005480)=ANY=[]) 4.441484346s ago: executing program 3 (id=460): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xee01) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000002240)={0x0, 0x0}) r5 = getegid() syz_fuse_handle_req(r3, &(0x7f00000000c0)="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", 0x2000, &(0x7f0000002ac0)={&(0x7f00000020c0)={0x50, 0x0, 0x60000d56, {0x7, 0x28, 0xda, 0x200000, 0xe, 0x7, 0x2, 0x2}}, &(0x7f0000002140)={0x18, 0x0, 0xffffffff, {0x7}}, &(0x7f0000002180)={0x18, 0x0, 0x101, {0x1}}, &(0x7f00000021c0)={0x18, 0xfffffffffffffffe, 0xd, {0xfffffffb}}, &(0x7f0000002200)={0x18, 0xfffffffffffffff5, 0xaa37, {0x1000}}, &(0x7f0000002280)={0x28, 0x0, 0x2, {{0x55, 0x3, 0x0, r4}}}, &(0x7f00000022c0)={0x60, 0x0, 0x7, {{0x3, 0x10001, 0x4, 0xd, 0x0, 0xfffffeff, 0x8, 0x3}}}, &(0x7f0000002340)={0x18, 0x0, 0x6, {0x8001}}, &(0x7f0000002380)={0x15, 0x0, 0x9, {'(.+{\x00'}}, &(0x7f00000023c0)={0x20, 0x0, 0xffffffffffffff70, {0x0, 0xb}}, &(0x7f0000002400)={0x78, 0x0, 0x4, {0x760, 0x1, 0x0, {0x1, 0x45a, 0xaa, 0x8, 0x7, 0xfec, 0x9, 0x5, 0x8b6, 0x6000, 0x3, r1, r2, 0x1, 0x7}}}, &(0x7f0000002480)={0x90, 0x0, 0x1, {0x3, 0x1, 0x10000, 0x81, 0x629e, 0x8, {0x2, 0x8001, 0x3, 0x7, 0x9, 0x8, 0x5, 0x0, 0x796a, 0xc000, 0x3, r1, r2, 0x9, 0x6}}}, &(0x7f0000002540)={0x128, 0x0, 0x10000, [{0x3, 0x5, 0x1, 0x200, '!'}, {0x0, 0x60be, 0x7, 0x401, ':[&}\\!!'}, {0x3, 0xffffffffffffffff, 0x6, 0x7ff, '---}\xbe\\'}, {0x5, 0x7, 0x7, 0x2051, '$/$/}!]'}, {0x3, 0x1, 0x1, 0xffff, '*'}, {0x5, 0x9, 0x8, 0x6, '()-^](*/'}, {0x4, 0x0, 0x4, 0x7, '\\{]-'}, {0x3, 0x7, 0x4, 0x5, ':(@@'}, {0x3, 0x9, 0x0, 0x1fff}]}, &(0x7f0000002680)={0x328, 0xfffffffffffffff5, 0x1, [{{0x2, 0x2, 0x2, 0x8, 0xe, 0x0, {0x5, 0x4, 0x1233, 0xff1c, 0x8000000000000000, 0x2ea5, 0x289, 0x0, 0x3, 0x4000, 0x401, r1, r5, 0xe, 0x120}}, {0x5, 0x9, 0x1, 0x22, ']'}}, {{0x0, 0x3, 0x5, 0x8b7f, 0x4, 0x4, {0x3, 0xbd, 0x2, 0x8, 0x3368, 0x7f, 0x7, 0x5, 0xcbe, 0xc000, 0x3, r1, r2, 0xfb25, 0x3}}, {0x3, 0xffff, 0x6, 0x2, '%@!!+6'}}, {{0x5, 0x1, 0x6, 0x8, 0x6c, 0x3, {0x2, 0x9, 0x1, 0xfffffffffffffe18, 0x8, 0x9, 0x8, 0x6, 0xfffffffa, 0x4000, 0x0, r1, r2, 0x9, 0xffff}}, {0x4, 0x7, 0x0, 0x5}}, {{0x1, 0x2, 0x80000001, 0x4, 0x9a2c, 0xafb, {0x2, 0x8, 0x1, 0x4, 0x6, 0x4, 0x170e4c56, 0xa, 0xff, 0x2000, 0x6, 0x0, r2, 0x6, 0x5}}, {0x1, 0x9, 0x1, 0x80000000, '-'}}, {{0x2, 0x1, 0x5, 0x7, 0xf926, 0xe, {0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x1, 0xc000, 0x2, r1, r2, 0x80000000, 0x3}}, {0x0, 0x5, 0x8, 0x8, '[\x82\\)!&${'}}]}, &(0x7f00000029c0)={0xa0, 0x0, 0x7, {{0x6, 0x1, 0x3ff, 0xffffffffffffffff, 0x1, 0x7, {0x4, 0x81, 0x9, 0x9, 0x0, 0x2, 0xa, 0x0, 0x7, 0x4000, 0x6, r1, r2, 0xc8d4, 0x7}}, {0x0, 0x8}}}, &(0x7f0000002a80)={0x20, 0x0, 0x9, {0x6a2e, 0x4, 0x177, 0x2}}}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000002b40)={0x9f, 0x0, 0x1}) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000700, r1, &(0x7f0000002bc0)) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000002c40)=""/46, &(0x7f0000002c80)=0x2e) ioctl$TCXONC(r0, 0x540a, 0x3) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000002cc0), 0x4) read$FUSE(r3, &(0x7f0000002d00)={0x2020, 0x0, 0x0}, 0x2020) r9 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000004d40)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000004e40)=0xe8) write$FUSE_DIRENTPLUS(r3, &(0x7f0000004e80)={0x5a8, 0x0, r8, [{{0x0, 0x3, 0x7, 0x81, 0x3, 0x9, {0x6, 0x200, 0x7, 0x1, 0xfffffffffffffffd, 0x1000, 0x62, 0x1, 0x6, 0xc000, 0xffffffff, r1, r9, 0x9, 0x6}}, {0x0, 0x7, 0x4, 0xd, ':(@@'}}, {{0x2, 0x3, 0x4, 0xc28, 0x7fff, 0x0, {0x6, 0x8, 0x10, 0x7, 0x9, 0x100000001, 0x3, 0x2, 0xce2, 0x6000, 0x1, r1, r5, 0x1, 0x10001}}, {0x2, 0x80, 0x1, 0x100000, '!'}}, {{0x5, 0x1, 0x9, 0x7fffffff, 0x7, 0x9, {0x2, 0x0, 0x10000, 0x10, 0x8, 0x0, 0x6, 0x6, 0xfffffffc, 0x6000, 0x7, r1, r2, 0x4, 0x6}}, {0x2, 0xe575, 0x1, 0x9, '%'}}, {{0x3, 0x1, 0x9, 0xe90b, 0xfffffe01, 0xb, {0x6, 0x6, 0xd2, 0xfff, 0xd683, 0x3, 0x7f, 0x5, 0x7, 0x4000, 0x89, r1, r5, 0xecf, 0x5}}, {0x4, 0xffffffffffffffff, 0x4, 0xf3, '{:%\x00'}}, {{0x5, 0x2, 0x4, 0x4, 0x7, 0x6d, {0x2, 0x40, 0x2, 0xffff, 0x7, 0x3ff, 0x80000000, 0x10000, 0x1, 0x6000, 0x4, r1, r2, 0x7, 0x8}}, {0x1, 0x1, 0x1, 0x0, '-'}}, {{0x3, 0x0, 0x2, 0x3, 0x3aee, 0xff, {0x5, 0xfffffffffffffe00, 0x3, 0x4, 0x3, 0x89, 0x53da, 0xff0, 0x9, 0x8000, 0x6, r1, r5, 0x4, 0x5}}, {0x3, 0x9, 0x4, 0x80000001, ':(@@'}}, {{0x5, 0x2, 0x7ff, 0x81, 0x6, 0x9e, {0x0, 0x8, 0xa, 0x9, 0x400, 0x2, 0x9745, 0x3, 0x988, 0x8000, 0x8, r1, r2, 0x5, 0x3}}, {0x2, 0x86e5, 0x1, 0xfffff737, '\x00'}}, {{0x0, 0x3, 0x8001, 0x0, 0x6, 0x200, {0xa5d, 0x587, 0x3, 0x0, 0x7fffffffffffffff, 0x3ff, 0x5, 0xb19a, 0xd, 0x4000, 0x6, r10, r2, 0x3, 0x7}}, {0x0, 0x9, 0x1, 0x2, '-'}}, {{0x4, 0x1, 0xfffffffffffffff7, 0x3, 0x4, 0x5, {0x6, 0x659, 0x0, 0x8, 0x1, 0x6, 0x2, 0x4, 0x4, 0x6000, 0x39, r1, r5, 0x8, 0x4}}, {0x1, 0x3, 0x0, 0x9}}]}, 0x5a8) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000005440)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000005480)="700ff687bf5c0b558e119a70330a35d84c15dfcf04ab1724c4d318cecba8b899fb062352139c11176ba2055c6f240e4038762696f3b3e59602408f61d473f3acc891b8e22fbd179b0942a45c05abd2e5a0c4448858a12257432c5186cff726c735ddaf31473b68c789f7f496371b5bdf1fc0831b690319abe3db94b1346afd4709564043beb700332f9675ab139b5d1937b4b3070251e5f4bd595bc6da65f71b80c8af6db7167a636ae7cf0c6020675311de757b9fecf318", 0xb8, 0x884, &(0x7f0000005540)={0xa, 0x4e22, 0x8, @private0, 0xfffff4ff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005580)={'batadv_slave_0\x00'}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r11, &(0x7f00000056c0)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005680)={&(0x7f0000005600)={0x58, 0x1406, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x5) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000005780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000005880)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005840)={&(0x7f00000057c0)={0x50, r12, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xffffffff, 0xd}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x880) r14 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000058c0), 0x242b00, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000005900)={'wg1\x00', 0x100}) r15 = dup3(r14, r11, 0x80000) setsockopt$inet6_MCAST_JOIN_GROUP(r15, 0x29, 0x2a, &(0x7f0000005940)={0x4, {{0xa, 0x4e21, 0x7, @loopback, 0x80}}}, 0x88) 4.221260094s ago: executing program 1 (id=461): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x87000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x87}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 4.064483071s ago: executing program 4 (id=462): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x7, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0x7ffc, 0x4) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/19, 0x13}, 0x60}], 0x1, 0x45833af96e4b39ff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) syz_open_procfs(r2, &(0x7f0000000200)='net/icmp6\x00') getpriority(0x2, r2) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000800)=""/102385, 0x18ff1}, {0x0}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x363}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, r0, 0x13, 0x1c, 0x0, @link_fd=r0}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x83, &(0x7f0000000480)={r8}, 0x8) 3.737762281s ago: executing program 0 (id=463): socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000240)=0x1d4) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x7e3a, 0x101100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket(0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) 3.681959229s ago: executing program 4 (id=464): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x7, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) 3.07673395s ago: executing program 1 (id=466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000902000300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000902000300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x16, 0xc59f, 0x6, 0x12, 0x10, 0x4, 0x10, 0x10, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x16, 0xc59f, 0x6, 0x12, 0x10, 0x4, 0x10, 0x10, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0xde, &(0x7f0000000a00)=ANY=[@ANYBLOB="12011001000000086b1d016a35ec4006014000010203010902cc0003010420870904000000010100000a240180ff000201020a240704c3497ca61f69e5813a2d3abc6f0694260000f44023b30c2402020602015a05007801082405030b45b9290a240802080001a4227d0904010000010200000904010101010200000724010509040009050000f0000c000707250106010c000904020000010200000904020101010200000d2402010804fd08b497e20cd20824020110020903092402020a0007003a072401a00902100c24020179030408934fb4f40d240201000380269b816eea2fa98e8e5a99f5d0036c901045cffc12f0390cf3a89fddb463adf5e0754a99d839d799ddf181fa5e361072495feab755d987306fb2739d6042675fbf1663ca7b67b0a3482acec4004ba1af719cfdc08942a5b70b03dfdd6472fbfbff7d518fa8f7d1c39e9e09fdb1309b3ce5a8eb7840d85a0400264b98b7dd8a74b7f1a3ca0aeb4d8b8a339745c9b1ee042410"], &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x0, 0x0, 0x8, 0x10, 0xf1}, 0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="050f8600030b1001080b009c050900386f10f026394eb5e2ec8522754ab3b779d00e7c8e8da0f41289cc6d4550d3a479fc4fdb8e99ebda00537cbbb692d574996b3b8648d23076bfa5d3d5eaebb47b438390887f2158d883cbb591247f3ddaad368d5a56228a4e0b5aed248a9a106a191820003107100200610800"/134], 0x1, [{0xf4, &(0x7f0000000500)=ANY=[@ANYBLOB="f403271c98c5aab98ddcc89615a3c20642902a44bcbada3b08b56fe152d2f4c94dd0281fdba893dc7bf327ae0b5313da16a2932b028d153df8cad27faf09d11a5035964883a32e1c99120289b1b12fb8f2dd1c9e06fb5ec9bb12f819f4c451e36f41969fc292a688f454ee89c5620d244cf79028b7c96965dd74227b61c12593ba11fda7d4ee260288f8b89bf30aa2a616b2e6ab63b7f2e5d5b1229c3a321d44e936ca127aa70edae8c2e2ec2eb47e309ed0e0719e916d0f630d119a7fad00cecd12d950632eeb640e3c8c8664c54173a4a6b93aa2b65b495134abb5d5ea7e0634b8bd871baec263922dd4e167bad12aa73d0cdb"]}]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$input_event(r2, &(0x7f00000003c0)={{0x0, 0x2710}, 0x3, 0x3, 0xfffffffe}, 0x18) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) r5 = socket(0x10, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000e40)={0x14, &(0x7f0000000d40)={0x0, 0x4, 0x2, {0x2, 0x5}}, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x1c, &(0x7f0000000e80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, 0x0) (async) ioctl$NS_GET_OWNER_UID(r4, 0xb704, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40804) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200020, &(0x7f0000000c40)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_appraise}]}}) (async) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200020, &(0x7f0000000c40)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_appraise}]}}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}}}, 0x10) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x161000, 0x0) openat$cgroup_devices(r6, 0x0, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000b80)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x80, 0x4, 0x5, 0x20, 0xb}, 0x108, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x8, [{0xb4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="b40305b6475d75fd99028a5a7e5900c215e32a0e1ea980296e348d9d1884c6d512466da7141ccec855664d070291d118e5c197be6e9c600f2cd0aac823fa3f4aec2d0a9e66dae3ab82fecc90030e460fc75c7a802657609b6613bc02b7484520db9cb78a91261a1e5058641cac262c07f70ae04a24f9fd784f0bfac778193651487058005a02406bc9364d43a315f4ee9f53bc85f1ff1f15a836f6ef57acafc1f36f229b147719b857ecee29e0b3aec267681825"]}, {0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="b19317b8fa0000000400000000"]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x410}}, {0xa3, &(0x7f0000000600)=ANY=[@ANYBLOB="a3037b4966d1057e212e01436ac34b4fd1127977ff91cd09eb5a9b5070499c0400a74b634f3b866551796e3b4a47487d43a01e0de2aa615df8744fda159b6d5b6236fde845622ad41eb75c9ff72d749f9e34658a7b71c068a3d1b69071ff1ef70c420b56fd69d50dfa9bbb64dccb6b2e4de578d85228e8901c7c3a7044bcb5052287bdbaf26a10a7fb2ba71dd6360817e3753051e3a425784400000000000000000000000400"]}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x480a}}]}) syz_usb_ep_write(r1, 0x82, 0x5, &(0x7f0000002340)='hello') bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 3.076095021s ago: executing program 3 (id=467): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="38000000000000ff9700000007000000940400604424090100000000000000007f00000100000000e00000020000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x58}}], 0x1, 0x0) 2.975703343s ago: executing program 0 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x2400c050}, 0x4840) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x24) r4 = fanotify_init(0x202, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRESHEX=r4, @ANYBLOB="b0d25722f95214ba26e4cbc462c3510a530f9b8a46d375572abbc740a3db805da3593d72aeec31356908cb9d3c9820aacc0bf17989396bb78ab5aa41e05af59d6d35eb7de2f3a594ffb372a296a6afc2f43743e6ec6b8b879f1994917383d2010dff8615d6e29e29e32180b41c81e0f0f1464a890b86fb8f259842a4bcfb19fcf5547f1e73560a7f9ef147792d7684ba9dcf88fab532a9f2c68b6011d97d2374845f5b090bf9172eb67b86a035408f72138a90c7a7d3f0a5315db9fdb82bc7a52c9dcf1caf242001feceb0094fa86cef", @ANYBLOB="08102a00", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x80040}, 0x4000810) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff000000000000080045002471000000040073907810905802000000000000f0982ac200"/50], 0x0) 2.758074065s ago: executing program 3 (id=469): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/hci\x00') ioctl$KVM_RUN(r1, 0xae80, 0x0) dup(r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5416, &(0x7f0000001100)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1.602105824s ago: executing program 3 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000003940)=[{r1}], 0x1, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x11) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)={0x7, {{0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x1, 0x2, [{{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, {{0xa, 0x4e22, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0xcc5}}]}, 0x190) r4 = accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000580)="112d1dca85e5cd1355202d62719524e7ea496599e8771ba3af2de8a605197df35fc7d863e55b91550eb20485afd07897d463aa8cab47934db605cca9fc128640d05920dc187ea003cfab6c6335b309afe254fd91d541312b3ccbd28e867b1476b9e2df4d78277b3930e8319af27f62bc65415eb5a7c66ddbed0c95971be7faf4a1b60f243e1174e9c6147e8cd663c883444a6cce5560740ebed0532a88057f608c95d0ca9b6467fffbb9f108ecceda500fd4956c9a54d96849181371a5d4", 0xbe}], 0x1, 0x8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x2}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x7e}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03010000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0x5, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.196278363s ago: executing program 1 (id=471): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a1bc0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 1.061919245s ago: executing program 3 (id=472): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00010000000000002c0012800b00010062726964676500001c0002800600170000000000050019"], 0x4c}}, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0xfe) userfaultfd(0x800) poll(0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x20}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x2c}}, 0x0) 1.061665625s ago: executing program 2 (id=473): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x181a00, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000140)={r3, &(0x7f00000000c0)=""/60}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={r3, &(0x7f0000000080)=""/96}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000005480)=ANY=[]) 597.480202ms ago: executing program 2 (id=474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x6a, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000290000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="643e0f20def37efc0f01c5670f01caf0838ddb000abad104ed66b8000000000f23c80f21f85a5a350800e0000f23f80f20e00f22e0362e360f21976737", 0x3d}], 0x1, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 235.425624ms ago: executing program 2 (id=475): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x77, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x85}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r1, 0x0, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000003000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x0, 0x5, 0x85, {0x85, 0x0, "62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede97965f3de2587774d8029fa9d10b47e356249835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c42a9fd97b34d82c413c60118ad8a7b46323d1f26171c2585465e3c686fd889c2e4d36a95cd81e8b475156cc3a12565e97e3efb3b2cdf4c339a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 81.94609ms ago: executing program 1 (id=476): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffff80], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x87}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 0s ago: executing program 3 (id=477): socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x68) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000240)=0x1d4) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x7e3a, 0x101100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket(0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 