last executing test programs: 27.992910674s ago: executing program 0 (id=3423): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x42882100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)="bb85fe") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x600}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffff07, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000780)="57ab285d958de415e32f23e7911b79e7c5b1451ab76ebc73164cfc4c2ead8bc21cbc7e41374b28471bdc3bff2b7680027936e6f3e8d61dee1ffe8f5edfe930be95d56b8bd86c69008be8ff84b6f47af7ab64d301fbbbb3fe8165a63be63ce24c0a19d8c888e9da2f87eb9706814c84e0d51ac7fd38cf7cba2a11b39f0bb7aafe8221416612e9106ce5b693401f4cef7604ece5cf91a431ae7aa180698505d39fe55d50a0aac1c0cd8694204c4ab9a892a6e9254e81a8ca1812e23426a563f0df88cbe7b223b048c1f929621a449372a72537c4c24d25aa28d45161777488a992f3fcbab2fc63826d42fd66e3b1033e15418aee43e97dd7b25972d7121315d309d4357961234023640bc9f8aa12821ac48b6b2ba0dd566e6ffccff76940e982803bbb3534c9a5f59b5842f37d2109f27d65ca97614e19ca003b873f7281cedb5eef50b5bb753451a65bc2078c52ab64fa2599489699512f54e0e5356afc27e80c15710c22342c8921d587cd28e935f3c93cc5e91f5450f550ad0c8a043e2050cd7380d28e4c7a6061c9a94d8f11ae9a1b691973acf0bf62bdad6a0048e9727b99d73b5e3f0dd6af3966cfd2c21e6005735a8f6b5ec3ddfd7bdbebc652bb6e2b536c79ab240b7965aafc2df58af7c800e6dd91d4dd9d7afeae379d5601d8a31691647d6c62716c0dfef5fca12c5567b41b13f29cef8e882bb8b180d7a2f7bcadeafffeb3e729e2843427a86a650ba0da68be29ac502a2a0fec4c7f46ab7d4ea1161e400ab46dfda6f6866d28dace36ecc004e31b0b2e25824a4a5fc8470457f680af909c639cbda81a204a034ad2251a705d9d0b20ff4fde704657eee5c241cabba54df7dd247d67138403ccc686750eaebd5a8cc391f0a09f6ed1d3fcd674f71085ba07216b7d98102de80bb67bbf23c9045a73ba656969805f58072d78416c30f1d5a44b185abfeda5adefb73d646a26fdab3c59fac0d5319e0d0bb9fe00ac108d3357f4479e0d856673f2489f3f4e016e3477e4f4883390bcb0cc0041a1c783071ef8e7c6aee7e465cbde754dc81a1a7e4a4cfd07a21a88a07565273129069979639247b04f55b14dd2cd225b9f4f54d3244c3590f4fa97175bcf10c8fc7f6233a6dccf0073eb0915ae9a8a3feff6c64de20258da17257a47e8e59c6378c8dfbdbe96186fb092c448b0427a4a426c370a9dd386e0746f028cf85d1660a52feea5d7fe2e6022b4e93a3f010167dc065527d1eed53392ed63e37b6c0daf09f64969f28e5569868bf9e2614ff505c9f25dda1d1c553a367dd3986d5b8c85571d1219ba16e8efb610c44267e559d9dd3c92ca396b3d9c48ae9fd2da17ebde25707f980acd718684e2aab86c35f4eef2cae8d67752ac443cefba91f1773068ef0dc28141c2c35e55e9fd3a093fddafdcbd309c7acbe8a6296b944e6613c7e8c861f256dc895ad4b6db815872388487379d6129e4c15624aeca319d1424889087f3bccd7f4958aef69ef7c40ce6c6d9c9e25df40884794aff2223a66baf722e56805b44b94573c4e8161b76e9143b041793dcd259ad24a09a6943441f533937f82c6b36be85fd6865a997aaf75d68b63a0dee18512729586f0f006880ea7e5009f3249632865bd2d98974d10b563b439cc9fa2d85febc7aebd0d558aba9534cfc49a1ed7680b913e3509e1d9bb72db29fc77bb025da1538cd26571b314ca89ba399e2e0c2168fbb035c33a39fa09e61edd42dd925cd5e612623507c8c680c69e60250a3de98be29dc4c1ca39ca8f3ef8bb8111df4fb272dc8d549554237b81f1c0cae0541c5e343661710413d1e512c52ee5f9d9235841aaae77a8e632c378434472a9480d908f5323331a48f5cc3c8df8861f044633de0e2875aa7910d2768a04ce97cecef4a2832e388ee84e1fc3a4870fea591b74c15df70b691dc1045640ab10c4065a05e73f64cb6161241afd9874c009082f316f162fcc0f37a072665369c4194f421289c447824ae020a2a6e46d04007988a6173f854d05cb6a8b9b30c7c86b9c39d6e6d0db019869b26f495b834533fc1fd612d83e6dd977bb117d2e28e6d52af543a38ecb661961d32b485a2f8c1b4ce974922a8673fae0fac50a757373d1f687b37e5ed1f06b2cc816ed55b44dd6dc033d3f4a7b0e48afe292d4b0c9ed2cb33ddebde3d8c17b13b9b10955cafd7e7717f622cf205e9ea5928fd779cd287696a04bc08fd55a0e6c4581b2a4f1d1ea1e72d1d45e5ecc4221cc0c5b2d5a209a2b308c292cadfc164e76ebd0425d1e96447d5967493c631ef024cc9c49b3ac6db2feb8c03f161c829c960987d026cdaf101bcc40c3e27eaca3a9bd236cc431a7fdadaa10c8f5ac1cdd940e1ef47939049196e6c27bf671f905d753980efa115fa4d0c4f498914cbb970f2acd046e84edf66e83d08d650f538d9d55eecc2246a12c4be65c6d61a90d5f5e46851e0d1a7bf7ad8acaa47ec1fe1819c82be78c78ef33b2a6a23ab1d394b044befec715164c31e25f623b6c278b15b1fce6a1efd3254ee7947b74546ce80412cdccd12884ff7a64915b90594a849fde337b32e3f8f99fe013a668825a8888bf88aea4bc9acac37c965e22c4dd12d4fd0c1012ca0c1fc3aa556fa92029061ca10b0506be7bffd9edb358a671335039ba08ed911d4d72a292a18fc8ba4086e0d53781cb3fad75911b30636eb6bf02c5600e5ccc52c015bca0ab2f7406fcc7a26fe63b1bf2e345fe317bb8494e90252db01a8813c310f7c3863969e0b4755a4715aaf81f0ee47a6b199222fb940a5a7cab657b7825329b47fc55c33558c67077a89aee538c2b5ec05dbafc8c3970d0add1b499eed21669ce0a375f1236c9a22ecab0ac98eb8cf277e9c9d63777c79f0f3bdfefc68f70a28608c9203d3cf4913d84fb5869e723cf3514fa7ca9d23dd493158ffbf5c80dafe4ce082016f662bc67bb268daaceff35e314823e3cec8d4b835dba0e12189e914276eaf520232ff9eafbda61d460a0d81300d9afeaa768c8f8bf85bbdef3eb3f3db89b972177fc4719fac35eb89e8bb48a98c570a02758e62970aca15ee3a63425dcdbb038b8c51b484712a35eae3cee988e85097e30592e83aecb13953c8d0e767a6aa8564554ee9c19805ce5325955652ced82a653c3658f13b1f4bbcb7c976923e9d139182696e08623359245c442b7144d19a5b3f57a1a24cbf7b2953428fc7a7e73f228465e74bbe0b90317e6a7f0a4dcb345842fdf897252bf96ba3b31c33cee527774235eae29f8e45e5b7d671119d956954c80823e8363b77ab088401b2b6167ee42df8d22d9aaadf90043f55d7f88bcaee8f47ac62fe70e1a13be32f899b6bcf000713d80325c81133864c08391d9165157ae45bbd7d27c51a785efcfb77c5df4479f6cdbb68c66d453e36593cf043bf07c0c8c255d760642a1882ba4ae4f2df30abfe1a5a21f516df9ae79a0cc3afe7505db9a185467357d5abdf088fdfe2e29974675df8ea3d1c2013c66fc29c3112999a59ea8a4f7116a22a50bf816acb63ce6eab43ab6a57d3469411da299874887e81aebf6fee2ff88525b70e35233b120a27b97ea006fe7fa95db226a7832b7c2924d640e8f44047c240fba2e3a1ebd67caee76e5347a71ce8b24a65b655fe9f671cea00a0395710980e6b56366ed1eaf6bbcf82ac971b743a60f58adc627fd916f238d6ee76389700f6a020f84de9ae3689b133576cc7ff9a706362cb26ffe34b79f70696022130083dafac94cc2165345f8dbcaa7304c537576baf4ca241620321c22826ba2723ee1f3d823abef2b22532864475beb10d541e77b3026ec7c0a7046333f6fb02179fc8af0f09bc16b21950fb685e2c63b961e32c101629dd8d592503f25554a82c5ad406a1f97c0f48915d0bf996bf3bfaff5e73fa4bd875cdd95dd0424e767f450eaad76fa7e49b0015d03632319a2319dc540f3ff786ba1f179c0ff46a513f514779451acd510890d1770e98d8eec2936d57964d71bbcb5112b206d9a9729263d3b128dca353698f22d18bf362d4927b6cdd39dc9b08092c2a4d5d72cf6c1245c87df0bd31c4a1a25e7bd98494f90769166a75ab6dc38242f133814959836632a34d8c9630b14e76258163daa6254806e8dfafc14a2a35752d3c8276f2e6eaafcdbc581e6662212690fcf4f0c2d09ab7272d75157ac588e0426ddfe842e69f5248384d004f6d3dc7c7bbdd6758be0c359eebd1e92d9b212b2cfeabb9e585f17e31c0df2887db09220650f2bf5b1cc2ed6b902d42923c3b16095a2060d0f62465138118bddf3db8a578d7772b64448c5ee0f545e43257ccec5dce71bc78a5f1f8c4bc5c9e1fd96853937ef908dfa76e60650ee908b7fe63a12a2b6198e84a0464bebe1618b83c1f99bfbdf6b2430046d8f8e58c527518dce711d091fae191cd18a024ec6f00d71a1353e4cbfd78cdebbba27aa497405d40cbc734bbc278d541caaa110d584c599afef0d9a2d591009f4ee4eeb243ec2f51b59210810413fd35e1155436e62f1c152b30fdbf2e0d0e5b2510c2463581e53c3719c9d2e267fb689aaec74d6d626474bf69f4a137550ae639c3ac9a18274e508941bfc1736a7aef15734d9865b54e00558bbabb562ce94a28d59d6f2bcac93e0d44c9781879823fb00da812670184ef61498f9f961f820478838b341a2ba6fe60aadc0a6d26665b2c278f044ea0480ae63d5836cfe8dc5e53dcf1cc73c8fc67c17997714f5d87d3c9346bb0e284c647f5ff3524f758234503c331b961f02d0af8f690004429c3465482d05434361018f1b84803c29405aaa96caf64e3f5baf632af63d8354eb81f3335e79571e948ed1242d6cd93b03b68af21415f7f1417aaacb0f7b24c48236473000dcb569755bf73871e03e4d8a678a2be4e30d1ee38483f798d6f8f9b1f5323a3007f77fa22879ab2f24d67dc6f657e052472bb31e4a765f2eb3efababb3d8a865043cbca75c4760ba5996898b280d7f5230ee390ebc32d920d31ad3d179818e52ebcd68eebefce0938b93be9133a66dd82bd8d2d8a6431ce2878e17cbed54db0d18c8388696ec51b8744632c339cf918f87831e9c17437e4e9121b55d95a9013bb19534fd11f6e126c56cc6b1f743f5a62ae421ec0dd504f2096f5ee7c885984dbee989fa9d383cf6ebb6488b521264ac8b4868c02fd75c029047c6786fd6f65c94e83bc5e0e8ab0a96cb8ddbd1984411ef04c704cea173da36fb5ddb59f266e385917bc33b16a6aa6a9f54c8efc5c588c5f406e743dd0441818e475a5bf19c7aabd30a8094b9c24448ae85c86dbf69e4798c0d43aee4fcf6db5c53c1e390f90137cbf14cbe3973f95c0cffa5a0a227839932ffa1b2b57868ca9ad65ce94952b2b093dffa516f42a523c3ebc993ca9da2b633dbbcb220897db1b203751aee92e2bf020f2a149ce266f5fcdec62f898f94beab3d1d9f2af85ddfaaedd1b491047b05e2e80e917fff19f403e059f022f2e83e7e41d8dde63388b85d04faacf81e86ccaafc60e2126e0efb6b578f3f50ce4b9f61a3f9d097d60dadbe2cbe4e249b54f1655cf96e83bcef6f9ed59c6dad960313c1680241f872121f8c93fb1864eeff1017413b741ea4d629bc7d823b9635827994a45c62ba8fb6aebd2b893e27f2cadc196508666f61848dbade9204f2cc92b8db3eb9f3bfb00fc7ad9a17cb911de33b88108c24d30259c016600a5cd5a51ef9290d7bf78938ef1e108f25ecd0a2f438f2a85b98fb2758a708253dd7152e45cfdf87648e48f829ae1d75e10bcdfaa5aa3", 0x1000}, {&(0x7f0000000340)="65d5fbe442f78f9ccfb30da0e621059a073cb964691a8929ec7fe93c16b429964ffd541e4593615ef33e335694ee194417aa0d224d7d559eb8e75dea5976d00c5be79b", 0x43}, {&(0x7f0000000580)="e48910ad03a6faf73a2b40f04f59d132744d40a6dd703c7e83ad632504a43e081568ddfa422e80001744cdcd24e1124ec6b357ee957a858ce89f9332f478ee64e9b4f0e0b09e342035f008910ae3588a44617c3d3e46c039f4184afb16b6cf7488dab92c47e1344d994efc26201d", 0x6e}, {&(0x7f0000000100)="e78fb4f517af4a11f929eba56db45796ba01fb2fce8028cdf3d98bd49451df1ba0cc3c92ab074ec4882ae33a38e62e96efbb2697", 0x34}, {&(0x7f0000000600)="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", 0xfe}, {&(0x7f0000000700)="f030254d260a9fc1796fe7d35825d48404b9a31ca6", 0x15}, {&(0x7f0000001ac0)="23fe4f591a37bb667cc137b38226c2429f7ba948a7f1cb5f066361fa801f88d348d87b68350adc78c0badcde21c01ad371f1edb61f8759a6c811d705aea29a8f467fdfbf15cb88a0c1b2cbc8c9b1e682ebcf75087c4da4a772b2074893b47a169dac7b3f8f764501d951e2bae274b6a6b0416fcbf32eaf74af9ebd84e72cc61f66397f487288266e47664251f30e1dbde04cd133b3e3ad3a239a4e14faaf023664669efc5e4d48b04faeac2f68d1d261fd57696cbe16cf026375c4fb0120a8f9fdb98f21517983e8a1e80a45faa08b7e12426b2465ea655feb47dc1d9a937a7ba6b6c8", 0xe3}, {&(0x7f0000001900)="23812bd9c1e1e97140952b34d813d666736f296253baa67ddebb137bb50f0891171370534c2123334cf020b6a957a8dfbfe549b6f91ee118167d68370a2c4646b55633d1f2d0e1a832800b457a090e37ccc18195c75f1c80fa222e9833082eb7d5ecdb0bc28284c46b47ef0d093fbb03b3bae6932cff2c3d4532e7a44be11a4ca1927efcb0d3f3f5a96f3508ea0fd223a77d44d69b43c4f906fd39c30397e13421c5677255cf82a7bf395e3f2d45350b0c20d5a614690f897a03f7d214f542", 0xbf}, {&(0x7f0000001780)="232699a1311e0e7b5b0f", 0xa}], 0x9}, 0x24000000) recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/236, 0xff80}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x7a217d5a1b825d76}, {0xf}, {0x7, 0xfff1}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x30, 0xffffffffffffffff, 0x0) mremap(&(0x7f000015b000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) mremap(&(0x7f0000d94000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000f89000/0x4000)=nil) 20.619019824s ago: executing program 1 (id=3440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x58}}, 0x8000080) 20.000121999s ago: executing program 1 (id=3442): setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0xfffffffffffffffc, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x101080, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000004c0)='.