123.226933][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.237509][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.283975][ T5941] bridge0: entered promiscuous mode [ 123.642586][ T9] elecom 0003:056E:011C.0005: item fetching failed at offset 2/3 [ 123.687857][ T9] elecom 0003:056E:011C.0005: probe with driver elecom failed with error -22 [ 123.751561][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.801260][ T5280] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 123.802402][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.867224][ T5280] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5 [ 123.960236][ T9] usb 4-1: USB disconnect, device number 6 [ 124.040616][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.073076][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.905472][ T5961] SET target dimension over the limit! [ 125.162338][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.150'. [ 125.216898][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.503422][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.728234][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.896204][ T9] usb 5-1: USB disconnect, device number 6 [ 125.902103][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 126.010699][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.175867][ T5977] binder: BINDER_SET_CONTEXT_MGR already set [ 126.204124][ T5977] binder: 5975:5977 ioctl 4018620d 20000040 returned -16 [ 126.271871][ T5977] binder: 5975:5977 ioctl c0306201 200003c0 returned -22 [ 126.628750][ T52] bridge_slave_1: left allmulticast mode [ 126.680701][ T52] bridge_slave_1: left promiscuous mode [ 126.708684][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.735435][ T52] bridge_slave_0: left allmulticast mode [ 126.743741][ T52] bridge_slave_0: left promiscuous mode [ 126.797646][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.095814][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.109749][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.119272][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.127426][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.139339][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.160253][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.021297][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.251066][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.272167][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.295989][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 128.334812][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.359499][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.373993][ T9] usb 1-1: config 0 descriptor?? [ 128.424327][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.442360][ T6041] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.455046][ T52] bond0 (unregistering): Released all slaves [ 128.487099][ T6012] netlink: 'syz.1.158': attribute type 23 has an invalid length. [ 128.496164][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 128.566398][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.574525][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.592668][ T6012] bridge0: entered promiscuous mode [ 128.830600][ T9] elecom 0003:056E:011C.0006: item fetching failed at offset 2/3 [ 128.883306][ T9] elecom 0003:056E:011C.0006: probe with driver elecom failed with error -22 [ 128.996056][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 129.056954][ T6060] Zero length message leads to an empty skb [ 129.070336][ T48] usb 1-1: USB disconnect, device number 6 [ 129.228376][ T5232] Bluetooth: hci4: command tx timeout [ 129.478287][ T6061] netlink: 'syz.4.166': attribute type 23 has an invalid length. [ 129.495365][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 129.514031][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.522941][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.532181][ T6061] bridge0: entered promiscuous mode [ 129.558218][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.782538][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.829718][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.848366][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 129.857477][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.870938][ T52] hsr_slave_0: left promiscuous mode [ 129.878891][ T52] hsr_slave_1: left promiscuous mode [ 129.905155][ T25] usb 3-1: config 0 descriptor?? [ 129.911476][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.938459][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.992217][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.006634][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.083820][ T52] veth1_macvtap: left promiscuous mode [ 130.096849][ T52] veth0_macvtap: left promiscuous mode [ 130.108816][ T52] veth1_vlan: left promiscuous mode [ 130.114292][ T52] veth0_vlan: left promiscuous mode [ 130.233954][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.300369][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.651516][ T25] wacom 0003:056A:033C.0007: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 130.683686][ T25] wacom 0003:056A:033C.0007: hidraw0: USB HID v0.00 Device [HID 056a:033c] on usb-dummy_hcd.2-1/input0 [ 130.726221][ T25] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:033C.0007/input/input6 [ 131.318412][ T5232] Bluetooth: hci4: command tx timeout [ 131.490332][ T52] team0 (unregistering): Port device team_slave_1 removed [ 131.564745][ T52] team0 (unregistering): Port device team_slave_0 removed [ 132.625849][ T6065] netlink: 'syz.2.167': attribute type 12 has an invalid length. [ 132.660903][ T6094] netlink: 'syz.4.174': attribute type 23 has an invalid length. [ 132.666195][ T25] usb 3-1: USB disconnect, device number 5 [ 132.693229][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 132.958230][ T5296] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.986167][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 133.018029][ T6017] chnl_net:caif_netlink_parms(): no params data found [ 133.041191][ T6107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.178'. [ 133.131775][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.178'. [ 133.152315][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.159035][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.202807][ T5296] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.292620][ T5296] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 133.348817][ T5296] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 133.388437][ T5232] Bluetooth: hci4: command tx timeout [ 133.432241][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.449887][ T5296] usb 2-1: config 0 descriptor?? [ 133.585277][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.625676][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.639292][ T6017] bridge_slave_0: entered allmulticast mode [ 133.683436][ T6017] bridge_slave_0: entered promiscuous mode [ 133.759492][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.787475][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.871246][ T6017] bridge_slave_1: entered allmulticast mode [ 133.876694][ T5296] Bluetooth: Can't get state to change to load configuration err [ 133.905638][ T5296] Bluetooth: Loading sysconfig file failed [ 133.908617][ T6017] bridge_slave_1: entered promiscuous mode [ 133.925966][ T5296] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 134.229419][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.304221][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.593323][ T6017] team0: Port device team_slave_0 added [ 134.750428][ T6017] team0: Port device team_slave_1 added [ 134.854442][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.866779][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.887330][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.895788][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.904334][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.912681][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.358810][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.395238][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.455985][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.472968][ T5234] Bluetooth: hci4: command tx timeout [ 135.625956][ T5301] usb 2-1: USB disconnect, device number 4 [ 135.805813][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.965478][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.003943][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.031025][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.197926][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.485105][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.568447][ T6017] hsr_slave_0: entered promiscuous mode [ 136.580202][ T6017] hsr_slave_1: entered promiscuous mode [ 136.592971][ T6017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.612351][ T6017] Cannot create hsr debugfs directory [ 136.714637][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.989737][ T5234] Bluetooth: hci3: command tx timeout [ 137.019442][ T6167] netlink: 'syz.1.187': attribute type 23 has an invalid length. [ 137.027478][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 137.655334][ T6184] FAULT_INJECTION: forcing a failure. [ 137.655334][ T6184] name failslab, interval 1, probability 0, space 0, times 1 [ 137.719457][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.2.190 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 137.730141][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 137.740247][ T6184] Call Trace: [ 137.743573][ T6184] [ 137.746546][ T6184] dump_stack_lvl+0x241/0x360 [ 137.751282][ T6184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.756535][ T6184] ? __pfx__printk+0x10/0x10 [ 137.761180][ T6184] ? fs_reclaim_acquire+0x93/0x140 [ 137.766343][ T6184] ? __pfx___might_resched+0x10/0x10 [ 137.771676][ T6184] should_fail_ex+0x3b0/0x4e0 [ 137.776383][ T6184] ? tomoyo_encode+0x26f/0x540 [ 137.781173][ T6184] should_failslab+0xac/0x100 [ 137.785872][ T6184] ? tomoyo_encode+0x26f/0x540 [ 137.790653][ T6184] __kmalloc_noprof+0xd8/0x400 [ 137.795426][ T6184] tomoyo_encode+0x26f/0x540 [ 137.800053][ T6184] tomoyo_realpath_from_path+0x59e/0x5e0 [ 137.805703][ T6184] tomoyo_path_number_perm+0x23a/0x880 [ 137.811178][ T6184] ? tomoyo_path_number_perm+0x208/0x880 [ 137.816848][ T6184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.822863][ T6184] ? __fget_files+0x29/0x470 [ 137.827468][ T6184] ? __fget_files+0x3f6/0x470 [ 137.832166][ T6184] ? __fget_files+0x29/0x470 [ 137.836789][ T6184] security_file_ioctl+0x75/0xb0 [ 137.841749][ T6184] __se_sys_ioctl+0x47/0x170 [ 137.846362][ T6184] do_syscall_64+0xf3/0x230 [ 137.850881][ T6184] ? clear_bhb_loop+0x35/0x90 [ 137.855567][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.861563][ T6184] RIP: 0033:0x7f544e179e79 [ 137.866003][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.885720][ T6184] RSP: 002b:00007f544f01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.894260][ T6184] RAX: ffffffffffffffda RBX: 00007f544e315f80 RCX: 00007f544e179e79 [ 137.902338][ T6184] RDX: 0000000020005480 RSI: 00000000c008551a RDI: 0000000000000003 [ 137.910328][ T6184] RBP: 00007f544f01f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.918300][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.926294][ T6184] R13: 0000000000000000 R14: 00007f544e315f80 R15: 00007f544e43fa38 [ 137.934291][ T6184] [ 137.962844][ T6184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.042724][ T6142] chnl_net:caif_netlink_parms(): no params data found [ 138.093153][ T52] bridge_slave_1: left allmulticast mode [ 138.120374][ T52] bridge_slave_1: left promiscuous mode [ 138.126231][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.171766][ T48] IPVS: starting estimator thread 0... [ 138.199715][ T52] bridge_slave_0: left allmulticast mode [ 138.205541][ T52] bridge_slave_0: left promiscuous mode [ 138.211789][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.279795][ T6191] IPVS: using max 15 ests per chain, 36000 per kthread [ 138.459273][ T48] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.686288][ T48] usb 3-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 138.733794][ T48] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 138.781664][ T48] usb 3-1: config 16 has no interfaces? [ 138.798545][ T48] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 138.841296][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.069585][ T5234] Bluetooth: hci3: command tx timeout [ 139.282674][ T6224] xt_hashlimit: overflow, try lower: 3/0 [ 139.570148][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.596890][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.623525][ T52] bond0 (unregistering): Released all slaves [ 139.858968][ T6230] FAULT_INJECTION: forcing a failure. [ 139.858968][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.892860][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.1.200 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 139.903554][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 139.913826][ T6230] Call Trace: [ 139.917193][ T6230] [ 139.920159][ T6230] dump_stack_lvl+0x241/0x360 [ 139.924870][ T6230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.930089][ T6230] ? __pfx__printk+0x10/0x10 [ 139.934694][ T6230] ? __pfx_lock_release+0x10/0x10 [ 139.939737][ T6230] should_fail_ex+0x3b0/0x4e0 [ 139.944433][ T6230] _copy_from_user+0x2f/0xe0 [ 139.949075][ T6230] snd_ctl_tlv_ioctl+0x13e/0xc30 [ 139.954033][ T6230] ? __kernel_text_address+0xd/0x40 [ 139.959256][ T6230] ? arch_stack_walk+0x16d/0x1b0 [ 139.964202][ T6230] ? __pfx_snd_ctl_tlv_ioctl+0x10/0x10 [ 139.969684][ T6230] ? stack_trace_save+0x118/0x1d0 [ 139.974736][ T6230] ? __pfx_stack_trace_save+0x10/0x10 [ 139.980140][ T6230] snd_ctl_ioctl+0x308/0x1600 [ 139.984851][ T6230] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 139.989992][ T6230] ? kasan_save_track+0x51/0x80 [ 139.994951][ T6230] ? kasan_save_track+0x3f/0x80 [ 139.999836][ T6230] ? kasan_save_free_info+0x40/0x50 [ 140.005058][ T6230] ? poison_slab_object+0xe0/0x150 [ 140.010192][ T6230] ? __kasan_slab_free+0x37/0x60 [ 140.015145][ T6230] ? kfree+0x149/0x360 [ 140.019260][ T6230] ? tomoyo_path_number_perm+0x68d/0x880 [ 140.024988][ T6230] ? security_file_ioctl+0x75/0xb0 [ 140.030109][ T6230] ? __se_sys_ioctl+0x47/0x170 [ 140.034885][ T6230] ? do_syscall_64+0xf3/0x230 [ 140.039590][ T6230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.045672][ T6230] ? do_vfs_ioctl+0xf0e/0x2e50 [ 140.050456][ T6230] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 140.055593][ T6230] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.061946][ T6230] ? tomoyo_path_number_perm+0x208/0x880 [ 140.067780][ T6230] ? __pfx_lock_release+0x10/0x10 [ 140.072829][ T6230] ? kfree+0x149/0x360 [ 140.076927][ T6230] ? tomoyo_path_number_perm+0x71a/0x880 [ 140.082621][ T6230] ? tomoyo_path_number_perm+0x208/0x880 [ 140.088302][ T6230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.094500][ T6230] ? __fget_files+0x29/0x470 [ 140.099139][ T6230] ? __fget_files+0x3f6/0x470 [ 140.103837][ T6230] ? __fget_files+0x29/0x470 [ 140.108450][ T6230] ? bpf_lsm_file_ioctl+0x9/0x10 [ 140.113475][ T6230] ? security_file_ioctl+0x87/0xb0 [ 140.118641][ T6230] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 140.123788][ T6230] __se_sys_ioctl+0xfc/0x170 [ 140.128415][ T6230] do_syscall_64+0xf3/0x230 [ 140.132951][ T6230] ? clear_bhb_loop+0x35/0x90 [ 140.137673][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.143606][ T6230] RIP: 0033:0x7f05cbb79e79 [ 140.148034][ T6230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.167691][ T6230] RSP: 002b:00007f05cca1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.176137][ T6230] RAX: ffffffffffffffda RBX: 00007f05cbd15f80 RCX: 00007f05cbb79e79 [ 140.184208][ T6230] RDX: 0000000020005480 RSI: 00000000c008551a RDI: 0000000000000003 [ 140.192202][ T6230] RBP: 00007f05cca1a090 R08: 0000000000000000 R09: 0000000000000000 [ 140.200208][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.208223][ T6230] R13: 0000000000000000 R14: 00007f05cbd15f80 R15: 00007f05cbe3fa38 [ 140.216239][ T6230] [ 140.364987][ T6228] netlink: 'syz.4.199': attribute type 23 has an invalid length. [ 140.375469][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 140.709491][ T48] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.753693][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.758424][ T6239] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 140.769143][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.799128][ T6142] bridge_slave_0: entered allmulticast mode [ 140.806777][ T6142] bridge_slave_0: entered promiscuous mode [ 140.841730][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.849189][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.857388][ T6142] bridge_slave_1: entered allmulticast mode [ 140.865597][ T6142] bridge_slave_1: entered promiscuous mode [ 140.903457][ T52] hsr_slave_0: left promiscuous mode [ 140.925532][ T52] hsr_slave_1: left promiscuous mode [ 140.932047][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 140.941362][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.949235][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.956743][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 140.970612][ T48] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 140.971604][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.989338][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.004554][ T48] usb 2-1: config 0 descriptor?? [ 141.017987][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.031279][ T48] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 141.069714][ T52] veth1_macvtap: left promiscuous mode [ 141.075391][ T52] veth0_macvtap: left promiscuous mode [ 141.082178][ T52] veth1_vlan: left promiscuous mode [ 141.087914][ T52] veth0_vlan: left promiscuous mode [ 141.148379][ T5234] Bluetooth: hci3: command tx timeout [ 141.322627][ T5296] usb 3-1: USB disconnect, device number 6 [ 141.453047][ T4666] bcm5974 2-1:0.0: could not read from device [ 141.492116][ T6233] bcm5974 2-1:0.0: could not read from device [ 141.556073][ T4666] bcm5974 2-1:0.0: could not read from device [ 141.568207][ T48] usb 2-1: USB disconnect, device number 5 [ 141.601640][ T5524] bcm5974 2-1:0.0: could not read from device [ 142.436552][ T52] team0 (unregistering): Port device team_slave_1 removed [ 142.549733][ T52] team0 (unregistering): Port device team_slave_0 removed [ 143.159860][ T48] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.230922][ T5234] Bluetooth: hci3: command tx timeout [ 143.380938][ T48] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 143.437135][ T48] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 143.467365][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.493562][ T6142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.517435][ T48] usb 2-1: config 0 descriptor?? [ 143.536551][ T48] usb 2-1: bad CDC descriptors [ 143.561848][ T6142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.884470][ T6142] team0: Port device team_slave_0 added [ 143.924471][ T6142] team0: Port device team_slave_1 added [ 144.253414][ T6017] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.321830][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.358279][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.497292][ T6142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.500105][ T941] usb 2-1: USB disconnect, device number 6 [ 144.561953][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.602372][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.728260][ T6142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.767651][ T6017] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.075787][ T6017] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.152466][ T6017] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.267434][ T6280] warning: `syz.2.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 145.459265][ T6142] hsr_slave_0: entered promiscuous mode [ 145.513756][ T6142] hsr_slave_1: entered promiscuous mode [ 145.535487][ T6142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.567699][ T6142] Cannot create hsr debugfs directory [ 146.048972][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.194712][ T6294] netlink: 'syz.4.212': attribute type 21 has an invalid length. [ 146.216028][ T6294] netlink: 128 bytes leftover after parsing attributes in process `syz.4.212'. [ 146.243092][ T6294] netlink: 'syz.4.212': attribute type 4 has an invalid length. [ 146.265466][ T6294] netlink: 'syz.4.212': attribute type 5 has an invalid length. [ 146.278548][ T6294] netlink: 3 bytes leftover after parsing attributes in process `syz.4.212'. [ 146.503575][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.686434][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.953258][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.974259][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.009617][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.025036][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.052945][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.071870][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.090812][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.098833][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.192090][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.203984][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 147.215110][ T25] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 147.227542][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.264178][ T25] usb 5-1: config 0 descriptor?? [ 147.309542][ T6304] netlink: 'syz.2.216': attribute type 23 has an invalid length. [ 147.318535][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 148.196857][ T52] bridge_slave_1: left allmulticast mode [ 148.211529][ T52] bridge_slave_1: left promiscuous mode [ 148.219525][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.246603][ T52] bridge_slave_0: left allmulticast mode [ 148.266464][ T52] bridge_slave_0: left promiscuous mode [ 148.281848][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.088365][ T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.104375][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.126304][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.140815][ T52] bond0 (unregistering): Released all slaves [ 149.149072][ T5234] Bluetooth: hci5: command tx timeout [ 149.181030][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.298349][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 149.334039][ T48] usb 3-1: config 0 has no interfaces? [ 149.362599][ T48] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 149.414829][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.469287][ T48] usb 3-1: config 0 descriptor?? [ 149.550798][ T25] Bluetooth: Can't get state to change to load configuration err [ 149.564198][ T25] Bluetooth: Loading sysconfig file failed [ 149.570985][ T25] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 149.588950][ T25] usb 5-1: USB disconnect, device number 7 [ 149.699698][ T6017] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.875376][ T6142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.896651][ T6142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.916793][ T5281] usb 3-1: USB disconnect, device number 7 [ 149.950601][ T6302] chnl_net:caif_netlink_parms(): no params data found [ 149.996556][ T6142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.026203][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.033438][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.085510][ T52] hsr_slave_0: left promiscuous mode [ 150.108800][ T52] hsr_slave_1: left promiscuous mode [ 150.120779][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.137881][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.138308][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.160020][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.167529][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.207751][ T52] veth1_macvtap: left promiscuous mode [ 150.219502][ T52] veth0_macvtap: left promiscuous mode [ 150.225668][ T52] veth1_vlan: left promiscuous mode [ 150.233338][ T52] veth0_vlan: left promiscuous mode [ 150.370605][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.405892][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.417341][ T25] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 150.430537][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.442705][ T25] usb 5-1: config 0 descriptor?? [ 150.829105][ T5281] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.874221][ T25] uclogic 0003:5543:0042.0008: unknown main item tag 0x6 [ 150.894850][ T25] uclogic 0003:5543:0042.0008: No inputs registered, leaving [ 150.905727][ T25] uclogic 0003:5543:0042.0008: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 151.014840][ T52] team0 (unregistering): Port device team_slave_1 removed [ 151.018198][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 151.038633][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.048515][ T5281] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.074921][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 151.084691][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.094430][ T5281] usb 3-1: Product: syz [ 151.099221][ T5281] usb 3-1: Manufacturer: syz [ 151.103884][ T5281] usb 3-1: SerialNumber: syz [ 151.113705][ T52] team0 (unregistering): Port device team_slave_0 removed [ 151.228445][ T5234] Bluetooth: hci5: command tx timeout [ 151.252550][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.219'. [ 151.774733][ T6142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.825233][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.832602][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.851108][ T9] usb 5-1: USB disconnect, device number 8 [ 151.999892][ T5281] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 152.023663][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.039655][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.050980][ T5281] usb 3-1: USB disconnect, device number 8 [ 152.068959][ T6302] bridge_slave_0: entered allmulticast mode [ 152.080669][ T5281] usblp0: removed [ 152.092916][ T6302] bridge_slave_0: entered promiscuous mode [ 152.131416][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.153820][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.163075][ T6302] bridge_slave_1: entered allmulticast mode [ 152.170893][ T6302] bridge_slave_1: entered promiscuous mode [ 152.332985][ T6302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.385938][ T6302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.606256][ T6302] team0: Port device team_slave_0 added [ 152.649590][ T6302] team0: Port device team_slave_1 added [ 152.726724][ T6365] netlink: 'syz.4.224': attribute type 23 has an invalid length. [ 152.735056][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 152.797738][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.807278][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.841916][ T6302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.923322][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.940115][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.985015][ T6302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.071027][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.281174][ T6302] hsr_slave_0: entered promiscuous mode [ 153.308152][ T5234] Bluetooth: hci5: command tx timeout [ 153.336210][ T6302] hsr_slave_1: entered promiscuous mode [ 153.438837][ T6302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.446469][ T6302] Cannot create hsr debugfs directory [ 153.903624][ T6142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.980951][ T6017] veth0_vlan: entered promiscuous mode [ 154.002861][ T6142] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.056431][ T6017] veth1_vlan: entered promiscuous mode [ 154.420568][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.427743][ T2570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.514545][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.521788][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.569766][ T6017] veth0_macvtap: entered promiscuous mode [ 154.622086][ T6017] veth1_macvtap: entered promiscuous mode [ 154.743865][ T6404] netlink: 'syz.4.229': attribute type 23 has an invalid length. [ 154.755926][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 154.818961][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.852978][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.876027][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.893612][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.935153][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.957002][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.979693][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.021628][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.060194][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.151904][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.166836][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.179267][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.195148][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.210189][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.226666][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.242253][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.255778][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.301426][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.391676][ T5234] Bluetooth: hci5: command tx timeout [ 155.407480][ T6017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.417189][ T6017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.503124][ T6017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.538466][ T6017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.681407][ T6302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.790092][ T6302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.830679][ T6302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.856297][ T6302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.965455][ T6142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.990315][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.106620][ T6428] netlink: 'syz.4.233': attribute type 23 has an invalid length. [ 156.116983][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 156.164195][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.191531][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.200698][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.260393][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.270642][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 156.284823][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.304501][ T25] usb 3-1: config 0 descriptor?? [ 156.407558][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.437446][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.483594][ T6142] veth0_vlan: entered promiscuous mode [ 156.584040][ T6142] veth1_vlan: entered promiscuous mode [ 156.764173][ T25] pyra 0003:1E7D:2CF6.0009: item fetching failed at offset 5/7 [ 156.803330][ T6142] veth0_macvtap: entered promiscuous mode [ 156.815332][ T25] pyra 0003:1E7D:2CF6.0009: parse failed [ 156.835450][ T25] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -22 [ 156.853553][ T6302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.885281][ T6142] veth1_macvtap: entered promiscuous mode [ 156.983148][ T6302] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.066852][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.102322][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.138186][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.160129][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.208873][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.238504][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.260548][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.288417][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.318361][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.330668][ T5277] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.364280][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.380119][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.404162][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.411441][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.444219][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 157.457243][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 157.492979][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.500262][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.521752][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.542877][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.553445][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 157.572882][ T5277] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 157.578448][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.592347][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.608136][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.610355][ T5277] usb 4-1: Product: syz [ 157.628389][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.632381][ T5277] usb 4-1: Manufacturer: syz [ 157.651301][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.654687][ T5277] usb 4-1: SerialNumber: syz [ 157.671622][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.685399][ T5277] usb 4-1: config 0 descriptor?? [ 157.702603][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.732061][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.758007][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.776699][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.806668][ T6142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.826223][ T6142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.839820][ T6142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.857984][ T6142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.192377][ T5280] usb 4-1: USB disconnect, device number 7 [ 158.292751][ T6302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.359831][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.411326][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.524186][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.554900][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.565262][ T6302] veth0_vlan: entered promiscuous mode [ 158.587794][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 158.633929][ T6302] veth1_vlan: entered promiscuous mode [ 158.758692][ T6302] veth0_macvtap: entered promiscuous mode [ 158.800119][ T6302] veth1_macvtap: entered promiscuous mode [ 158.810854][ T5301] usb 3-1: USB disconnect, device number 9 [ 158.941226][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.991837][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.018185][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.046769][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.086740][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.118708][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.135936][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.170572][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.192085][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.232706][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.253423][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.281338][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.332880][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.356235][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.378694][ T5301] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.401422][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.442571][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.478893][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.508437][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.551388][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.578138][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.593699][ T5301] usb 3-1: Using ep0 maxpacket: 16 [ 159.612113][ T5301] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 159.628282][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.648322][ T5301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.672563][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.690666][ T5301] usb 3-1: Product: syz [ 159.694888][ T5301] usb 3-1: Manufacturer: syz [ 159.722907][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.740486][ T5301] usb 3-1: SerialNumber: syz [ 159.756866][ T5301] usb 3-1: config 0 descriptor?? [ 159.765881][ T6302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.784597][ T5301] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 159.804237][ T6302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.830751][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.942419][ T6302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.982418][ T6302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.018109][ T6302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.051648][ T6302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.298389][ T5296] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.406248][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.425217][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.503047][ T6512] FAULT_INJECTION: forcing a failure. [ 160.503047][ T6512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.513649][ T5296] usb 5-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 160.548742][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.564518][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.567243][ T6513] netlink: 'syz.3.242': attribute type 23 has an invalid length. [ 160.578147][ T6512] CPU: 0 UID: 0 PID: 6512 Comm: syz.0.244 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 160.590938][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.598387][ T5296] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.601008][ T6512] Call Trace: [ 160.601023][ T6512] [ 160.601034][ T6512] dump_stack_lvl+0x241/0x360 [ 160.624868][ T6512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.630117][ T6512] ? __pfx__printk+0x10/0x10 [ 160.632196][ T5301] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 160.634755][ T6512] ? snprintf+0xda/0x120 [ 160.646765][ T6512] should_fail_ex+0x3b0/0x4e0 [ 160.651505][ T6512] _copy_to_user+0x2f/0xb0 [ 160.655972][ T6512] simple_read_from_buffer+0xca/0x150 [ 160.661399][ T6512] proc_fail_nth_read+0x1ec/0x260 [ 160.666489][ T6512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.672092][ T6512] ? rw_verify_area+0x520/0x6b0 [ 160.676990][ T6512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.678408][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 160.682559][ T6512] vfs_read+0x204/0xbc0 [ 160.682597][ T6512] ? __pfx_lock_release+0x10/0x10 [ 160.700585][ T6512] ? __pfx_vfs_read+0x10/0x10 [ 160.705308][ T6512] ? __fget_files+0x29/0x470 [ 160.709952][ T6512] ? __fget_files+0x3f6/0x470 [ 160.714678][ T6512] ksys_read+0x1a0/0x2c0 [ 160.718982][ T6512] ? __pfx_ksys_read+0x10/0x10 [ 160.723782][ T6512] ? do_syscall_64+0x100/0x230 [ 160.728587][ T6512] ? do_syscall_64+0xb6/0x230 [ 160.733324][ T6512] do_syscall_64+0xf3/0x230 [ 160.736979][ T5296] usb 5-1: string descriptor 0 read error: -22 [ 160.737854][ T6512] ? clear_bhb_loop+0x35/0x90 [ 160.748769][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.754769][ T6512] RIP: 0033:0x7f9d22f788bc [ 160.759230][ T6512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 160.770268][ T5296] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=ff.6e [ 160.778865][ T6512] RSP: 002b:00007f9d23cea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.778900][ T6512] RAX: ffffffffffffffda RBX: 00007f9d23115f80 RCX: 00007f9d22f788bc [ 160.778917][ T6512] RDX: 000000000000000f RSI: 00007f9d23cea0a0 RDI: 0000000000000004 [ 160.778930][ T6512] RBP: 00007f9d23cea090 R08: 0000000000000000 R09: 0000000000000000 [ 160.778944][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.778958][ T6512] R13: 0000000000000000 R14: 00007f9d23115f80 R15: 00007f9d2323fa38 [ 160.778992][ T6512] [ 160.853225][ T5301] usb 3-1: USB disconnect, device number 10 [ 160.913120][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.921005][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.929630][ T6513] bridge0: entered promiscuous mode [ 161.073155][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.101115][ T5296] usb 5-1: config 0 descriptor?? [ 161.698972][ T5301] usb 5-1: USB disconnect, device number 9 [ 161.987226][ T6548] netlink: 100 bytes leftover after parsing attributes in process `syz.0.250'. [ 162.017277][ T5296] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.168202][ T58] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.228234][ T5296] usb 4-1: Using ep0 maxpacket: 16 [ 162.236574][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.259018][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.284129][ T5296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.302096][ T5296] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.312425][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.330372][ T5296] usb 4-1: config 0 descriptor?? [ 162.352829][ T58] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 162.361612][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.373530][ T58] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 162.383311][ T58] usb 3-1: config 0 has no interface number 0 [ 162.405182][ T58] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 162.427065][ T58] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 162.449468][ T58] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.466024][ T58] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 162.475731][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 162.484023][ T58] usb 3-1: SerialNumber: syz [ 162.495069][ T58] usb 3-1: config 0 descriptor?? [ 162.524071][ T58] gspca_main: spca561-2.14.0 probing abcd:cdee [ 162.539238][ T5280] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.566033][ T6556] pim6reg: entered allmulticast mode [ 162.744162][ T58] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 162.767442][ T5280] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 162.797060][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.806690][ T58] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.837508][ T58] usb 3-1: MIDIStreaming interface descriptor not found [ 162.868838][ T5280] usb 2-1: config 0 descriptor?? [ 162.897074][ T5280] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 162.905272][ T5296] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.971955][ T5296] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 163.036058][ T5296] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 163.050874][ T58] usb 3-1: USB disconnect, device number 11 [ 163.100188][ T5296] microsoft 0003:045E:07DA.000A: no inputs found [ 163.123976][ T5296] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 163.179195][ T48] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.228831][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 163.293619][ T6564] udevd[6564]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.380802][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.433921][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.473921][ T48] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 163.494368][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.527342][ T48] usb 5-1: config 0 descriptor?? [ 163.795463][ T5280] cpia1 2-1:0.0: only firmware version 1 is supported (got: 126) [ 163.980932][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.999040][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.007145][ T5278] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.208214][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 164.231409][ T5278] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 164.265226][ T5278] usb 3-1: config 0 has no interface number 0 [ 164.292083][ T5278] usb 3-1: config 0 interface 3 has no altsetting 0 [ 164.317967][ T5278] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 164.357878][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=247, SerialNumber=255 [ 164.386915][ T5278] usb 3-1: Product: syz [ 164.408972][ T5278] usb 3-1: SerialNumber: syz [ 164.441979][ T5278] usb 3-1: config 0 descriptor?? [ 164.469084][ T5278] hso 3-1:0.3: Not our interface [ 164.590542][ T5278] usb 2-1: USB disconnect, device number 7 [ 164.834908][ T8] usb 4-1: USB disconnect, device number 8 [ 165.149620][ T58] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.378299][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 165.421687][ T58] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 165.445799][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.471391][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.481634][ T58] usb 1-1: Product: syz [ 165.491799][ T58] usb 1-1: Manufacturer: syz [ 165.503307][ T58] usb 1-1: SerialNumber: syz [ 165.512420][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.535719][ T58] r8152-cfgselector 1-1: Unknown version 0x0000 [ 165.552292][ T58] r8152-cfgselector 1-1: config 0 descriptor?? [ 165.773214][ T58] r8152-cfgselector 1-1: Unknown version 0x0000 [ 165.829066][ T6572] pim6reg: left allmulticast mode [ 165.840375][ T48] usbhid 5-1:0.0: can't add hid device: -71 [ 165.859891][ T58] r8152-cfgselector 1-1: bad CDC descriptors [ 165.867983][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 165.895613][ T58] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 165.920639][ T48] usb 5-1: USB disconnect, device number 10 [ 166.630291][ T5278] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 166.848224][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 166.862374][ T5278] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 166.892777][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.921628][ T5278] usb 2-1: Product: syz [ 166.925972][ T5278] usb 2-1: Manufacturer: syz [ 166.930932][ T5278] usb 2-1: SerialNumber: syz [ 166.941200][ T5278] r8152-cfgselector 2-1: Unknown version 0x0000 [ 166.953111][ T5278] r8152-cfgselector 2-1: config 0 descriptor?? [ 167.216792][ T8] usb 3-1: USB disconnect, device number 12 [ 167.322929][ T5278] r8152-cfgselector 2-1: Needed 2 retries to read version [ 167.343673][ T5278] r8152-cfgselector 2-1: Unknown version 0x4c50 [ 167.356133][ T5278] r8152-cfgselector 2-1: bad CDC descriptors [ 167.567681][ T5281] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 168.613771][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.277'. [ 168.690156][ T6650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.277'. [ 168.854734][ T48] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 168.978827][ T6666] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 169.076283][ T6668] netlink: 'syz.3.282': attribute type 23 has an invalid length. [ 169.078732][ T6666] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.091640][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 169.115418][ T48] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 169.136235][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.171363][ T48] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 169.184406][ T48] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 169.224960][ T48] usb 3-1: Manufacturer: syz [ 169.250964][ T48] usb 3-1: config 0 descriptor?? [ 169.458272][ T48] rc_core: IR keymap rc-hauppauge not found [ 169.480457][ T48] Registered IR keymap rc-empty [ 169.507029][ T48] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 169.537013][ T48] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 171.206615][ T29] audit: type=1326 audit(1724506627.976:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.0.288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d22f79e79 code=0x0 [ 171.277373][ T48] usb 3-1: USB disconnect, device number 13 [ 171.948479][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 172.025048][ T6722] vlan2: entered promiscuous mode [ 172.073557][ T6722] batadv0: entered promiscuous mode [ 172.168082][ T6722] team0: Port device vlan2 added [ 172.528434][ T5278] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.760804][ T5278] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.781567][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 172.843605][ T5278] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 172.898901][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.940935][ T5278] usb 1-1: config 0 descriptor?? [ 173.196210][ T5278] Bluetooth: Can't get state to change to load ram patch err [ 173.207515][ T5278] Bluetooth: Loading patch file failed [ 173.232685][ T5278] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 173.938185][ T5296] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.110409][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'. [ 174.168272][ T5296] usb 5-1: Using ep0 maxpacket: 8 [ 174.188292][ T5296] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 174.208378][ T5296] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.234521][ T5296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.271286][ T5296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.301167][ T5296] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.331311][ T5296] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.355157][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.418240][ T48] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 174.568244][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.610450][ T48] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 174.636191][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.653044][ T48] usb 2-1: config 0 descriptor?? [ 174.719554][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.755746][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.780191][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 174.806473][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.834738][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.929586][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 174.957999][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.967331][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.003424][ T8] usb 4-1: Product: syz [ 175.019356][ T8] usb 4-1: Manufacturer: syz [ 175.036022][ T8] usb 4-1: SerialNumber: syz [ 175.236091][ T5278] usb 1-1: USB disconnect, device number 8 [ 175.274466][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.464800][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.306'. [ 175.482102][ T48] pegasus 2-1:0.0: probe with driver pegasus failed with error -121 [ 176.096800][ T48] usb 4-1: USB disconnect, device number 9 [ 176.119057][ T48] usblp0: removed [ 176.616167][ T6789] fuse: Unknown parameter '0x0000000000000004' [ 176.832302][ T5296] usb 5-1: usb_control_msg returned -71 [ 176.876963][ T5296] usbtmc 5-1:16.0: can't read capabilities [ 176.886887][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 176.952842][ T6797] xt_CT: No such helper "pptp" [ 176.956106][ T5296] usb 5-1: USB disconnect, device number 11 [ 177.156445][ T5272] usb 2-1: USB disconnect, device number 9 [ 177.228468][ T48] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 177.450831][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.498207][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.514722][ T48] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 177.524567][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.555779][ T48] usb 1-1: config 0 descriptor?? [ 177.833974][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 177.852978][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 177.889000][ T48] usb 1-1: USB disconnect, device number 9 [ 178.248238][ T5272] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.468228][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 178.503733][ T5272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.532430][ T5272] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.560073][ T5272] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 178.579533][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.615258][ T5272] usb 2-1: Product: syz [ 178.630981][ T5272] usb 2-1: Manufacturer: syz [ 178.651768][ T5272] usb 2-1: SerialNumber: syz [ 178.889527][ T5272] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 179.159162][ T5278] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.269296][ T5272] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.408227][ T5278] usb 4-1: Using ep0 maxpacket: 32 [ 179.421115][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.454810][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.477363][ T5278] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 179.493163][ T5272] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.527128][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.535798][ T5272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 179.543546][ T5278] usb 4-1: config 0 descriptor?? [ 179.575508][ T5272] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 179.616949][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.660236][ T5272] usb 1-1: config 0 descriptor?? [ 179.916944][ T8] usb 2-1: USB disconnect, device number 10 [ 179.963166][ T8] usblp0: removed [ 179.975130][ T5272] Bluetooth: Can't get state to change to load ram patch err [ 180.011386][ T5272] Bluetooth: Loading patch file failed [ 180.051751][ T5272] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 180.213002][ T5278] ft260 0003:0403:6030.000B: failed to retrieve chip version [ 180.264895][ T5278] ft260 0003:0403:6030.000B: probe with driver ft260 failed with error -71 [ 180.346375][ T5278] usb 4-1: USB disconnect, device number 10 [ 181.282787][ T5278] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.518191][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 181.529711][ T5278] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 181.554079][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.591957][ T5278] usb 2-1: config 0 descriptor?? [ 181.622450][ T5278] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 181.945850][ T8] usb 1-1: USB disconnect, device number 10 [ 181.954433][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.973446][ T5278] gspca_vc032x: reg_w err -71 [ 182.003119][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.032398][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.067941][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.081954][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.092944][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.115050][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.121651][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.127008][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.158449][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.163812][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.182494][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.187905][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.234672][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.254790][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.279726][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.285258][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.308206][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.313663][ T5278] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.316515][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.346850][ T5278] gspca_vc032x: Unknown sensor... [ 182.357292][ T5278] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 182.397896][ T5278] usb 2-1: USB disconnect, device number 11 [ 182.586224][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.802368][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.876729][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.887373][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.896653][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.904470][ T62] bridge_slave_1: left allmulticast mode [ 183.929208][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.939945][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 183.947649][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.988557][ T62] bridge_slave_1: left promiscuous mode [ 183.995160][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.033254][ T6925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.343'. [ 184.075121][ T62] bridge_slave_0: left allmulticast mode [ 184.102094][ T62] bridge_slave_0: left promiscuous mode [ 184.140030][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.305982][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.356016][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.368244][ T5296] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 185.379118][ T62] bond0 (unregistering): Released all slaves [ 185.588208][ T5296] usb 2-1: device descriptor read/64, error -71 [ 185.792403][ T6949] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 185.847988][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 185.898263][ T5296] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.028862][ T5232] Bluetooth: hci6: command tx timeout [ 186.048179][ T5296] usb 2-1: device descriptor read/64, error -71 [ 186.190526][ T5296] usb usb2-port1: attempt power cycle [ 186.489935][ T62] hsr_slave_0: left promiscuous mode [ 186.507031][ T62] hsr_slave_1: left promiscuous mode [ 186.538770][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.573640][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.607267][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.638317][ T5296] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 186.653214][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.713494][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 186.720551][ T5296] usb 2-1: device descriptor read/8, error -71 [ 186.822585][ T62] batadv0: left promiscuous mode [ 186.838691][ T62] veth1_macvtap: left promiscuous mode [ 186.864680][ T62] veth0_macvtap: left promiscuous mode [ 186.885238][ T62] veth1_vlan: left promiscuous mode [ 186.909405][ T62] veth0_vlan: left promiscuous mode [ 187.028230][ T5296] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 187.069927][ T5296] usb 2-1: device descriptor read/8, error -71 [ 187.231805][ T5296] usb usb2-port1: unable to enumerate USB device [ 187.449380][ T62] team0 (unregistering): Port device vlan2 removed [ 188.086596][ T62] team0 (unregistering): Port device team_slave_1 removed [ 188.108294][ T5232] Bluetooth: hci6: command tx timeout [ 188.249930][ T62] team0 (unregistering): Port device team_slave_0 removed [ 189.039459][ T5272] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.256208][ T5272] usb 1-1: Using ep0 maxpacket: 16 [ 189.289911][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.327110][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.388426][ T5272] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.442466][ T5272] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 189.464858][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.506035][ T6926] chnl_net:caif_netlink_parms(): no params data found [ 189.519509][ T5272] usb 1-1: config 0 descriptor?? [ 189.806335][ T7021] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 189.848542][ T7021] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.362'. [ 190.085407][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.105182][ T5272] koneplus 0003:1E7D:2E22.000C: unknown main item tag 0x0 [ 190.117177][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.150840][ T6926] bridge_slave_0: entered allmulticast mode [ 190.156196][ T5272] koneplus 0003:1E7D:2E22.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 190.175592][ T6926] bridge_slave_0: entered promiscuous mode [ 190.189319][ T5234] Bluetooth: hci6: command tx timeout [ 190.194765][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.194904][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.210844][ T6926] bridge_slave_1: entered allmulticast mode [ 190.219094][ T6926] bridge_slave_1: entered promiscuous mode [ 190.355000][ T62] IPVS: stop unused estimator thread 0... [ 190.468999][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.553221][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.816741][ T6926] team0: Port device team_slave_0 added [ 190.890804][ T6926] team0: Port device team_slave_1 added [ 191.158147][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.189455][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.322045][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.403499][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.486891][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.582478][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.788581][ T5272] koneplus 0003:1E7D:2E22.000C: couldn't init struct koneplus_device [ 191.816576][ T5272] koneplus 0003:1E7D:2E22.000C: couldn't install mouse [ 191.861406][ T5272] koneplus 0003:1E7D:2E22.000C: probe with driver koneplus failed with error -71 [ 191.947646][ T5272] usb 1-1: USB disconnect, device number 11 [ 191.958493][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 192.150145][ T6926] hsr_slave_0: entered promiscuous mode [ 192.208908][ T6926] hsr_slave_1: entered promiscuous mode [ 192.218290][ T6926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.236422][ T6926] Cannot create hsr debugfs directory [ 192.271485][ T5232] Bluetooth: hci6: command tx timeout [ 192.277172][ T5278] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.448607][ T5278] usb 4-1: device descriptor read/64, error -71 [ 192.499773][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 192.708314][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 192.732469][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.734189][ T2586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.741982][ T5278] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 192.763022][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.788228][ T8] usb 2-1: Product: syz [ 192.792465][ T8] usb 2-1: Manufacturer: syz [ 192.832889][ T8] usb 2-1: SerialNumber: syz [ 192.853093][ T8] usb 2-1: config 0 descriptor?? [ 192.978530][ T5278] usb 4-1: device descriptor read/64, error -71 [ 192.985930][ T2586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.111700][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.127574][ T5278] usb usb4-port1: attempt power cycle [ 193.130451][ T2586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.309704][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 193.369592][ T2586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.588981][ T5278] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 193.669818][ T5278] usb 4-1: device descriptor read/8, error -71 [ 193.955290][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.971227][ T5278] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 193.979663][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.993320][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.063261][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.071727][ T5278] usb 4-1: device descriptor read/8, error -71 [ 194.080782][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.097350][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.210185][ T5278] usb usb4-port1: unable to enumerate USB device [ 194.364259][ T8] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 194.389552][ T8] usb 2-1: USB disconnect, device number 16 [ 194.427410][ T2586] bridge_slave_1: left allmulticast mode [ 194.451006][ T2586] bridge_slave_1: left promiscuous mode [ 194.459572][ T2586] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.475926][ T2586] bridge_slave_0: left allmulticast mode [ 194.482124][ T2586] bridge_slave_0: left promiscuous mode [ 194.492167][ T2586] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.595775][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.611882][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.678534][ T5278] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.868627][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 194.893586][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 194.906360][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 194.920619][ T5278] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.938166][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.958089][ T5278] usb 5-1: Product: syz [ 194.962329][ T5278] usb 5-1: Manufacturer: syz [ 194.970712][ T2586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.978508][ T5278] usb 5-1: SerialNumber: syz [ 194.997927][ T5278] usb 5-1: config 0 descriptor?? [ 195.015371][ T5278] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 195.040003][ T2586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.071970][ T2586] bond0 (unregistering): Released all slaves [ 195.242927][ T5234] Bluetooth: hci5: ACL packet for unknown connection handle 203 [ 195.716011][ T2586] hsr_slave_0: left promiscuous mode [ 195.737594][ T2586] hsr_slave_1: left promiscuous mode [ 195.758883][ T2586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.777987][ T2586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.800815][ T2586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.819192][ T2586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.905766][ T2586] veth1_macvtap: left promiscuous mode [ 195.933953][ T2586] veth0_macvtap: left promiscuous mode [ 195.952672][ T2586] veth1_vlan: left promiscuous mode [ 195.972570][ T2586] veth0_vlan: left promiscuous mode [ 196.188492][ T5234] Bluetooth: hci3: command tx timeout [ 196.670294][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 196.680145][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 197.478154][ T48] usb 5-1: USB disconnect, device number 12 [ 198.268170][ T4619] Bluetooth: hci3: command tx timeout [ 198.346438][ T2586] team0 (unregistering): Port device team_slave_1 removed [ 198.481102][ T2586] team0 (unregistering): Port device team_slave_0 removed [ 199.944326][ T6926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.040633][ T6926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.106200][ T6926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.179232][ T6926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 200.248925][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 200.350637][ T4619] Bluetooth: hci3: command tx timeout [ 200.608454][ T48] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.725940][ T29] audit: type=1326 audit(1724506657.496:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 200.770299][ T29] audit: type=1326 audit(1724506657.496:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 200.792453][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.803206][ T29] audit: type=1326 audit(1724506657.496:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 200.825596][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.842145][ T48] usb 4-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 200.858295][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.874000][ T29] audit: type=1326 audit(1724506657.526:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 200.910825][ T48] usb 4-1: New USB device found, idVendor=046d, idProduct=c663, bcdDevice= 0.00 [ 200.938495][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.948732][ T29] audit: type=1326 audit(1724506657.526:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 200.990465][ T48] usb 4-1: config 0 descriptor?? [ 201.028594][ T29] audit: type=1326 audit(1724506657.526:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 201.051768][ T5296] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 201.136344][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.138232][ T29] audit: type=1326 audit(1724506657.526:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 201.219600][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.228254][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.228535][ T7086] bridge_slave_0: entered allmulticast mode [ 201.261463][ T29] audit: type=1326 audit(1724506657.526:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 201.289696][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.318362][ T5296] usb 2-1: Using ep0 maxpacket: 32 [ 201.325698][ T29] audit: type=1326 audit(1724506657.526:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 201.360932][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.368256][ T7086] bridge_slave_0: entered promiscuous mode [ 201.393078][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.435124][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.444022][ T5296] usb 2-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 201.457378][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.483324][ T7086] bridge_slave_1: entered allmulticast mode [ 201.502914][ T29] audit: type=1326 audit(1724506657.526:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce50779e79 code=0x7ffc0000 [ 201.525070][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.527757][ T7086] bridge_slave_1: entered promiscuous mode [ 201.554517][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.605005][ T5296] usb 2-1: config 0 descriptor?? [ 201.843566][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.875860][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.026236][ T7086] team0: Port device team_slave_0 added [ 202.183364][ T7086] team0: Port device team_slave_1 added [ 202.311147][ T5296] usb 2-1: USB disconnect, device number 17 [ 202.428579][ T4619] Bluetooth: hci3: command tx timeout [ 202.472932][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.496372][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.560008][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.607023][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.624617][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.659411][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.698743][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.863049][ T7086] hsr_slave_0: entered promiscuous mode [ 202.894729][ T7086] hsr_slave_1: entered promiscuous mode [ 202.938371][ T7086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.978322][ T7086] Cannot create hsr debugfs directory [ 203.115659][ T7196] netlink: 'syz.1.390': attribute type 9 has an invalid length. [ 203.180292][ T7196] bond_slave_0: entered promiscuous mode [ 203.186470][ T7196] bond_slave_1: entered promiscuous mode [ 203.224903][ T7199] trusted_key: encrypted_key: keyword 'ne•' not recognized [ 203.250273][ T7196] macvlan2: entered promiscuous mode [ 203.287250][ T7196] bond0: entered promiscuous mode [ 203.300123][ T7196] macvlan2: entered allmulticast mode [ 203.306371][ T7196] bond0: entered allmulticast mode [ 203.318268][ T7196] bond_slave_0: entered allmulticast mode [ 203.327361][ T7196] bond_slave_1: entered allmulticast mode [ 203.367300][ T7196] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.431594][ T7202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.390'. [ 203.484083][ T6926] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.744926][ T7208] dccp_close: ABORT with 20 bytes unread [ 203.797021][ T48] usb 4-1: string descriptor 0 read error: -71 [ 203.829257][ T48] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 203.854424][ T48] usb 4-1: USB disconnect, device number 15 [ 203.964013][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.971204][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.123871][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.131051][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.695492][ T6926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.167558][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.350927][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 205.607105][ T6926] veth0_vlan: entered promiscuous mode [ 205.710554][ T6926] veth1_vlan: entered promiscuous mode [ 205.738998][ T7086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.790473][ T7086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.850674][ T7086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.888784][ T7086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.103442][ T6926] veth0_macvtap: entered promiscuous mode [ 206.220032][ T6926] veth1_macvtap: entered promiscuous mode [ 206.347023][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.400033][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.446352][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.482286][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.506490][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.545057][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.595800][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.686953][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.718637][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.778066][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.808339][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.925783][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.958961][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.978244][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.997835][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.020063][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.030741][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 207.059116][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.099309][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.138434][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.178169][ T6926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.212136][ T6926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.238277][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 207.259746][ T8] usb 4-1: too many configurations: 214, using maximum allowed: 8 [ 207.274510][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.303668][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 207.320848][ T8] usb 4-1: can't read configurations, error -61 [ 207.395785][ T6926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.419799][ T6926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.446267][ T6926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.476233][ T6926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.528216][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 207.604662][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.733029][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 207.749412][ T8] usb 4-1: too many configurations: 214, using maximum allowed: 8 [ 207.767667][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.784410][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 207.809457][ T8] usb 4-1: can't read configurations, error -61 [ 207.839809][ T8] usb usb4-port1: attempt power cycle [ 207.860868][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.868145][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.998490][ T2586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.007451][ T2586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.047722][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.054961][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.199511][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.207471][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.348293][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 208.417565][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 208.426267][ T8] usb 4-1: too many configurations: 214, using maximum allowed: 8 [ 208.443665][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 208.452669][ T8] usb 4-1: can't read configurations, error -61 [ 208.519893][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.618741][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 208.684800][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.689661][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 208.711749][ T8] usb 4-1: too many configurations: 214, using maximum allowed: 8 [ 208.739900][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 208.767918][ T8] usb 4-1: can't read configurations, error -61 [ 208.778874][ T8] usb usb4-port1: unable to enumerate USB device [ 208.782855][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.818398][ T5296] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 208.910250][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.008213][ T5296] usb 3-1: Using ep0 maxpacket: 32 [ 209.030709][ T5296] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.060372][ T5296] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 209.094172][ T5296] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.115794][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.127939][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.147552][ T5296] usb 3-1: Product: syz [ 209.154601][ T5296] usb 3-1: Manufacturer: syz [ 209.173569][ T5296] usb 3-1: SerialNumber: syz [ 209.353370][ T7086] veth0_vlan: entered promiscuous mode [ 209.414643][ T5296] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 209.529029][ T7086] veth1_vlan: entered promiscuous mode [ 209.611773][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.626752][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.637251][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.646971][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.659005][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.666425][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.842840][ T1111] bridge_slave_1: left allmulticast mode [ 209.865818][ T1111] bridge_slave_1: left promiscuous mode [ 209.875561][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.924918][ T1111] bridge_slave_0: left allmulticast mode [ 209.959929][ T1111] bridge_slave_0: left promiscuous mode [ 209.969663][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.190428][ T5277] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 210.340079][ T5278] usb 3-1: USB disconnect, device number 14 [ 210.362957][ T5278] usblp0: removed [ 210.391399][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 210.439405][ T5277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.456799][ T5277] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 210.475109][ T5277] usb 4-1: config 1 interface 0 has no altsetting 0 [ 210.495461][ T5277] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 210.510042][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.523581][ T5277] usb 4-1: Product: syz [ 210.527966][ T5277] usb 4-1: Manufacturer: syz [ 210.546439][ T5277] usb 4-1: SerialNumber: syz [ 211.019075][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.049821][ T7356] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.065617][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.081212][ T1111] bond0 (unregistering): Released all slaves [ 211.172644][ T7332] netlink: 'syz.1.410': attribute type 29 has an invalid length. [ 211.197151][ T5277] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12 [ 211.254075][ T4666] bcm5974 4-1:1.0: could not read from device [ 211.306860][ T4666] bcm5974 4-1:1.0: could not read from device [ 211.343649][ T4666] bcm5974 4-1:1.0: could not read from device [ 211.374256][ T5277] usb 4-1: USB disconnect, device number 20 [ 211.394421][ T7086] veth0_macvtap: entered promiscuous mode [ 211.703216][ T7086] veth1_macvtap: entered promiscuous mode [ 211.709346][ T4619] Bluetooth: hci0: command tx timeout [ 212.010400][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.021091][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.033066][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.044650][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.055070][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.081670][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.098239][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.128075][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.148445][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.159444][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.173714][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.193903][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.214918][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.253890][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.287463][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.309522][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.328590][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.354219][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.376095][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.399634][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.413317][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.427311][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.453688][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.468208][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.468256][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 212.490358][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.516959][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.547008][ T1111] hsr_slave_0: left promiscuous mode [ 212.559507][ T1111] hsr_slave_1: left promiscuous mode [ 212.583214][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.602155][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.618528][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.645899][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.658366][ T5296] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 212.668307][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 212.684379][ T8] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 212.704573][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.705065][ T1111] veth1_macvtap: left promiscuous mode [ 212.719232][ T8] usb 3-1: Product: syz [ 212.723531][ T8] usb 3-1: Manufacturer: syz [ 212.727182][ T1111] veth0_macvtap: left promiscuous mode [ 212.734264][ T8] usb 3-1: SerialNumber: syz [ 212.734577][ T1111] veth1_vlan: left promiscuous mode [ 212.742460][ T8] usb 3-1: config 0 descriptor?? [ 212.774659][ T1111] veth0_vlan: left promiscuous mode [ 212.776278][ T8] gspca_main: conex-2.14.0 probing 0572:0041 [ 212.868218][ T5296] usb 2-1: Using ep0 maxpacket: 32 [ 212.881430][ T5296] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.913316][ T5296] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 212.942519][ T5296] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.974489][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.999917][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.028999][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.034808][ T5296] usb 2-1: Product: syz [ 213.049547][ T5296] usb 2-1: Manufacturer: syz [ 213.060435][ T5296] usb 2-1: SerialNumber: syz [ 213.269711][ T8] usb 3-1: USB disconnect, device number 15 [ 213.312781][ T5296] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 213.789507][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 213.789767][ T4619] Bluetooth: hci0: command tx timeout [ 213.889677][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 213.943968][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 213.993438][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 214.037198][ T25] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 214.046556][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.065795][ T25] usb 4-1: Product: syz [ 214.070366][ T25] usb 4-1: Manufacturer: syz [ 214.075028][ T25] usb 4-1: SerialNumber: syz [ 214.096825][ T25] usb 4-1: config 0 descriptor?? [ 214.118927][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.167927][ T58] usb 2-1: USB disconnect, device number 18 [ 214.185270][ T58] usblp0: removed [ 214.360737][ T7419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.424'. [ 214.373080][ T25] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 214.451858][ T6565] udevd[6565]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.954802][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.422'. [ 214.984279][ T7422] netlink: 'syz.2.425': attribute type 2 has an invalid length. [ 215.003430][ T5280] usb 4-1: USB disconnect, device number 21 [ 215.051449][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 215.117808][ T7086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.141384][ T7086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.151019][ T7086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.160019][ T7086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.327058][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 215.363298][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.408151][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.456352][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.494908][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.526012][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.536292][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.596606][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 215.644444][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.668661][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.773868][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.776903][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 215.801156][ T8] usbtmc 3-1:16.0: can't read capabilities [ 215.804429][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.868182][ T4619] Bluetooth: hci0: command tx timeout [ 215.986659][ T7422] xt_TCPMSS: Only works on TCP SYN packets [ 216.004854][ T8] usb 3-1: USB disconnect, device number 16 [ 216.013253][ T7448] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 216.168431][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.184754][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.203583][ T7325] bridge_slave_0: entered allmulticast mode [ 216.212164][ T7325] bridge_slave_0: entered promiscuous mode [ 216.230086][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.243055][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.256040][ T7325] bridge_slave_1: entered allmulticast mode [ 216.274182][ T7325] bridge_slave_1: entered promiscuous mode [ 216.348713][ T5281] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 216.478936][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.523149][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.549418][ T5281] usb 4-1: no configurations [ 216.559096][ T5281] usb 4-1: can't read configurations, error -22 [ 216.752894][ T5281] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 216.811239][ T7325] team0: Port device team_slave_0 added [ 216.837136][ T7325] team0: Port device team_slave_1 added [ 216.969167][ T5281] usb 4-1: no configurations [ 216.993271][ T5281] usb 4-1: can't read configurations, error -22 [ 217.005103][ T5281] usb usb4-port1: attempt power cycle [ 217.094113][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.110095][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.197469][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.324549][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.342894][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.373830][ T7473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.410581][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.489464][ T5281] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 217.539870][ T5281] usb 4-1: no configurations [ 217.545727][ T5281] usb 4-1: can't read configurations, error -22 [ 217.602462][ T7325] hsr_slave_0: entered promiscuous mode [ 217.624399][ T7325] hsr_slave_1: entered promiscuous mode [ 217.679070][ T7325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.726129][ T7325] Cannot create hsr debugfs directory [ 217.738263][ T5281] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 217.809736][ T5281] usb 4-1: no configurations [ 217.825827][ T5281] usb 4-1: can't read configurations, error -22 [ 217.853446][ T5281] usb usb4-port1: unable to enumerate USB device [ 217.948265][ T4619] Bluetooth: hci0: command tx timeout [ 218.037188][ T7484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.434'. [ 218.128178][ T5280] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 218.358318][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 218.367129][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.405402][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.449584][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.483635][ T5280] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 218.513113][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.579083][ T5280] usb 3-1: config 0 descriptor?? [ 219.022774][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 219.022794][ T29] audit: type=1326 audit(1724506675.796:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.3.