\x00', 0x40000af) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x18a3c85) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r0, 0x2d313000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, 0x0, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x9) 18.950182954s ago: executing program 1 (id=3447): listen(0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback, @loopback, @local, @local, @loopback, @remote]}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) socket(0x200000000000011, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000602007000000", @ANYRES32=r2, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r0], 0x44}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6eb7, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x4, 0x93}, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xf) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000008bc0)="0f08657e5321941d9e73821e99bd38d16ac8dc09bdcc24745922cd801bdad13c9100067a76ff63634625d148e20cb78708dbbf61ef32c4ffae6f5e1c54d00189903069b93e34a43063b48ee565e8fa1971dcd3c6183022a2ba79e0aa23de4ee357cab6c8c2d965067fe86e1a68c2e9e76a98fef102e49536cfdd65bd6e75f597196fabfd319772dcf3296200499d1ff4baf7cf9b603a5af8be978601ab02f78ccfb1a4f2f735b0517a2b9ef5d1e735f7f25ff996bbe0871444adf0892f781d0589f3d9cc60d62f63bc8914d74b0376a375d8e1f26b68e5a1830e86f4aae6b76c9f5d615acf8f2d642e0c02db850e1fee0533cc62f7af57a59c1d2f7ad043cccc1d4e8b3f4a198ab16793892425e1e532333d0699b1b1689434465fef38c1a406ffa3b610e3fdc0db3d84b89cf73389169487b75de4089af8942dfda480fa7f3d034d0eccc191af4cb51a1c20cd6726f8db99e465561f4de2a436f158a111ed12cdb8a3dd40cd03f02423435e9765af805b040118094dbf24d04ff05418ec7f410aa5a23e883900a0f4d2f5a3c347269d40d37c47f7386a0359e3d25efbc652abd7c5075e5646b131b41eaf601bc7b797a7af7a21a8bc1f22c960a09daf4ac1753b46be693a9b92e752e21007961ee89219962c9575b25d7c53838d01de50980cb258e29f1304e36a425f1c0c31daa922ae7953d70b6d7b78b947b603ed783218422874d35fa1b45d720fe21acf7631ef970ace6df4d55add890f2654b3b3d07466d5a6800154cececa6709da0241cab82d5547481b7c196e8389e8c2b1228ec02b399642f25d7813d904e6faedc284c3cf792ca6a49245d659e6288312e55d360041183787eb3deb5627558a16d9e257daa9c160aa65415d13f2a35e3969a24080617e78176db00649a197d360cf73871dca0692704d38ae0f53ee4a73c4d0b7cea98cbb7c9b68ceb7e7c93846f5dfc388ab8c208f78e96baa94c8d23e6aab0e625e773cfa0ec39f0b377a085f98312b0d3a37c14dd0d162c5b79f7e7d8cb50102c5945d2de88e51a6b683d79ffd45530381f343d96efca101c861c80e286779d3526b4b0cbbbef5a4583c88ea236f25783cbe2fb3e6b6f90a62991293ec7bbae271d62f43243916669ee772582a57454c47c712e8e7f652dc515bb4c0baae69158eaf17d849e0477b85646ed0d11193f3f79c8df14a021431087eb73dba8fa1115ab877bf2e44ad69e20b4d65f818917407dac9e9ef7f7132b5168e4cbae0e2fb91b9a45e6a407fe1cb8e9a92c37f36c737be6280b1654434474617cee00d77d42b97c7232099eec92b74bcb299bcac51b20fe3dbca7e0d05a8406a493408ac7b2b88cded93690d8eeef36038edea06126376808aba3293eefc8c93f5deda3cd1b078bffb4e70c634bb5a62c6a32af5d57f0d8b9697ece73578157f9df1a91d180be04a898aa0b1bfb1287c8fc5c00e284e7414072cde885645f5ebd2ac98ab6b37a6f9cb45ce08dc1b6a30317b7f95510f064ce2a1a08d99f4a0c5c2f136099e2ee7db17cb5138b2f95d8c8e6adc5ce36966bb8453c29a8e318952e603ea53bc68cafb2fa5a7742414234e2d6fa926ace0c8ad4d1a0ccdbc9037be01356c7f661b87dc1eb7be49d93b9019cf16720d3742d9d52177d8c408ca8d40bd2083aa705d79b1bff8c53e491a4133d952a3dcf001d23b5a69f6f2d4f2af86a110d0bded69ea96ce19b6d4345a3357442c8be2563c8b33322ff07c00324c2dcadb2e6a6790db8ded3ac07b3586cfec636865f707d742e90d34fd80192306ce27975bf89f623b8a27ff66a3cffeb05b757db431c8a42c70c273f64a46888467e63ad4226da08b6e22cbcce9bfd04e558404d7a6e5a2f8f4c99ca894c07c9ae7bce67d825ae56d333571f346441dcc3fc307443a8b9171c049136d530113c16cb5f5e3b0af4fb47376424967f2cbba7475562862907b977ee2e59eb2d7be26b63ba8298c97830f0bd28631736ba40290e8587bb8c62e2d70c4140a9a9a34ef50d37d80889ce759b21e01be54496c385d12ceb477a20ceb6afbc20df647c8d17fed69f4b537a978926a9e1660d5e040147ebaa244c4c833d3864d8ae88a4be88012240e87730fe1ea9d73aed1478fcddff04911f5a226f35c3f537ff5c27b9d9dcd70e03a239e9f660aa622c7ac8ddfb868e344acaaaf451654a60c6b4c1068fa8f7d2a305d517119032c8185393ae9bd55d141e686e3211528545fbae54c6443345e41a8575e62f4423962dc501ade618be6dc5202687103cb215928bf599c69316c255c456cdbfb4be9c52c042a90513176040cfe2363bc9f54ca9face8b68c200e019399367462c4b1ed7bce41ee5832bb3e7b9b9ed0f1ad7213ca680c6ac5811f6219e7ae09443c154dbc93f8c17ebbb0da63f202a2dd05e19c4d86d3be1e61fc2270df6d081a10a336310a6b17feee978fa195ff57c6ac766bd3f00c9f414aea39095f4ba4528b449663241a64b797853246c94de502617637b79bd4d08a0074f482531cd7b2550492c90f04af77f0714dd03cf6d9f9d00099f7b95b1481c938a131169546132f0b7b41c58067ad261b5f806de984a449f3a881b78667b398833ca97762700f50e9cf9441b539c7ac995648809a486f2840ba7cff56e906f9e6de7cb43df2990232c5282670b411e6e69eed0171dc9e6e41340bb48992778b069871ac899285876b3e8a70fa3d3a91f8b5e736912a3dff6c45adf76829ab3faf3d996009d20662a0b958e7344b2dcdc559edaa586f5358a9684fd0546476749e618ab2a77519204f488f1840473475895eb2eb77eceb00af550eef312152a717232724a40b294cddead778f39d889ac5a300378dbc686695df3198146b3835170dce2e23ff040420ca8123d432e259b5eb978e3e87d37562fad992e1839de0e426847ab5884497e7616ed7fa70923b6b7c65f94969cd60baf3058dae0079d134a3d3904ed32218f8c5f011846558fdaa79decf6abeb062cfde9210df5306388cd479e61f0052164a07660adf0f51e93d93892bf953473f0f9d11398f6a448e1116fb3f738be0caefc66e459d46e748cdec1e55cd9fbbd9e72624d7d53e7199d2a10d4598856d77614996c8d6cab4911b023f01d20c9e28bbc879b1849d7c9af2229f5a8654ba3d1dd66d7961a596ec79aa5fae1663156eebeef477cfcd6843761df7e960dab09cee2a244fde89530de593bfc6f596b89c60a852e3e2b81ea7fcde8aae41d1f87eb452722a599227e9107b00d1d10105e5a06e5055e2f394de7c26ca0497599776ac940444a9e071347085bc84d17b35ba03ba527b773cba7d7474dcb19e9bf412f71e1820f26598fe047b6c217551359850af61c5e10f65ccf22ccdfaa71d13b4f499ee96c0564377855d1170c019d052af42c1c11e60d9898a6ea91f710d8352ba516392a03c9060ed9183e4c418d5d473717ef4ac50df6b84766480c6dcefa5a97c68da109cea0bef1b22a78d08aead31dd49edb1dcc39b7097b67cf46b0fd0ede4efe96695846338e023113625c3fc72288bf70bd8319c85ea57e9409beb81ad765fefb5095e61f85d5389139dd91de29c218c7889c8034a7ff4c999fbf95855b890862f1085e401ea89e31d942aa2e60323c78ed007c64a9a2ea746ea21542d2f87919d17681d3d2e1141f1835a47ccba843666fb88895898aa608ffbc813a5db334518ffd6802074ab696d07028af129b62c8c2a9baf0cd3a98f2179555662d2d335f7c3681bb789bb0c817a9276aece2bcf195d37289e0ad7c6f804b1b7b41e1abb32b19c4406f068f2883e6d3d46c0df11921a0ec503c121d2b8e630cd9963820359044e89e56346ce3f763fbf833b8d472d16d577e0690142a7df1ef9b597e828fd03c5002ef9c3b0d03bab1f6eff1d7e54aa239579341f969d16f0b3c3e06d283df321fe89a4402488fc75d3a7d14d342d26a3310206a3ec0f80153b667864f7562d1be4058a80c6d63724b521cf6a1424acab7806a0441037d7d14778547d846c25bd8070aa49440b5b580d4322a7565e055ade3a3518721ba1204871f00962bfba096e1c185ea0f7479729bbf7be16fe37a6d35eaa22ec3b6685b7dc63530fbfb414ac2b0da47a91265ef6c4b327b6288ca2e441828e526619f13e0bb313d5b08b92a8ae5a8ea9422ebfb472069991f8ed2e10b8e3a1068e7c50655b5ee1d1772b19134170e29623ed7e817dfb286412bfd140b5b25dedec532a335872d24d9e718e5bd4f1d9c25b7832ce3b76590689d68c506fd71834bd538e6571d191bebbe50b1127fd18e3ae72ea632441d41a791d5ea674ee25060177a11e4f10ab5dd11732924c25ad31f4bd2e4619af6516d31ac88b7cbc077532e508129910b8d0a9a90fe45829b27b35fbd44370034b885d9ec1426bc8948ae0f7dd0683a3115c60bc67533c8ebf2b10f5bf02e5937d82ec88bd54ed10e1f79cf0a0ede14c7dee27841ba8bee88d408165096cbaff2ae2dfc67a5e475ab4eb65b27b8c264b44c5cd90a9df1353c37fd6c060bdf88fea79d13814eb4058bb1da40a41648fa54cb290ce6d4e85644c0f0d9006418e128a6efc13db26e6ea0004107943e154503120277ada88c970bedf687ec9d9028441ecabd5992c65acb8d2c60c30e6ec56328cb7251a9340d7c9a1732b90d42650e324d9caaa0ed348cfd1cadf4084c7a7442e1fc7a64309babc647c4037255adc57d974a68e12fb4d67551012b7e3de01d86219991af6853f6cd7b1dd057611b78f0d7acd3f891877c04f9226ae9724dd2c897b7e9c4be6abec1c8655ca84d7d1d73e8203ed6a59df7aceac2530257b4a8ad4af076dc3de6ed6b72fc0a6c1bc4b60a29ad2fc214903f8c51753ad81c0378497079c47eb09909ec047bdc0bfaecda1a3ca276fe4152bc5df21f609d2ad02f2aa33daa630039ff9b2653c33fc5c4ebc4ae937a2ccf8a75188769347e3a5e2224a2210bf06338a65912a6f7007957b065aacca5f1c0a58c324f859bdd58d155af1773e7e4786f456fb0086c1a3ed86e72a79e536d376e2de571dc490ec3207215a4ff3ddeb7eb6dff3be4961bd80f00b57eef0085cf667a8a9b7a6748f972d29f54a02016304d50fc2ce43e0f25a38076139a6ea89cd9e742a2a3f427748a3764bf285de6686315b6fc17c89d3d9f8f8a6a6da2511390bb1ed9427741995832ea956b596398f06106e8cda6c49d5e1605eee7893e97fe5e3099d37d23fd2741b0a4baab6544bfb7e2ec0ec961d850cc0e135c8dfb2b39d1a7eb724c44462c029025f327aac73d457d5d4e0f8ee652a85de33f12f9341e59795a305291548d93ce3cf05e060b486e7d2ed7fff02e3d0c401119c6f0660e875ca44a6fb9653da41d3eb56aa736fced799e55916b665778e2b2a8b29bea04212fa0641ea5149393978f9e633bb37c3f2ece824061ffebd751e6e2a19c3d67ebaef6d022ab50eb11033d1c879d1ccb4471027817f7614d919d5cbe32f6710bda8d6cffe2acd488cc4bf8753392b61973fe856bb1468c72bc74f7dccff8faf5502254f0101517a1e26176e4d1e2fccf6702d2ecb4ccef6ec5ca24fe5c89187f65c218143be4a4aad447af8086e1829ecbd94e6a3ade4f7618296d78b33cecc0c4a11546e83bbfbb1963c60d214c65e9fbaa1d482a99b153affac054d9cd38beda304fa04067438f0fe34e6a0b40e01189dc65649c7e561a97cd7b5cb262963ad4bff259a01c03a6767cb9e58877896ffa8bc880465aa64f57d0cfb5b3abf9f34adf890ee2bc4b85721c206d0bc2d5e99f477363a3e469f058423b09bb32c63894b687f3008ab022107982e2d314d4e3b0fe45edd09c031140cbdfd31e4842990d8406ae5560d8b6ecb9013492bb65b66b9a85c91a2175330b73da5bd27b00d3fef5dace7a74770e9861742f38912678e49c06fb0be81418675140876a91496759f27d4a25be4fb20e1a6a55149cd6797b92a6562361883520f7d21e2913cb79e17e7d3291af5876dad741cb6f1b9ff287c0c8ede415db3f3583c1685e44dd10f8d4fc8489c3e1f44e455629b872bda9c5c2fdf664edb55994eedac798a33f3e4213afd2989995a7db3c8816b207224e2dc0cecbcb786ccfa489d947e0b3a16b17e60e04c48c86a8ef7dd3e7507ae93f60982d988dc90ee3d3655b33563fd13f52f987d5f508720dce8532891fb67b34b5b38e87f32eb7bc62219349d339135c305538a5a745d9a72e8f713a7a45452012abd99809bbc841a99f51b3d08cbf86e61bfea47e2eb518ca9b124d9785f73002cd782b206a604e508f4425cb75f91217db6c29965cd3351ba46dd814876c8de85c7a954186fbd14f5ad8ad4b9598a0f6e89298f2f7fa5471196d05b0df3d4f6866da2e891e2214fbcc311b067a10f024ecb0d8f2fbc7bda0bc68934b5b143423dbc1b1517922a7be7333b2a2d0e2137bedd739db19889991347f51b91b31fb17907deab0d80fbdc148b53b53aed7e6ff3317b6f77b3386237a970a84469dad05252e28ae75e03693afc2ada49939b36fb0486dffc1480ed721cf567436515b0bb85e24545b1309db39d1f4fba5f15ff4b81d3e93f6c52e392c171bb16ca91de808e58f004d852177ee4524e66438800fabaacc4445413a6dca0c5d86b6665ede697fa298d81f0d5b05a4cd705dce8be68ac078a5d09c70c7e362273aa069ba006dc94cc5996e13f0fb778c2057106a11eefac0061a4de88a509f6b58a15bf44b8ca1acba683b05c85b753f80b1b32c35432544a2f02cca766ffb79ac3cf2f59c3bd7bcc117143f0ef133d33484b26e26a125e76f913b30c228c8584f795a6da612340aab534eb981635298758485137984c30f8a194eda9503041456f3a15fa7b810fbdcd2ba6919f4d2e54f5167968201b9b7ec807a2e7bf9c98b1052430f766da6bd4ba52aecfda1f967f9b374937ebb9ae6bde9f2fe46535093fc1df42f10b373e8b700c679a81263f7cf62c7c103e61daa1b96f664af4bc5959fcfa3a9182d343885433914afb8fd529d57e5b958563f74ab0ae5dd929d8eb483fb92744f7502b3a75d9cfea25b2d45605dfcaa1f49137082af408ca36225f1c165872315fb77048bce6be787dc046fe8082832003a311fcb7f8105a0da990cc577e1b5f9bd6e45bf133e8d49ca95c6ffa54f1ad0f8657e19944c3fd37cd9585a9112aacaa136677e6b728a8b9ac613edd82a414638bb26f295b7cfc2ee790377a2c3fd8a43b34c2dbc2e4aa6c62e1a9e67f3c63c688113f7a4805b2582982e3063958b7243b31b211f3828a1bfbc7c6c0265beed5d9781c6d43ebc216d03a2833bbe8c23fc964bcecda7b436fb9eb432c404e352387a7b63ea86f9f43f1cf84e6d1fdce6221ebc2ffbdd9a1461f96a3ec9830359509b2409dd5210466f1f7198eeb2e161a67a83cfbe14b11774827a6a854b873c5ca3a6ba7c7bd61ac976eea2096be4a2f4c823be07c0b86ae8971c6609e586ceb0b7bb59cd08d9b184399b165e66f69b8fecc9f7da8cdc0b45a8196a93f3d840ba2604264b940660bbe1c067596f5f88aa452b1777b84d2b5af8f9bf7b0b2489b5614c81bc43fcdb2b062ec549dc65ddf7e5759f3dab801b482df9c52adef930af88663c5a86a4baa24fda57816d8ff20425522b0bd39f5c5955ccb2f2c1cc2c983b22bc5c4ffa516a17fbe5b6701bd1215842e5158dc01f74057927185f2810f70c20551da83cc74b0fe5a7d423bc9b7324474e1e5390eec7246c59a5f391deafea0b4c9a2a5983edfd09bc81c8f961000de6d924ca4fc23fc719251d82319d0c9d387db2bc5b1468088e985ea46c3aa0456aa770f623e88ec1464179ca6fcac0aed3bab46c6004208e26dc09a30db402f94d0e82e1a892aee6c6f30c07bf5cdb0487d4edb81f798a0a3c04fd08334d537ddd61c34a46618df1521e63f37e989c1ac7da58046bbf415cca6f36ae112ff0c9ed0afda3dbd8ef9afe26fd7bdca01f17a0e510334c6ab444f361b6e0c8a6aef547797ad7c07f40693f8f96ac3e8857723ef6773bb70c25a1b05dc59d8c6d630fb99e2ee6db95278e05d40007c6548c585ad89cd550ae88877d2bfb05d96bc44329dc83585f02e555ae5d9b9a50152c972bebde79791376e564cfef2175e591bb1b1a74c2cc09305a591c2230b6570881d4cb17e0ebbcc5e24a44d399b62e33486c062576e356a31c4b529d320694b51ba9453e6aea6305770fa36156b091e97ccedf984e70d1fd9accf06f1d0c6e5f27032a60932807a2207fb5a5ed7965d76ed445f99ecf83fc0464b15074349ff0fa2849ed99650fd87ca35b8a48a67360bfc8cfab107f54466db2c454cd7cd1e7bc13aa13c75550027ab14c9df4176c8cd90f8b61fc4e8202cdaf87559f2182dca32b831d81388c5100c088eee624d8cd8289b6aec46712052f612b58fa2741ceaf8175e22bb1f6ab46434fa075d5be3a01e798741cf098dc824ca80ae44688f42a8f74532802f142cfad3fbb2b9c643a7ec237cf6dc5c27943986791ab5e0e10c467776a6f2436213c400f8c4e11d7bf4b66fa48d7f05fb24f1952a3fbbabd2a53ad79ae623e2e6688c41f7649dd79c8fc69b798cf59a19771d0a5a6f335508be4c968f9e1c26edf07474ec9588e0c7c360027e4b06567decb458d37e78a76031fec96f254a3379c8a9cc355ccbee4d56b9199301181e3c12ece2d25fa136712447a7d3c0b149fd27d49cc7762817fcb34caa68bbc6a0436d96dbd544d40e26104bded338165d89c3ed29c8f98dc84f0aa04eedd53e2c67da32f248c5d8ec0e3855ce1bb1a73b86ecf8e97c97a1a180bbbba8f19bdf49191997d30bb8d15e4c5eae707dbc077a4edcfe40388d39ae57e3ba40a5c2397535a724f43dbe9a3e3e6797539737669fb7429a16e051e08b11dca62865e46044bb4270040074292ae200a23f3cfa98688e72f7b04688d677ef0542020c1fd65138404e66fb9c66efa00e4d8383101e2c0970c41bfd71ce8c70b970f3e3bc5fb02b92823697f7fbf969e50f11808d06d2b5a29002926fe05bdbe6f16020de5ab5653d7dd3a055c5164007ea0dff41a84976ad0c22f73d69bfce3d11402bbbced123aaf6da8d973d0d0a6ce5f2b49b3c41c34b68f139acdb32841355ab78c030561dd00e02310c428dd7f18f3f2883253cb33210eb97d22c0ff70bc54f7f22a6eba162193e365364c01d42f65ce467f0e070c42e60b24c2f992cdd56659041a528a628d474992ba56679899ceb18b84aff8642b0b2e3a00c271766020140dda987f1ad5450a582c5fd760af3044a2004caf820766b0c5ed00dca01792a810b032530b33d775f8af065ba98fd88348d4fea7e32134918b462aa978d32ca79606d45c143f73d35b252b099b730e799d5ffc1c3ef937bfb791576ed1f54b49f009201f7a638bb414d1ab30115bd8c4643c0401df27e74383d2d62a506a36499f4dcc1c093b767922a93717e1ad4a1de48e1bcc2971ee270167704d06a6f643dbaf1b92d77a43c6fb2543b6382dcc4d0c3f4a91ec69c445efdfb90e3910a224041a2624e9f14e34b39099d333fb39910316ca41375fee0b45e6b617369ec5f17ab08344d069f03a5875b55aa78bc2a9da69e2eeb94529d6d27f3f5711ad889c057e4b2dab935f978bb8c1a606c351db3e7183074e997d1e7472446b931b2e5a02a691de38ff48224ddbd1c6c7872f7e6888651012ff376049839474974d8a24b6d038492a2265008b3f3a0112ee1c902e0ff25875b59d88e163e638d3fdf96cbf919bb0334f494f024a3f776905f91ae37692074ee577f4318c50ab84418caac1c95f8816c587a109e2dce71f38a2675b821e53285afb5d860b7042bee0db75d3ef80d4e44ceb6da6b0fe1eae07cf0f1438da65cbe7a37ab4f0e302155e3fda22b7859e79b993c9a24133b98ce9e0a63e88b190f5bc10b21b4f8d7db447fde54df038f4e09508c78f16b75ce585ba0fa53eccb80b6f8d9b080b9df69ff2334ebcefdbbfefa9784aab0b4cbe60059010de69398e4eaa4cccca5ca832626bcb43f59d3ba928d27cd244c074188af8e974c910adae112f0a6cf5377e9fac2de02388bb02d7ad5a38ca1a9ffb2d1e560f15a956d89c643550af114da0a07133021a6ab68f0d2dcabff5a5414b46e81442ab6cfc412dc7aa000f2c0326df9f0bae09db25c99d3b265b609337d80a2b5cc4c58fb07132b94b5702f7348c45ba3bd0487e2fde32929c2e5672b1050bb5cd5a78c5dffbcfce2bfc92fefe1fd003e951bf08445844d9579bc85c5030f46dee22940636c964b650fd179c787b9413c3238ff40aa4cadc7c25335b42676f1b0e65e27369bc5276cecc0a2f0f63cdf3ebd985aec0d194224f2678b04bb1d6246c4f3f8df781b829b3ef681a540985df1229943af48e237f8cef005d543fec3d9bfcde5acfde62f916edc2c8fad7aaa740fa54255c558e18015952e2aa82261b6ed7ca9d6ba9cc1cc7210b3959e70ccaa6f20483f474742fb3ccdc57d2f3b773c30e308bfdbdcda6aad92467f9acde62066e45520eca7a1d0fdc4deafdd9ee56be7a16923045dc9c7286a4f437bc6f47b5717ba5b8099b552e5be2422145af33c6cc0e48607853e830151fba68e9d8f9bf2a0a1a61903f1f076afeed2e7578d60cf435259a5ba73a514bdd44acfbb535ea98e46d55bed02a4e02070a696f8adcb63a7f02126dcd15c7c9bb4ecb85165ff67449c2043ea0af522c72bb1d1e01d5c2eafdbe7936ad8bc5b9db79a34dc724543661e70395fb71cd7d81a94e0d967fbfc8681cec8583df903efa5feac1f4243b814ace83b4cf0801de7cd97057cd305140af92f20460ed959c615e70a122285ebd84ba692b89658511cc16861857125ac7c07dcd72c32e7c808739001556133f1703ddb796d6a0238d2df4dc1227d74b7b37560facdb99277cc175699d761c46e202c1a507e336c54ca144ef54dac556db2ad27e447dd0b5cd6d2ff2d1c6d245d136b4c76da62e9825ca50f5bfc1ed4c5a97065b8f67d91f16970213fe04848416df6aff3796cd95c1df051ca727020aa018a4ee98782b8140f94b96bf19b6bcfea8aee044f069341e3c6c43c74ae3ba6f3a29cdc3fccc9bf52b60caed21fb2771f33216ce0ff5179e062baa97bbb546f84ca8a0785c5c7ee51a0a24e22159a34fbc72b1a751f004d39a3cb759ecf29a2df4a48ae62b8dc40bfd7c3d4e5ba919e6ff70748636a0040e5cbd0046c58e678e3b8c4c21454d54ed2c20201be7794beef2c4fbe0f2400d7ceddb68ec42f2100d71d3bc2a9fed9de64618dc86b968c1afa083bb8db4ecf27a5f7c078fb8e4e4017f6e7b6114ba57d075fb3bfc1f71c76b6f2f56e274319d82253023aa4599e0866d3462951450f7cc9dc3fdd411d85b81bc95c0d5ac67a55cf184dbf254c30eaaa90fa0cbc409443ab616c18bfeec838645c0ae79ed967763932a9135f2e082bb470917443d208e43d8a5562cc0fa0db4899bb9fcd304379ae249e643c32eff6ca79d8dbdf85130e4d2b3275fdd964e3b65925780929a6e75ef8369afbee", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x28, 0x0, 0x80c000, 0xfffe, 0x0, 0xfffffffd}}, 0x50) 16.142828572s ago: executing program 1 (id=3456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRES16=r0, @ANYRESDEC], 0x30}}, 0x20000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x1a0, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xf, 0x494600) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000600)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000180)}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x8, 0x3, 0x0, 0x8801, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x2, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000840)={0x200, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000980)=[r4, r4], &(0x7f0000000380)}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000ac0)={'vxcan1\x00', 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x440) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)) bind$can_raw(r2, &(0x7f00000005c0), 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a40)={0x0, @private, @multicast1}, &(0x7f0000000580)=0x7) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2001) r8 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000690, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) recvmsg$can_bcm(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000840)=""/92, 0x5c}, 0x40000100) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000b00)=@canfd={{0x3}, 0x35, 0x4, 0x0, 0x0, "dd26065b6c84aa13f6148fd6fa5d7da8c50bf330cb27ef4c186043c550b5d63addc13464f316d2fecf5de823f24aff60500fd9c8e85ca7ac0ac92c6ec905654b"}, 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)="7f45d9f8ed4f0a57ba2042fd39b484d374fffb6b867ad3c12b82f2c3d89d370d68b37cde439554a8ae1674276073ad79a0d56d0277716ff47bc8c52eae29f7c35ecd5d38bd4a455f72bb252f9fc35586912925f1bee4f92d6a1bf088bdaf41b40eab3c3a7f0d243cad7e8a89f1a13a0a45075c97374d97f9d463b0d2bac1871e98171f20f53ff9732733dd45a74b6936574ba2ba3453009285c9e6a898c162dc73067e2ab262299c8e2a69ddd3effa04f27f3f197850984ce45fadceb09e3e09a5b53c8d4e66d2d3d33df68514cff49e56870e78df6e8d9f8ffdc8a1cc19ef7f3173609ae98fddf047511cf8792182ecc63f6b62ec", 0xf5}], 0x1}, 0x10810) r10 = syz_open_dev$vim2m(&(0x7f00000008c0), 0xff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x38, 0x2, 0x0, "d52b3d000000fa44966262631e8ac11e0000000000000000000000000100"}) syz_clone3(&(0x7f00000003c0)={0x840000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)=0x0, {0x9}, &(0x7f00000002c0)=""/24, 0x18, &(0x7f0000000300)=""/61, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x3d, 0x2, @tid=r11}, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) 14.465257153s ago: executing program 1 (id=3462): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)="70dd1b1c40e68121e3a35035240e78f230649b14047665396041a2a1d89f9250a40cba1193120c44dd111f9f7f7159a5d310d00b9e23006a034c840999b30e6bebfe18e9d1195150a23491632d70c517de68c032b802fe20cd9af0b04bcba3b2f3f3c5e365df84d7b29d4698bab3b2ac4eb81f86239ae7c3f817fd412cf6bda315911b", 0x83, 0x4) 6.82452463s ago: executing program 2 (id=3489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="0000010000001217190e4cdd1e8eca2ffae22ba94cc9300d3d0c60da351bb627c69fcd4c80598a9e20ddb8ca992a3b4a34edd7ffa3e4552905b1f204b84f9ed67078ec25f0f8a4a0ef05c8486b45f5206cd090e412467bf56160d159a31b6be632b9d03c6651b78b6df560ecc040c1a3be85d3dd093eea7dedc1f04f3b5a510bd9d1012eedd7ab4233262a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000700)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.814007478s ago: executing program 4 (id=3491): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) pipe(&(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x1d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r0, 0x2) 5.764142314s ago: executing program 3 (id=3492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00a\x00\x00!\x00'/28], 0x48) r1 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.63945418s ago: executing program 3 (id=3493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000016b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)='\'\x00\x00\x00', 0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0xb, @sdr}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000300)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.14674139s ago: executing program 3 (id=3494): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x210}], 0x1, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = dup2(r0, r0) r2 = getpid() r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xfffffffc}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x7, 0xf, 0x3}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004001}, 0x20004080) syz_pidfd_open(r2, 0x0) tkill(r2, 0x3c) read$FUSE(r1, &(0x7f0000004380)={0x2020}, 0x2020) 3.70011444s ago: executing program 4 (id=3495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800002014000100000000000000"], 0xb8}}, 0x0) 3.464532121s ago: executing program 4 (id=3496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e26, 0x0, @empty}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x6, 0x8000) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000140)={0x6, 0x7}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9a}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) writev(r3, &(0x7f0000000680), 0x0) (async) tee(r4, r3, 0x0, 0xb) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x2000}) (async) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, 0x0, 0x0) (async) sendmsg$kcm(r8, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x54}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000000)={{0x8, 0x5}, 0x100, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x168, 0x0, 0x118, 0xa, 0x1f0, 0x250, 0x250, 0x1f0, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x28e}, [@common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e21, 0x4e22], 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010600ce010508d313353377b900000001000904000000c00d6e000000003443350800", @ANYRES8=r2, @ANYRES8=r4], 0x0) (async) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x400796, 0x0, 0x0, 0x7fff}) (async, rerun: 64) socket$inet(0xa, 0x801, 0x84) (rerun: 64) 3.283975281s ago: executing program 4 (id=3497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000080) 3.14000878s