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a12379e79 code=0x0 [ 219.194881][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.283065][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.402631][ T7325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.432124][ T7502] kvm: emulating exchange as write [ 219.453653][ T7325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.489370][ T7325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.531373][ T7325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.804615][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 220.025392][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.217161][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.302504][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.309816][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.426666][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.433937][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.910010][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.126870][ T7325] veth0_vlan: entered promiscuous mode [ 221.157179][ T7325] veth1_vlan: entered promiscuous mode [ 221.360845][ T7325] veth0_macvtap: entered promiscuous mode [ 221.418092][ T7325] veth1_macvtap: entered promiscuous mode [ 221.553885][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.712469][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.748132][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.775986][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.803299][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.827612][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.854830][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.881984][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.909828][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.936025][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.964232][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.005075][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.039666][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.279605][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.304797][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.358561][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.412052][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.435118][ T7554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.445'. [ 222.446088][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.549034][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.550175][ T7478] syz.2.433 (7478): drop_caches: 2 [ 222.595725][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.693144][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.751659][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.796456][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.838709][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.872459][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.913900][ T5280] usbhid 3-1:0.0: can't add hid device: -71 [ 222.940121][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.957591][ T5280] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 222.993870][ T7325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.025900][ T5280] usb 3-1: USB disconnect, device number 17 [ 223.071834][ T7325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.118321][ T7325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.162759][ T7325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.558262][ T5280] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 223.576131][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.607636][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.766302][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.783027][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 223.832114][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.843804][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.870964][ T7573] netlink: 'syz.3.448': attribute type 7 has an invalid length. [ 223.892932][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.930859][ T5280] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 223.941853][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.982210][ T5280] usb 3-1: config 0 descriptor?? [ 224.393963][ T5280] hid (null): global environment stack underflow [ 224.432871][ T5280] bigben 0003:146B:0902.000E: unexpected rdesc, please submit for review [ 224.499147][ T5280] bigben 0003:146B:0902.000E: unknown main item tag 0x0 [ 224.506194][ T5280] bigben 0003:146B:0902.000E: global environment stack underflow [ 224.580481][ T5280] bigben 0003:146B:0902.000E: item 0 2 1 11 parsing failed [ 224.616726][ T5280] bigben 0003:146B:0902.000E: parse failed [ 224.636209][ T5280] bigben 0003:146B:0902.000E: probe with driver bigben failed with error -22 [ 224.998261][ T5280] usb 3-1: USB disconnect, device number 18 [ 225.270690][ T7605] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 225.926173][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.002201][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.073121][ T7634] netlink: 'syz.1.458': attribute type 4 has an invalid length. [ 226.119346][ T7639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.457'. [ 226.125515][ T7637] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581 [ 226.178140][ T5296] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 226.388846][ T5296] usb 3-1: Using ep0 maxpacket: 32 [ 226.447313][ T5296] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 226.479823][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.512590][ T5296] usb 3-1: config 0 descriptor?? [ 226.537026][ T5296] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 226.901240][ T7648] xt_hashlimit: overflow, try lower: 3/0 [ 227.290041][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.573286][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.749121][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.761305][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.800254][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.893414][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.917494][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.926223][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.955766][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.966826][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.013952][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.032155][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.158187][ T5280] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.193679][ T5296] gspca_vc032x: reg_r err -32 [ 228.210280][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.235680][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.248729][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.265884][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.282895][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.302702][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.324053][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.339628][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.365184][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.380841][ T5280] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 228.387669][ T11] bridge_slave_1: left allmulticast mode [ 228.402778][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.410728][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 228.431822][ T11] bridge_slave_1: left promiscuous mode [ 228.437869][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.439628][ T5280] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.474187][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.481473][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.495369][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.505713][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.516325][ T11] bridge_slave_0: left allmulticast mode [ 228.533985][ T11] bridge_slave_0: left promiscuous mode [ 228.544589][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.559633][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.577833][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.582804][ T5280] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.587080][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.616888][ T5296] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.633044][ T5296] gspca_vc032x: Unknown sensor... [ 228.634816][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.643183][ T5296] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 228.676197][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.705469][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 228.714587][ T5280] usb 2-1: Product: syz [ 228.722858][ T5280] usb 2-1: Manufacturer: syz [ 228.748503][ T5280] usb 2-1: SerialNumber: syz [ 228.791968][ T25] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 228.806672][ T5280] cdc_ncm 2-1:1.0: skipping garbage [ 228.839173][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.864183][ T25] usb 1-1: config 0 descriptor?? [ 229.017701][ T5280] cdc_ncm 2-1:1.0: bind() failure [ 229.083354][ T5280] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 229.136773][ T5280] cdc_ncm 2-1:1.1: bind() failure [ 229.144236][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.159585][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.171528][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.181653][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.189842][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.197495][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.248197][ T5280] usb 2-1: USB disconnect, device number 19 [ 229.317835][ T25] Bluetooth: Can't get state to change to load configuration err [ 229.335120][ T25] Bluetooth: Loading sysconfig file failed [ 229.349711][ T25] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 229.414714][ T29] audit: type=1326 audit(1724506686.186:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.3.470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a12379e79 code=0x0 [ 229.519723][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 229.604656][ T25] usb 3-1: USB disconnect, device number 19 [ 229.619595][ T7673] netlink: 'syz.3.470': attribute type 6 has an invalid length. [ 230.335242][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.408777][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.462004][ T11] bond0 (unregistering): Released all slaves [ 230.527111][ T7676] netlink: 'syz.1.471': attribute type 21 has an invalid length. [ 230.562389][ T7679] netlink: 'syz.3.472': attribute type 23 has an invalid length. [ 230.574913][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 230.959283][ T5280] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 230.970545][ T7697] xt_hashlimit: overflow, try lower: 3/0 [ 231.070697][ T30] INFO: task syz.1.12:5322 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 231.128320][ T30] Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 231.163656][ T5272] usb 1-1: USB disconnect, device number 12 [ 231.193029][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 231.218121][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 231.228486][ T5232] Bluetooth: hci0: command tx timeout [ 231.254405][ T5280] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 231.288149][ T30] task:syz.1.12 state:D stack:25008 pid:5322 tgid:5322 ppid:5239 flags:0x00004004 [ 231.349314][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.384450][ T30] Call Trace: [ 231.387797][ T30] [ 231.408454][ T7670] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 231.414974][ T30] __schedule+0x1800/0x4a60 [ 231.459532][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.481059][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 231.494290][ T30] ? __pfx___schedule+0x10/0x10 [ 231.508118][ T30] ? __pfx_lock_release+0x10/0x10 [ 231.513192][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 231.538144][ T5280] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 231.547207][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.555534][ T30] ? schedule+0x90/0x320 [ 231.559943][ T30] schedule+0x14b/0x320 [ 231.564119][ T30] schedule_preempt_disabled+0x13/0x30 [ 231.578204][ T30] __mutex_lock+0x6a4/0xd70 [ 231.593371][ T30] ? __mutex_lock+0x527/0xd70 [ 231.599351][ T5280] usb 3-1: config 0 descriptor?? [ 231.608102][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 231.628474][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 231.633578][ T30] ? __pfx_up_write+0x10/0x10 [ 231.665854][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 231.691321][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 231.697429][ T30] hugetlb_wp+0x104d/0x3a90 [ 231.724516][ T30] ? mark_lock+0x9a/0x350 [ 231.736127][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 231.746141][ T30] ? __pfx___might_resched+0x10/0x10 [ 231.766804][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 231.772408][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 231.784808][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.808349][ T30] ? __filemap_get_folio+0x769/0xc10 [ 231.813775][ T30] hugetlb_fault+0x27b2/0x3770 [ 231.838109][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 231.843344][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 231.878107][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 231.883949][ T30] handle_mm_fault+0x173f/0x1980 [ 231.908093][ T30] ? __pfx_lock_release+0x10/0x10 [ 231.913269][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 231.919334][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 231.924637][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 231.948204][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 231.953916][ T30] ? exc_page_fault+0x113/0x8c0 [ 231.978065][ T30] exc_page_fault+0x459/0x8c0 [ 231.982898][ T30] asm_exc_page_fault+0x26/0x30 [ 231.987830][ T30] RIP: 0033:0x7f4d27a410c4 [ 231.995849][ T30] RSP: 002b:00007f4d27e3fb60 EFLAGS: 00010246 [ 232.008167][ T30] RAX: 0000000020006680 RBX: 0000000000000001 RCX: 0000000000000000 [ 232.016211][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555d4533c8 [ 232.024836][ T30] RBP: 00007f4d27e3fc68 R08: 0000000000000000 R09: 0000000000000000 [ 232.048092][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 [ 232.056236][ T30] R13: 00007f4d27e3fc90 R14: 00007f4d27e3fcb0 R15: fffffffffffffffe [ 232.074800][ T30] [ 232.086807][ T30] INFO: task syz.1.12:5324 blocked for more than 144 seconds. [ 232.118112][ T30] Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 232.125852][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.134966][ T30] task:syz.1.12 state:D stack:22608 pid:5324 tgid:5322 ppid:5239 flags:0x00004004 [ 232.150343][ T30] Call Trace: [ 232.153685][ T30] [ 232.156654][ T30] __schedule+0x1800/0x4a60 [ 232.161375][ T30] ? __pfx___schedule+0x10/0x10 [ 232.166304][ T30] ? __pfx_lock_release+0x10/0x10 [ 232.171458][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 232.177494][ T30] ? schedule+0x90/0x320 [ 232.181904][ T30] schedule+0x14b/0x320 [ 232.186106][ T30] io_schedule+0x8d/0x110 [ 232.191011][ T30] folio_wait_bit_common+0x882/0x12b0 [ 232.196464][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 