ago: executing program 4 (id=3498): socket(0x1e, 0x805, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x1a, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x44}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) 2.41414969s ago: executing program 2 (id=3499): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="3dddfd7e0cad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x9) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@deltfilter={0xa4, 0x2d, 0xc31, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xb, 0xc}, {0xa, 0xffe0}}, [@f_rsvp6={{0xa}, {0x64, 0x2, [@TCA_RSVP_POLICE={0x3c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8002}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xad}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}]}}, @f_rsvp={{0x9}, {0x4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x480d1}, 0x24008040) recvmmsg(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000380)=""/6, 0x6}, {&(0x7f0000000680)=""/151, 0x97}], 0x2}, 0x7}], 0x1, 0x2000, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80015b11, &(0x7f0000000040)) socket$nl_sock_diag(0x10, 0x3, 0x4) 2.351278621s ago: executing program 0 (id=3452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x58}}, 0x8000080) 2.181370211s ago: executing program 0 (id=3500): write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0x8000000000000d2, 0x20, 0x9, 0x20, 0x200000000a}, 0x48) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x30000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000190000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c000380050001000000000008000140000000000800f53f000000030900010073797a30"], 0xd4}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r9, &(0x7f0000000040)=""/233, 0xe9) getdents64(r9, &(0x7f0000002f40)=""/4092, 0xffc) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000004c0)={0x1, 0x2000000000009}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0xf}, {0xf, 0xb}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x0, 0x2}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xfffffff8, 0xef1b}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0xcfdd, 0x1, 0x7, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0xfb, '\x00', 0x7, 0xff, 0x41b, 0x100}}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x2c}}]}, 0xa4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x244000, 0x0) 1.980108752s ago: executing program 3 (id=3501): r0 = socket$inet6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x800, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000040)={{r0}, 0x0, 0x4, @unused=[0x23c6, 0x5, 0xbd, 0x78], @subvolid=0x3}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) 1.979591324s ago: executing program 1 (id=3464): r0 = syz_open_dev$mouse(&(0x7f00000002c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000010c0)=0xffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = socket$isdn(0x22, 0x2, 0x26) close(r2) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r4 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414aa", @ANYRES64=r5], 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xd, 0x2, {0x2, 0xe}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close(0x3) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000001fc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0xc2, 0x1, 0x0, 0x10}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x52, 0x6, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x40, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x6, 0x4}}}}}}}]}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000005400038050000080100003400000000244000b802c0001800a0001"], 0x104}}, 0x4000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@private=0xa010102, @rand_addr=0x64010102}, 0xc) syz_usb_connect(0x1, 0x3f, &(0x7f0000000180)=ANY=[], 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/201, 0xc9, 0x0, &(0x7f0000000400)=""/179, 0xb3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000039f3ffff0000000072000000184300000600000000000000000000009500000000000000d54af8fffcffffff9500000000000000950000000000000018240000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000183a000004000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000002000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x16, &(0x7f0000000100)=""/22, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x7}, 0x10, r10, r6, 0x3, &(0x7f0000000540)=[r6, r5, r4, r4, r0, r4, r6], &(0x7f0000000580)=[{0x2, 0x4, 0x9, 0x1}, {0x5, 0x4, 0xf, 0xc}, {0x0, 0x5, 0x9, 0xb}], 0x10, 0x1, @void, @value}, 0x94) 1.5263196s ago: executing program 3 (id=3502): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/16, 0x10}], 0x1}, 0x17}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 1.265330304s ago: executing program 4 (id=3503): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32=0xffffffffffffffff], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/97, 0x61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1480, 0x0) io_setup(0x4, &(0x7f00000014c0)) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') mknod(0x0, 0x8001420, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x2001048, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x608200, 0x0) r5 = dup(r4) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000100)=0x7) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r3, @ANYBLOB="02000000", @ANYBLOB="f17663689d90fe12b778340798267c220407e8e31678752306985c3ebe7c77e1fdb5294f36fb1adfed5f30b18d21c58991a4d4da6830225ee9a2e850ecd8647d418a48ff04ea884428fe0f7a78b9", @ANYRES16=r4, @ANYRES8=0x0, @ANYBLOB="1d289b04a0724cff258d0800000000000000075bb9626ce0cc79816d2d5d660e4a75f6cdb47b071ff06bc2a62b922f8500000000", @ANYRES32=r1], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x10, 0x0, @thr={&(0x7f0000000280)="8de51d69debe", &(0x7f0000000380)="69c5ee027692823439a87f981835bced75a77a50a90eac9e85f1d4a596b4accfac846600e76b91ef41929626819d57173c84a13703f41c04568ac936864c58c05599b843e67a554ba05ee1ef14e9b814db27b3e13b05156075925748003c34a2b1fbfd293efd57178044abcb5e8da92a7858ca"}}, &(0x7f00000001c0)) syz_usb_disconnect(r0) 1.179423067s ago: executing program 0 (id=3504): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000140)={'dummy0\x00', @ifru_hwaddr=@link_local}}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001c00010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="0800a680"], 0x1c}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x26040800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x10) shutdown(r6, 0x1) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xffffffffffffffbe, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x10000, 0x86000) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.022606459s ago: executing program 0 (id=3505): openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/key-users\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket(0x2a, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000018"], 0x30}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async, rerun: 32) r6 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r1], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB="46040000", @ANYRES16=r0, @ANYRES32=r9, @ANYRES32=r6, @ANYRES16=0x0, @ANYRES8=r8, @ANYRES32=r10, @ANYRES8=r8], 0x4}}, 0x40090) (async) sendfile(r8, r7, 0x0, 0x100000002) 960.33638ms ago: executing program 3 (id=3506): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, 0x0, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000640)=[@enter_looper={0x40086303}], 0x0, 0x1000000000000, 0x0}) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @main, @main=@item_4={0x3, 0x0, 0xc, "f53f0587"}]}}, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 892.024176ms ago: executing program 0 (id=3507): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000040)={0x7ff, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87e4fe96288243e7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2400}], 0x4c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x9, 0x14, 0xbf, 0x20, 0xac8, 0xc301, 0x82d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x53, 0x8, 0x98}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = dup3(r4, r3, 0x0) io_setup(0x685, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000b80)=[&(0x7f0000000340)={0x503, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xfce3}]) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) 553.787462ms ago: executing program 2 (id=3508): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x200000) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"a2e3ad214fc7529b1b23090787f70e06d038e7ff7fc6e5539b3273078b089b3b083841090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ed30c000000000000040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000007008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07845754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcdddd754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfbb655548cf99c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad03f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a12810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de0ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac34b308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2dd9bb96e222d8e904f6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 145.695672ms ago: executing program 2 (id=3509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x8000080) 97.530498ms ago: executing program 2 (id=3510): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x6000000) 0s ago: executing program 2 (id=3511): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42042) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'vlan0\x00', 0x4}, 0x18) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$getflags(r4, 0x401) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$inet(0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1000000, 0x0, [], 0x2, 0x0, 0x0}, 0x108) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) recvmsg(r6, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=""/122, 0x7a}, 0x42) kernel console output (not intermixed with test programs): 13: 0000000000000001 R14: 00007f66d3d35f80 R15: 00007f66d3e5fa28 [ 905.334128][T20177] [ 905.366166][ T938] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 905.374392][ T938] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 905.384607][ T938] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 905.407360][ T938] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 905.433390][ T938] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 905.457422][ T938] usb 4-1: string descriptor 0 read error: -22 [ 905.465571][ T938] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 905.485000][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 905.496500][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.529435][ T938] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 905.732558][T20142] xt_TPROXY: Can be used only with -p tcp or -p udp [ 905.742905][ T5289] usb 4-1: USB disconnect, device number 32 [ 905.790256][ T938] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 905.819211][ T5293] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 905.949492][ T938] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 905.957020][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 905.967457][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 905.978002][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 905.989211][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 905.999185][ T5293] usb 5-1: Using ep0 maxpacket: 8 [ 906.005666][ T938] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 906.014280][ T5293] usb 5-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=27.3c [ 906.023573][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.031678][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 906.042352][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 906.052240][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 906.063529][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 906.076039][ T5293] usb 5-1: config 0 descriptor?? [ 906.085270][ T938] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 906.092869][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 906.102944][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 906.112838][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 906.124389][ T938] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 906.143048][ T938] usb 3-1: string descriptor 0 read error: -22 [ 906.149993][ T938] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 906.160006][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.174442][ T938] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 906.286109][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 906.297170][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 906.369158][T20204] sctp: [Deprecated]: syz.3.3265 (pid 20204) Use of int in maxseg socket option. [ 906.369158][T20204] Use struct sctp_assoc_value instead [ 906.422409][T20194] xt_TPROXY: Can be used only with -p tcp or -p udp [ 906.445528][ T7113] usb 3-1: USB disconnect, device number 19 [ 906.490941][T20209] lo: entered allmulticast mode [ 907.013420][T20218] FAULT_INJECTION: forcing a failure. [ 907.013420][T20218] name failslab, interval 1, probability 0, space 0, times 0 [ 907.026983][T20218] CPU: 0 UID: 0 PID: 20218 Comm: syz.2.3270 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 907.037764][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 907.047841][T20218] Call Trace: [ 907.051138][T20218] [ 907.054083][T20218] dump_stack_lvl+0x241/0x360 [ 907.058768][T20218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.063958][T20218] ? __pfx__printk+0x10/0x10 [ 907.068554][T20218] ? fs_reclaim_acquire+0x93/0x130 [ 907.073670][T20218] ? __pfx___might_resched+0x10/0x10 [ 907.078961][T20218] should_fail_ex+0x3b0/0x4e0 [ 907.083640][T20218] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 907.089356][T20218] should_failslab+0xac/0x100 [ 907.094032][T20218] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 907.099748][T20218] __kmalloc_noprof+0xd8/0x400 [ 907.104514][T20218] tomoyo_realpath_from_path+0xcf/0x5e0 [ 907.110068][T20218] tomoyo_path_number_perm+0x23a/0x880 [ 907.115528][T20218] ? tomoyo_path_number_perm+0x208/0x880 [ 907.121162][T20218] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 907.127161][T20218] ? __fget_files+0x29/0x470 [ 907.131751][T20218] ? __fget_files+0x3f3/0x470 [ 907.136430][T20218] security_file_ioctl+0xc6/0x2a0 [ 907.141464][T20218] __se_sys_ioctl+0x47/0x170 [ 907.146058][T20218] do_syscall_64+0xf3/0x230 [ 907.150557][T20218] ? clear_bhb_loop+0x35/0x90 [ 907.155252][T20218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.161152][T20218] RIP: 0033:0x7f66d3b7dff9 [ 907.165564][T20218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.185174][T20218] RSP: 002b:00007f66d4a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.193589][T20218] RAX: ffffffffffffffda RBX: 00007f66d3d35f80 RCX: 00007f66d3b7dff9 [ 907.201558][T20218] RDX: 0000000020000240 RSI: 00000000c0884113 RDI: 0000000000000005 [ 907.209522][T20218] RBP: 00007f66d4a20090 R08: 0000000000000000 R09: 0000000000000000 [ 907.217485][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.225455][T20218] R13: 0000000000000000 R14: 00007f66d3d35f80 R15: 00007f66d3e5fa28 [ 907.233430][T20218] [ 907.245261][T20218] ERROR: Out of memory at tomoyo_realpath_from_path. [ 907.478099][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 907.478117][ T29] audit: type=1326 audit(1728829291.335:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.540072][ T29] audit: type=1326 audit(1728829291.335:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.570192][ T29] audit: type=1326 audit(1728829291.335:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.605005][ T29] audit: type=1326 audit(1728829291.335:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.633200][ T29] audit: type=1326 audit(1728829291.335:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.664362][ T29] audit: type=1326 audit(1728829291.345:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.687307][ T29] audit: type=1326 audit(1728829291.345:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.712174][ T29] audit: type=1326 audit(1728829291.345:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.734638][ T29] audit: type=1326 audit(1728829291.345:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.758718][ T29] audit: type=1326 audit(1728829291.345:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20226 comm="syz.3.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fbf7dff9 code=0x7ffc0000 [ 907.879037][ T5282] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 908.042217][ T5282] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 908.049927][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 908.066987][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 908.080678][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 908.092771][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 908.109283][ T5282] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 908.117719][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 908.129483][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 908.139516][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 908.150814][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 908.162077][ T5282] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 908.171977][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 908.182046][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 908.192237][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 908.203473][ T5282] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 908.216917][ T5282] usb 4-1: string descriptor 0 read error: -22 [ 908.226551][ T5282] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 908.236044][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.261552][ T5282] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 908.466063][ T5282] usb 5-1: USB disconnect, device number 60 [ 908.506776][T10735] usb 4-1: USB disconnect, device number 33 [ 908.529128][T20191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.572694][T20241] Invalid logical block size (18) [ 909.162666][T20251] FAULT_INJECTION: forcing a failure. [ 909.162666][T20251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.178327][T20251] CPU: 0 UID: 0 PID: 20251 Comm: syz.3.3280 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 909.189135][T20251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 909.199209][T20251] Call Trace: [ 909.202500][T20251] [ 909.205439][T20251] dump_stack_lvl+0x241/0x360 [ 909.210143][T20251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 909.215358][T20251] ? __pfx__printk+0x10/0x10 [ 909.219966][T20251] ? __pfx_lock_release+0x10/0x10 [ 909.225012][T20251] should_fail_ex+0x3b0/0x4e0 [ 909.229710][T20251] _copy_to_user+0x2f/0xb0 [ 909.234153][T20251] snd_pcm_oss_read2+0x340/0x440 [ 909.239108][T20251] ? __pfx___mutex_lock+0x10/0x10 [ 909.244153][T20251] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 909.249629][T20251] ? end_current_label_crit_section+0x151/0x180 [ 909.255890][T20251] snd_pcm_oss_read+0x6b1/0x940 [ 909.260774][T20251] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 909.266168][T20251] vfs_read+0x201/0xbc0 [ 909.270342][T20251] ? __pfx_lock_release+0x10/0x10 [ 909.275387][T20251] ? __mutex_unlock_slowpath+0x21d/0x750 [ 909.281037][T20251] ? __pfx_vfs_read+0x10/0x10 [ 909.285734][T20251] ? __fget_files+0x29/0x470 [ 909.290347][T20251] ? __fget_files+0x3f3/0x470 [ 909.295035][T20251] ? __fget_files+0x29/0x470 [ 909.299629][T20251] ? fdget_pos+0x19a/0x320 [ 909.304039][T20251] ksys_read+0x183/0x2b0 [ 909.308277][T20251] ? __pfx_ksys_read+0x10/0x10 [ 909.313034][T20251] ? do_syscall_64+0x100/0x230 [ 909.317793][T20251] ? do_syscall_64+0xb6/0x230 [ 909.322501][T20251] do_syscall_64+0xf3/0x230 [ 909.326994][T20251] ? clear_bhb_loop+0x35/0x90 [ 909.331667][T20251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.337562][T20251] RIP: 0033:0x7f93fbf7dff9 [ 909.341982][T20251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.361592][T20251] RSP: 002b:00007f93fce2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 909.370003][T20251] RAX: ffffffffffffffda RBX: 00007f93fc136058 RCX: 00007f93fbf7dff9 [ 909.377968][T20251] RDX: 0000000000002020 RSI: 0000000020004380 RDI: 0000000000000003 [ 909.385929][T20251] RBP: 00007f93fce2c090 R08: 0000000000000000 R09: 0000000000000000 [ 909.393896][T20251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.401861][T20251] R13: 0000000000000000 R14: 00007f93fc136058 R15: 00007f93fc25fa28 [ 909.409837][T20251] [ 909.628566][T20253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3281'. [ 909.982048][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3285'. [ 911.247444][T20289] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3294'. [ 911.461428][T20300] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3298'. [ 911.480276][T20303] tipc: Started in network mode [ 911.485314][T20303] tipc: Node identity ac1414aa, cluster identity 4711 [ 911.492573][T20300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.495158][T20303] tipc: Enabled bearer , priority 10 [ 912.037783][ T5281] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 912.218965][ T5281] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 912.240109][ T5281] usb 3-1: config 0 has no interface number 0 [ 912.249510][ T5281] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 912.249535][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.253364][ T5281] usb 3-1: config 0 descriptor?? [ 912.410847][ T5281] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 912.608145][ T8] tipc: Node number set to 2886997162 [ 912.692856][T20311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3302'. [ 912.846043][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 912.858636][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 912.883203][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 912.898062][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 912.905855][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 912.925875][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 913.040075][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.117623][ T5281] usb 3-1: device descriptor read/64, error -71 [ 913.182336][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.343138][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.367631][ T5281] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 913.425718][T20333] chnl_net:caif_netlink_parms(): no params data found [ 913.467614][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.498852][ T5281] usb 3-1: device descriptor read/64, error -71 [ 913.747656][ T5281] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 913.798852][ T5281] usb 3-1: device descriptor read/8, error -71 [ 