232.202632][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 232.208659][ T30] ? _raw_spin_unlock+0x28/0x50 [ 232.213562][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 232.219450][ T30] __filemap_get_folio+0xb7/0xc10 [ 232.224655][ T30] hugetlb_fault+0x1b72/0x3770 [ 232.229599][ T30] ? __pfx_validate_chain+0x10/0x10 [ 232.234858][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 232.241948][ T30] ? mt_find+0x226/0x850 [ 232.246268][ T30] ? __pfx_lock_release+0x10/0x10 [ 232.251634][ T30] handle_mm_fault+0x173f/0x1980 [ 232.256633][ T30] ? mt_find+0x62d/0x850 [ 232.262899][ T30] ? mt_find+0x226/0x850 [ 232.267292][ T30] ? __pfx_mt_find+0x10/0x10 [ 232.272039][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 232.277383][ T30] ? find_vma+0xf9/0x170 [ 232.281770][ T30] ? __pfx_find_vma+0x10/0x10 [ 232.286486][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 232.292626][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.299092][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 232.307929][ T30] exc_page_fault+0x2b9/0x8c0 [ 232.312779][ T30] asm_exc_page_fault+0x26/0x30 [ 232.317675][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 232.323314][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 232.344979][ T30] RSP: 0018:ffffc90004167778 EFLAGS: 00050202 [ 232.351666][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 232.360487][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606d80 [ 232.370805][ T30] RBP: ffffc90004167ec8 R08: ffffffff9017f46f R09: 1ffffffff202fe8d [ 232.379242][ T30] R10: dffffc0000000000 R11: fffffbfff202fe8e R12: 1ffff9200082cf7d [ 232.387255][ T30] R13: 1ffff9200082cf08 R14: 0000000020800000 R15: 0000000000800000 [ 232.395377][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 232.400648][ T30] ? stack_trace_save+0x118/0x1d0 [ 232.405701][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 232.411271][ T30] ? stack_depot_save_flags+0x29/0x830 [ 232.416774][ T30] ? kasan_save_track+0x51/0x80 [ 232.421741][ T30] ? kasan_save_track+0x3f/0x80 [ 232.426618][ T30] ? kasan_save_free_info+0x40/0x50 [ 232.432608][ T30] ? poison_slab_object+0xe0/0x150 [ 232.437781][ T30] ? __kasan_slab_free+0x37/0x60 [ 232.444914][ T30] ? kfree+0x149/0x360 [ 232.449110][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 232.454778][ T30] ? security_file_ioctl+0x75/0xb0 [ 232.460023][ T30] ? __se_sys_ioctl+0x47/0x170 [ 232.464827][ T30] ? do_syscall_64+0xf3/0x230 [ 232.469805][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.475927][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 232.482778][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 232.487881][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.494495][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 232.501252][ T30] ? __pfx_lock_release+0x10/0x10 [ 232.506544][ T30] ? kfree+0x149/0x360 [ 232.510891][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 232.516586][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.522865][ T30] ? __fget_files+0x29/0x470 [ 232.527680][ T30] ? __fget_files+0x3f6/0x470 [ 232.532478][ T30] ? __fget_files+0x29/0x470 [ 232.537114][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 232.542558][ T30] ? security_file_ioctl+0x87/0xb0 [ 232.551149][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 232.556722][ T30] __se_sys_ioctl+0xfc/0x170 [ 232.561536][ T30] do_syscall_64+0xf3/0x230 [ 232.566187][ T30] ? clear_bhb_loop+0x35/0x90 [ 232.571305][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.577254][ T30] RIP: 0033:0x7f4d27b79e79 [ 232.582034][ T30] RSP: 002b:00007f4d28a08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.592516][ T30] RAX: ffffffffffffffda RBX: 00007f4d27d15f80 RCX: 00007f4d27b79e79 [ 232.600770][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000005 [ 232.608876][ T30] RBP: 00007f4d27be793e R08: 0000000000000000 R09: 0000000000000000 [ 232.616887][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.625050][ T30] R13: 0000000000000000 R14: 00007f4d27d15f80 R15: 00007f4d27e3fa38 [ 232.634021][ T30] [ 232.637229][ T30] INFO: task syz.2.13:5330 blocked for more than 144 seconds. [ 232.688066][ T30] Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 232.695817][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.758094][ T30] task:syz.2.13 state:D stack:26176 pid:5330 tgid:5330 ppid:5242 flags:0x00000004 [ 232.798352][ T30] Call Trace: [ 232.801743][ T30] [ 232.804730][ T30] __schedule+0x1800/0x4a60 [ 232.848142][ T30] ? __pfx___schedule+0x10/0x10 [ 232.868253][ T30] ? __pfx_lock_release+0x10/0x10 [ 232.873418][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 232.898066][ T30] ? schedule+0x90/0x320 [ 232.902471][ T30] schedule+0x14b/0x320 [ 232.906720][ T30] schedule_preempt_disabled+0x13/0x30 [ 232.942944][ T30] __mutex_lock+0x6a4/0xd70 [ 232.947592][ T30] ? __mutex_lock+0x527/0xd70 [ 232.978090][ T30] ? hugetlb_fault+0x56f/0x3770 [ 232.983076][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 233.018091][ T30] ? __lock_acquire+0x137a/0x2040 [ 233.023244][ T30] hugetlb_fault+0x56f/0x3770 [ 233.048210][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 233.053573][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 233.088102][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 233.093533][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 233.116198][ T30] handle_mm_fault+0x173f/0x1980 [ 233.121961][ T30] ? __pfx_lock_release+0x10/0x10 [ 233.127101][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 233.143922][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 233.156293][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 233.167100][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 233.198107][ T30] ? exc_page_fault+0x113/0x8c0 [ 233.203094][ T30] exc_page_fault+0x459/0x8c0 [ 233.207853][ T30] asm_exc_page_fault+0x26/0x30 [ 233.239416][ T30] RIP: 0033:0x7ff6a2f418e2 [ 233.243978][ T30] RSP: 002b:00007ff6a323fb98 EFLAGS: 00010246 [ 233.278247][ T30] RAX: 0000000020847fff RBX: 0000000000000004 RCX: ffffffffffffff03 [ 233.286335][ T30] RDX: 0000000000000001 RSI: 00007ff6a2a0031b RDI: 0000000020847fff [ 233.310955][ T5232] Bluetooth: hci0: command tx timeout [ 233.317866][ T30] RBP: 00007ff6a323fc68 R08: 00007ff6a2e00000 R09: 0000000000000002 [ 233.326136][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 [ 233.334731][ T30] R13: 00007ff6a323fc90 R14: 00007ff6a323fcb0 R15: fffffffffffffffe [ 233.342859][ T30] [ 233.362247][ T30] [ 233.362247][ T30] Showing all locks held in the system: [ 233.372591][ T30] 4 locks held by kworker/u8:0/11: [ 233.377757][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 233.391155][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 233.404445][ T30] #2: ffffffff8fc77b50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 233.415017][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 233.430162][ T30] 1 lock held by khungtaskd/30: [ 233.435093][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 233.445439][ T30] 5 locks held by kworker/u8:4/62: [ 233.459313][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 233.473335][ T30] #1: ffff8880b9328948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 233.488083][ T30] #2: ffff8880b932a718 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x744/0xeb0 [ 233.497231][ T30] #3: ffffffff9511b8f0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 233.522288][ T30] #4: ffffffff95127d88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 [ 233.540100][ T30] 2 locks held by getty/4985: [ 233.544906][ T30] #0: ffff88802b6270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 233.568166][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 233.591998][ T30] 5 locks held by kworker/0:7/5280: [ 233.597336][ T30] #0: ffff88801d6a2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 233.618051][ T30] #1: ffffc90003e97d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 233.643499][ T30] #2: ffff888023ec7190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 233.653237][ T30] #3: ffff88807d27c190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 233.674604][ T30] #4: ffff8880235a4d68 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_configuration+0x4fb/0x1fb0 [ 233.686218][ T30] 2 locks held by syz.1.12/5322: [ 233.691801][ T30] #0: ffff888079f73148 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 233.702824][ T30] #1: ffff88801c282698 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 233.714485][ T30] 3 locks held by syz.1.12/5324: [ 233.719987][ T30] #0: ffff8880794d4d98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 233.730724][ T30] #1: ffff88801c282698 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 233.742197][ T30] #2: ffff88807a70e4e8 (&resv_map->rw_sema){.+.+}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 233.752790][ T30] 2 locks held by syz.2.13/5330: [ 233.757803][ T30] #0: ffff88801d3bd220 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 233.768957][ T30] #1: ffff88801c282698 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 233.796084][ T30] 3 locks held by syz-executor/6017: [ 233.802988][ T30] #0: ffff88802611cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 233.813977][ T30] #1: ffff88802611c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 233.824320][ T30] #2: ffffffff8fdf01e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 233.834937][ T30] 3 locks held by syz-executor/6302: [ 233.840787][ T30] #0: ffff88802e9c4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 233.854291][ T30] #1: ffff88802e9c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 233.864246][ T30] #2: ffffffff8fdf01e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 233.896866][ T30] 3 locks held by syz-executor/7086: [ 233.908168][ T30] #0: ffff888055c34d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 233.926110][ T30] #1: ffff888055c34078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 233.936493][ T30] #2: ffffffff8fdf01e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 233.950198][ T30] 3 locks held by syz-executor/7670: [ 233.955542][ T30] #0: ffff888060c04d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 233.966021][ T30] #1: ffff888060c04078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 233.976286][ T30] #2: ffffffff8fdf01e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 233.989685][ T30] 2 locks held by syz.2.475/7688: [ 233.994766][ T30] #0: ffff88802a63cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 234.005674][ T30] #1: ffff88802a63c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 234.015905][ T30] 3 locks held by kvm-nx-lpage-re/7704: [ 234.022107][ T30] #0: ffffffff8e965ea8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x27/0xe0 [ 234.033400][ T30] #1: ffffffff8e7d2610 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x11/0x40 [ 234.048269][ T30] #2: ffffffff8e966090 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x31/0xe0 [ 234.069940][ T30] [ 234.084721][ T30] ============================================= [ 234.084721][ T30] [ 234.095474][ T30] NMI backtrace for cpu 0 [ 234.099883][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 234.110697][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.120802][ T30] Call Trace: [ 234.124119][ T30] [ 234.127086][ T30] dump_stack_lvl+0x241/0x360 [ 234.131811][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.137047][ T30] ? __pfx__printk+0x10/0x10 [ 234.141775][ T30] ? vprintk_emit+0x667/0x7c0 [ 234.146512][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 234.151596][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 234.156575][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 234.162050][ T30] ? _printk+0xd5/0x120 [ 234.166212][ T30] ? __pfx__printk+0x10/0x10 [ 234.170834][ T30] ? __wake_up_klogd+0xcc/0x110 [ 234.175722][ T30] ? __pfx__printk+0x10/0x10 [ 234.180435][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 234.185565][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 234.191564][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 234.197562][ T30] watchdog+0xff4/0x1040 [ 234.201830][ T30] ? watchdog+0x1ea/0x1040 [ 234.206264][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.210956][ T30] kthread+0x2f0/0x390 [ 234.215044][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.219733][ T30] ? __pfx_kthread+0x10/0x10 [ 234.224343][ T30] ret_from_fork+0x4b/0x80 [ 234.228776][ T30] ? __pfx_kthread+0x10/0x10 [ 234.233394][ T30] ret_from_fork_asm+0x1a/0x30 [ 234.238274][ T30] [ 234.243274][ T30] Sending NMI from CPU 0 to CPUs 1: [ 234.250177][ C1] NMI backtrace for cpu 1 [ 234.250193][ C1] CPU: 1 UID: 0 PID: 1049 Comm: kworker/u8:5 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 234.250215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.250230][ C1] Workqueue: bat_events batadv_nc_worker [ 234.250264][ C1] RIP: 0010:kasan_check_range+0x1b8/0x290 [ 234.250301][ C1] Code: 4d 01 fb 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b <41> 5c 41 5e 41 5f 5d c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 [ 234.250317][ C1] RSP: 0018:ffffc900040678c8 EFLAGS: 00000056 [ 234.250334][ C1] RAX: 0000000000000001 RBX: 00000000000006d5 RCX: ffffffff816fe37c [ 234.250348][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff93734918 [ 234.250362][ C1] RBP: 0000000000000000 R08: ffffffff9373491f R09: 1ffffffff26e6923 [ 234.250376][ C1] R10: dffffc0000000000 R11: fffffbfff26e6924 R12: 0000000000000000 [ 234.250390][ C1] R13: ffff8880225b0ad8 R14: dffffc0000000001 R15: fffffbfff26e6924 [ 234.250406][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 234.250424][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.250439][ C1] CR2: 0000564780726131 CR3: 000000000e734000 CR4: 00000000003526f0 [ 234.250457][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.250468][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.250481][ C1] Call Trace: [ 234.250489][ C1] [ 234.250499][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 234.250523][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.250550][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 234.250579][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 234.250602][ C1] ? nmi_handle+0x14f/0x5a0 [ 234.250620][ C1] ? nmi_handle+0x2a/0x5a0 [ 234.250641][ C1] ? kasan_check_range+0x1b8/0x290 [ 234.250672][ C1] ? default_do_nmi+0x63/0x160 [ 234.250707][ C1] ? exc_nmi+0x123/0x1f0 [ 234.250730][ C1] ? end_repeat_nmi+0xf/0x53 [ 234.250763][ C1] ? __lock_acquire+0xf3c/0x2040 [ 234.250792][ C1] ? kasan_check_range+0x1b8/0x290 [ 234.250824][ C1] ? kasan_check_range+0x1b8/0x290 [ 234.250856][ C1] ? kasan_check_range+0x1b8/0x290 [ 234.250887][ C1] [ 234.250893][ C1] [ 234.250902][ C1] __lock_acquire+0xf3c/0x2040 [ 234.250940][ C1] lock_acquire+0x1ed/0x550 [ 234.250966][ C1] ? batadv_nc_worker+0xcb/0x610 [ 234.250994][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.251020][ C1] ? batadv_nc_worker+0xcb/0x610 [ 234.251047][ C1] ? __pfx_lock_release+0x10/0x10 [ 234.251083][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 234.251117][ C1] batadv_nc_worker+0xec/0x610 [ 234.251145][ C1] ? batadv_nc_worker+0xcb/0x610 [ 234.251173][ C1] ? batadv_nc_worker+0xcb/0x610 [ 234.251203][ C1] ? process_scheduled_works+0x945/0x1830 [ 234.251229][ C1] process_scheduled_works+0xa2c/0x1830 [ 234.251273][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 234.251303][ C1] ? assign_work+0x364/0x3d0 [ 234.251332][ C1] worker_thread+0x86d/0xd10 [ 234.251376][ C1] ? __kthread_parkme+0x169/0x1d0 [ 234.251406][ C1] ? __pfx_worker_thread+0x10/0x10 [ 234.251433][ C1] kthread+0x2f0/0x390 [ 234.251464][ C1] ? __pfx_worker_thread+0x10/0x10 [ 234.251489][ C1] ? __pfx_kthread+0x10/0x10 [ 234.251521][ C1] ret_from_fork+0x4b/0x80 [ 234.251549][ C1] ? __pfx_kthread+0x10/0x10 [ 234.251580][ C1] ret_from_fork_asm+0x1a/0x30 [ 234.251617][ C1] [ 234.262816][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 234.262838][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 234.262874][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.262890][ T30] Call Trace: [ 234.262900][ T30] [ 234.262911][ T30] dump_stack_lvl+0x241/0x360 [ 234.262944][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.262970][ T30] ? __pfx__printk+0x10/0x10 [ 234.263001][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 234.263042][ T30] ? vscnprintf+0x5d/0x90 [ 234.263078][ T30] panic+0x349/0x860 [ 234.263114][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 234.263146][ T30] ? __pfx_panic+0x10/0x10 [ 234.263176][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 234.263204][ T30] ? __irq_work_queue_local+0x137/0x410 [ 234.263235][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 234.263262][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 234.263290][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 234.263321][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 234.263354][ T30] watchdog+0x1033/0x1040 [ 234.263390][ T30] ? watchdog+0x1ea/0x1040 [ 234.263429][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.263460][ T30] kthread+0x2f0/0x390 [ 234.263496][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.263529][ T30] ? __pfx_kthread+0x10/0x10 [ 234.263565][ T30] ret_from_fork+0x4b/0x80 [ 234.263598][ T30] ? __pfx_kthread+0x10/0x10 [ 234.263633][ T30] ret_from_fork_asm+0x1a/0x30 [ 234.263681][ T30] [ 234.273702][ T30] Kernel Offset: disabled [ 234.753033][ T30] Rebooting in 86400 seconds..