913.805419][T20333] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.823056][T20333] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.831810][T20333] bridge_slave_0: entered allmulticast mode [ 913.839329][T20333] bridge_slave_0: entered promiscuous mode [ 913.903914][T20333] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.914837][T20333] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.923709][T20333] bridge_slave_1: entered allmulticast mode [ 913.931145][T20333] bridge_slave_1: entered promiscuous mode [ 913.949913][ T65] bridge_slave_1: left allmulticast mode [ 913.955817][ T65] bridge_slave_1: left promiscuous mode [ 913.962462][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.980487][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.038415][ T5281] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 914.084907][ T5281] usb 3-1: device descriptor read/8, error -71 [ 914.205837][ T5281] usb 3-1: USB disconnect, device number 20 [ 914.382236][ T5281] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 914.517602][ T5281] usb 3-1: device descriptor read/64, error -71 [ 914.787882][ T5281] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 914.871964][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.887097][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.912308][ T65] bond0 (unregistering): Released all slaves [ 915.021479][T19594] Bluetooth: hci3: command tx timeout [ 915.039692][T20333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.067121][T20333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.179340][ T5281] usb usb3-port1: attempt power cycle [ 915.249783][T20333] team0: Port device team_slave_0 added [ 915.275084][T20333] team0: Port device team_slave_1 added [ 915.557754][ T5281] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 915.609313][ T5281] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 915.634929][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 915.646249][T20333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.676516][T20333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.697651][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 915.744266][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 915.790283][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 915.818953][ T5281] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 915.839428][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 915.850030][T20333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.878166][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 915.891146][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 915.899459][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 915.908664][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 915.918950][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 915.928099][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 915.939895][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 915.950729][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 915.959385][ T5281] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 915.966964][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 915.974875][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 915.985618][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 915.996527][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 916.010949][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 916.026449][ T5281] usb 3-1: string descriptor 0 read error: -22 [ 916.033158][ T5281] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 916.042607][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.059906][ T5281] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 916.207249][T20333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.247555][T20333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.273470][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.334112][T20333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.409549][ T5281] usb 3-1: USB disconnect, device number 23 [ 916.489931][ T65] hsr_slave_0: left promiscuous mode [ 916.513138][ T65] hsr_slave_1: left promiscuous mode [ 916.528317][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.535867][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.544124][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.551823][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.595365][T19594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 916.602148][ T65] veth1_macvtap: left promiscuous mode [ 916.611134][T19594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 916.617663][ T65] veth0_macvtap: left promiscuous mode [ 916.623978][T19594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 916.628139][ T65] veth1_vlan: left promiscuous mode [ 916.641329][T19594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 916.643901][ T65] veth0_vlan: left promiscuous mode [ 916.654152][T19594] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 916.662524][T19594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 917.107803][ T54] Bluetooth: hci3: command tx timeout [ 917.270088][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 917.281286][ T65] team0 (unregistering): Port device team_slave_1 removed [ 917.328833][ T65] team0 (unregistering): Port device team_slave_0 removed [ 917.428893][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 917.435726][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 917.443602][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 917.455846][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.469080][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 917.481026][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 917.494431][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 917.503376][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 917.514676][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.528026][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 917.539201][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 917.551776][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 917.559468][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 917.570802][ T8] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.583722][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 917.595666][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 917.610094][ T8] usb 3-1: string descriptor 0 read error: -22 [ 917.616350][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 917.625813][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.640676][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 917.956006][ T8] usb 3-1: USB disconnect, device number 24 [ 918.011921][T20333] hsr_slave_0: entered promiscuous mode [ 918.019652][T20333] hsr_slave_1: entered promiscuous mode [ 918.029441][T20333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.037001][T20333] Cannot create hsr debugfs directory [ 918.057747][ T54] Bluetooth: hci1: command tx timeout [ 918.492049][T20390] chnl_net:caif_netlink_parms(): no params data found [ 918.626209][T20399] chnl_net:caif_netlink_parms(): no params data found [ 918.677652][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.713586][ T54] Bluetooth: hci0: command tx timeout [ 918.830397][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.921240][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.984894][T20390] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.003351][T20390] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.011029][T20390] bridge_slave_0: entered allmulticast mode [ 919.017805][T20390] bridge_slave_0: entered promiscuous mode [ 919.070040][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.093720][T20390] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.102755][T20390] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.110253][T20390] bridge_slave_1: entered allmulticast mode [ 919.116840][T20390] bridge_slave_1: entered promiscuous mode [ 919.123706][ T5282] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 919.159928][T20399] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.167064][T20399] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.174385][T20399] bridge_slave_0: entered allmulticast mode [ 919.180506][ T54] Bluetooth: hci3: command tx timeout [ 919.187286][T20399] bridge_slave_0: entered promiscuous mode [ 919.215120][T20399] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.222430][T20399] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.231499][T20399] bridge_slave_1: entered allmulticast mode [ 919.238815][T20399] bridge_slave_1: entered promiscuous mode [ 919.259482][T20390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.277704][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 919.296076][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 919.309334][T20390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.315676][ T5282] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 919.334760][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.350214][T20399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.366672][ T5282] usb 3-1: config 0 descriptor?? [ 919.376613][T20333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 919.389859][ T5282] hub 3-1:0.0: bad descriptor, ignoring hub [ 919.395815][ T5282] hub 3-1:0.0: probe with driver hub failed with error -5 [ 919.414214][ T5282] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 919.432397][T20399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.448617][T20390] team0: Port device team_slave_0 added [ 919.456110][T20333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 919.501380][T20390] team0: Port device team_slave_1 added [ 919.507285][T20333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 919.525961][T20333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 919.626297][T20390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.638497][T20390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.674344][T20390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.706372][T20399] team0: Port device team_slave_0 added [ 919.726816][T20390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.743083][T20390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.779236][T20390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.812185][ T65] bridge_slave_1: left allmulticast mode [ 919.825336][ T65] bridge_slave_1: left promiscuous mode [ 919.832004][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.857198][ T65] bridge_slave_0: left allmulticast mode [ 919.868472][ T65] bridge_slave_0: left promiscuous mode [ 919.874204][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.138523][ T54] Bluetooth: hci1: command tx timeout [ 920.584061][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.598825][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.613289][ T65] bond0 (unregistering): Released all slaves [ 920.631822][T20399] team0: Port device team_slave_1 added [ 920.699372][T20390] hsr_slave_0: entered promiscuous mode [ 920.721074][T20390] hsr_slave_1: entered promiscuous mode [ 920.735468][T20390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.743634][T20390] Cannot create hsr debugfs directory [ 920.785945][ T54] Bluetooth: hci0: command tx timeout [ 920.910899][T20399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.938103][T20399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.974875][T20399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.076731][T20399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.087003][T20399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.130253][T20399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.219191][ T65] hsr_slave_0: left promiscuous mode [ 921.225131][ T65] hsr_slave_1: left promiscuous mode [ 921.233271][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.243411][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.253987][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.257902][ T54] Bluetooth: hci3: command tx timeout [ 921.262647][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.293311][ T65] veth1_macvtap: left promiscuous mode [ 921.301710][ T65] veth0_macvtap: left promiscuous mode [ 921.307398][ T65] veth1_vlan: left promiscuous mode [ 921.317894][ T65] veth0_vlan: left promiscuous mode [ 921.819604][ T65] team0 (unregistering): Port device team_slave_1 removed [ 921.928153][ T65] team0 (unregistering): Port device team_slave_0 removed [ 922.059906][ T8] usb 3-1: USB disconnect, device number 25 [ 922.108298][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 922.108316][ T29] audit: type=1326 audit(1728829305.955:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.161289][ T29] audit: type=1326 audit(1728829305.955:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.205296][ T29] audit: type=1326 audit(1728829305.965:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.240118][ T54] Bluetooth: hci1: command tx timeout [ 922.249685][ T29] audit: type=1326 audit(1728829305.965:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.280592][ T29] audit: type=1326 audit(1728829305.965:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.310132][ T29] audit: type=1326 audit(1728829305.965:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.332899][ T29] audit: type=1326 audit(1728829305.965:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.364436][ T29] audit: type=1326 audit(1728829305.965:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.395382][ T29] audit: type=1326 audit(1728829305.975:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.418698][ T29] audit: type=1326 audit(1728829305.975:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20506 comm="syz.2.3335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d3b7dff9 code=0x7ffc0000 [ 922.718936][T20399] hsr_slave_0: entered promiscuous mode [ 922.740055][T20399] hsr_slave_1: entered promiscuous mode [ 922.868809][ T54] Bluetooth: hci0: command tx timeout [ 922.923793][T20516] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3338'. [ 922.953440][T20333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.119940][T20390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.240338][T20390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.273672][T20333] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.316035][ T2547] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.323195][ T2547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.373990][T20390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.412624][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.419808][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.429341][T10735] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 923.465971][T20390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.540675][T20333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 923.622241][T10735] usb 3-1: Using ep0 maxpacket: 16 [ 923.643889][T10735] usb 3-1: config 0 has an invalid interface number: 114 but max is 7 [ 923.663964][T10735] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 923.678846][T20333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.682066][T10735] usb 3-1: config 0 has no interface number 0 [ 923.695049][T10735] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 5.00 [ 923.711486][T10735] usb 3-1: New USB device strings: Mfr=251, Product=1, SerialNumber=3 [ 923.727097][T10735] usb 3-1: Product: syz [ 923.743100][T10735] usb 3-1: Manufacturer: syz [ 923.752179][T10735] usb 3-1: SerialNumber: syz [ 923.772714][T10735] usb 3-1: config 0 descriptor?? [ 923.810240][T20333] veth0_vlan: entered promiscuous mode [ 923.912685][T20333] veth1_vlan: entered promiscuous mode [ 924.003479][T10735] ftdi_sio 3-1:0.114: FTDI USB Serial Device converter detected [ 924.039666][T20333] veth0_macvtap: entered promiscuous mode [ 924.045874][T10735] usb 3-1: Detected FT2232C/D [ 924.065872][T10735] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 924.082048][T10735] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 924.103277][T10735] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 924.105240][T20333] veth1_macvtap: entered promiscuous mode [ 924.118528][T10735] usb 3-1: USB disconnect, device number 26 [ 924.127470][T10735] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 924.144082][T10735] ftdi_sio 3-1:0.114: device disconnected [ 924.174341][T20333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.186463][T20333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.200508][T20333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.211312][T20333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.222446][T20333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.232991][T20333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.244802][T20333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.283723][T20333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.296845][T20333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.307165][ T54] Bluetooth: hci1: command tx timeout [ 924.315235][T20333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.325863][T20333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.335798][T20333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.346889][T20333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.361851][T20333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.372710][T20399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 924.384495][T20399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 924.403010][T20333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.413285][T20333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.422267][T20333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.431203][T20333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.443673][T20399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 924.454495][T20399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 924.545183][T20390] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 924.569262][T20390] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 924.607415][T20390] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 924.643425][T20390] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 924.707278][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.736662][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.836232][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.864628][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.881525][T20399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.938068][ T54] Bluetooth: hci0: command tx timeout [ 924.980753][T20390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.994546][T20399] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.046002][T20390] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.089381][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.096511][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.127073][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.134242][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.139526][ T8] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 925.156558][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.163707][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.186223][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.193381][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.322098][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 925.338628][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 925.357254][T20399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.377718][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 925.397052][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 925.434926][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 925.460092][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 925.470599][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 925.478902][T20390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.487470][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 925.504093][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 925.532969][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 925.563755][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 925.572658][T20399] veth0_vlan: entered promiscuous mode [ 925.585976][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 925.594155][T20399] veth1_vlan: entered promiscuous mode [ 925.615088][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 925.634809][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 925.646775][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 925.672224][ T8] usb 3-1: string descriptor 0 read error: -22 [ 925.687138][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 925.692221][T20390] veth0_vlan: entered promiscuous mode [ 925.708597][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.724160][T20390] veth1_vlan: entered promiscuous mode [ 925.758534][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 925.794519][T20399] veth0_macvtap: entered promiscuous mode [ 925.811805][T20390] veth0_macvtap: entered promiscuous mode [ 925.825864][T20390] veth1_macvtap: entered promiscuous mode [ 925.836742][T20399] veth1_macvtap: entered promiscuous mode [ 925.869203][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.881817][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.891729][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.903010][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.913141][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.923914][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.936346][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.947106][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.960194][T20399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.969051][ T938] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 925.972383][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.990587][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.000652][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.011362][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.021739][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.032987][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.042862][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.053974][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.072281][T20399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.088192][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.088485][ T7113] usb 3-1: USB disconnect, device number 27 [ 926.105252][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.115677][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.126355][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.137108][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.147915][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 926.148614][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.159109][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.163003][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.180762][ T938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 926.184598][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.206357][ T938] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 926.208573][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.216670][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.229541][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.253933][ T938] usb 1-1: config 0 descriptor?? [ 926.259027][T20390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.261482][T20399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.276870][T20399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.286084][T20399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.295674][T20399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.312995][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.324104][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.336026][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.347287][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.358336][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.369122][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.379925][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.391480][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.401724][T20390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.412741][T20390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.425315][T20390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.446542][T20390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.455599][T20390] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.465818][T20390] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.475057][T20390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.616101][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.625668][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.654599][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.661991][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.686498][ T938] microsoft 0003:045E:07DA.003C: No inputs registered, leaving [ 926.709149][ T938] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 926.725887][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.744902][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.753726][ T938] microsoft 0003:045E:07DA.003C: no inputs found [ 926.760277][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.760301][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.779368][ T938] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 926.924679][T20587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.951119][T20587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.979230][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 927.184920][ T8] usb 1-1: USB disconnect, device number 42 [ 927.267662][ T938] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 927.377816][ T5293] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 927.429731][ T938] usb 5-1: Using ep0 maxpacket: 8 [ 927.436310][ T938] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 927.447593][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.461753][ T938] usb 5-1: config 0 descriptor?? [ 927.538240][ T5293] usb 3-1: Using ep0 maxpacket: 8 [ 927.546755][ T5293] usb 3-1: config 0 has no interfaces? [ 927.553063][ T5293] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 927.562759][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.573367][ T5293] usb 3-1: config 0 descriptor?? [ 927.753802][T20607] netlink: 'syz.0.3349': attribute type 3 has an invalid length. [ 927.790574][ T5281] usb 3-1: USB disconnect, device number 28 [ 927.822299][T20609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.737818][ T5293] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 928.899527][ T5293] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 928.921005][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 928.932887][ T938] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 928.947869][ T938] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 928.969669][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 928.982464][ T938] asix 5-1:0.0: probe with driver asix failed with error -71 [ 928.993142][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 929.009736][ T938] usb 5-1: USB disconnect, device number 61 [ 929.017457][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 929.029313][ T5293] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 929.036942][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 929.064173][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 929.085951][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 929.115052][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 929.129741][ T5293] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 929.137383][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 929.148501][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 929.197694][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 929.226253][ T5293] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 929.254507][ T5293] usb 3-1: string descriptor 0 read error: -22 [ 929.270470][ T5293] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 929.285782][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.315580][ T5293] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 929.583225][ T46] usb 3-1: USB disconnect, device number 29 [ 929.717704][ T5282] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 929.800621][T20663] fuse: Bad value for 'fd' [ 929.808849][T20663] netlink: 'syz.4.3365': attribute type 8 has an invalid length. [ 929.816686][T20663] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.3365'. [ 929.973252][ T5282] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 929.984540][ T5282] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 929.997624][ T5282] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 930.006902][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.943515][ T46] IPVS: starting estimator thread 0... [ 931.037641][T20690] IPVS: using max 32 ests per chain, 76800 per kthread [ 931.740187][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.746570][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.781073][T20707] program syz.4.3376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 932.587655][ T8] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 932.757611][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 932.771686][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.797907][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 932.824542][T20734] FAULT_INJECTION: forcing a failure. [ 932.824542][T20734] name failslab, interval 1, probability 0, space 0, times 0 [ 932.826533][ T8] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 932.877551][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.895728][T20734] CPU: 1 UID: 0 PID: 20734 Comm: syz.0.3385 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 932.900822][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.906508][T20734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 932.916838][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.925552][T20734] Call Trace: [ 932.925565][T20734] [ 932.925574][T20734] dump_stack_lvl+0x241/0x360 [ 932.925603][T20734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.925623][T20734] ? __pfx__printk+0x10/0x10 [ 932.940391][ T8] usbtmc 5-1:16.0: bulk endpoints not found [ 932.944432][T20734] ? ref_tracker_alloc+0x332/0x490 [ 932.944462][T20734] should_fail_ex+0x3b0/0x4e0 [ 932.944490][T20734] ? skb_clone+0x20c/0x390 [ 932.944512][T20734] should_failslab+0xac/0x100 [ 932.944534][T20734] ? skb_clone+0x20c/0x390 [ 932.944555][T20734] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 932.944581][T20734] skb_clone+0x20c/0x390 [ 932.944606][T20734] __netlink_deliver_tap+0x3cc/0x7c0 [ 932.944636][T20734] ? netlink_deliver_tap+0x2e/0x1b0 [ 932.944655][T20734] netlink_deliver_tap+0x19d/0x1b0 [ 932.944676][T20734] netlink_unicast+0x7c4/0x990 [ 932.944710][T20734] ? __pfx_netlink_unicast+0x10/0x10 [ 932.944732][T20734] ? __virt_addr_valid+0x183/0x530 [ 932.944758][T20734] ? __check_object_size+0x48e/0x900 [ 932.944785][T20734] netlink_sendmsg+0x8e4/0xcb0 [ 932.944817][T20734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.944841][T20734] ? aa_sock_msg_perm+0x91/0x160 [ 932.944867][T20734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.944885][T20734] __sock_sendmsg+0x221/0x270 [ 932.944913][T20734] ____sys_sendmsg+0x52a/0x7e0 [ 932.944945][T20734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.944982][T20734] __sys_sendmsg+0x292/0x380 [ 932.945006][T20734] ? __pfx___sys_sendmsg+0x10/0x10 [ 932.945040][T20734] ? __pfx_vfs_write+0x10/0x10 [ 932.945085][T20734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 932.945121][T20734] ? do_syscall_64+0x100/0x230 [ 932.945144][T20734] ? do_syscall_64+0xb6/0x230 [ 932.945166][T20734] do_syscall_64+0xf3/0x230 [ 932.945187][T20734] ? clear_bhb_loop+0x35/0x90 [ 932.945210][T20734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.945236][T20734] RIP: 0033:0x7f62dcb7dff9 [ 932.945257][T20734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.945274][T20734] RSP: 002b:00007f62dd991038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.083301][ T8] usb 4-1: USB disconnect, device number 34 [ 933.085467][T20734] RAX: ffffffffffffffda RBX: 00007f62dcd35f80 RCX: 00007f62dcb7dff9 [ 933.085488][T20734] RDX: 0000000000000000 RSI: 0000000020000c80 RDI: 0000000000000003 [ 933.085502][T20734] RBP: 00007f62dd991090 R08: 0000000000000000 R09: 0000000000000000 [ 933.172038][T20734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.180004][T20734] R13: 0000000000000000 R14: 00007f62dcd35f80 R15: 00007f62dce5fa28 [ 933.187977][T20734] [ 933.202991][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 933.425660][T20752] fuse: Bad value for 'fd' [ 933.490914][T20757] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.3393' sets config #0 [ 933.677731][ T46] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 933.817614][ T7113] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 933.817730][ T46] usb 3-1: device descriptor read/64, error -71 [ 933.827913][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 933.967693][ T7113] usb 1-1: Using ep0 maxpacket: 8 [ 933.976761][ T7113] usb 1-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 933.986175][ T7113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.996067][ T7113] usb 1-1: Product: syz [ 934.000963][ T7113] usb 1-1: Manufacturer: syz [ 934.006051][ T7113] usb 1-1: SerialNumber: syz [ 934.010847][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 934.022742][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9218, setting to 1024 [ 934.034808][ T7113] usb 1-1: config 0 descriptor?? [ 934.045181][ T7113] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 934.052644][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 934.062066][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.077842][ T46] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 934.085517][ T8] usb 4-1: config 0 descriptor?? [ 934.091764][T20763] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 934.227631][ T46] usb 3-1: device descriptor read/64, error -71 [ 934.245302][ T2035] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 934.246665][ T7113] usb 1-1: USB disconnect, device number 43 [ 934.255341][ T2035] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 934.344498][ T46] usb usb3-port1: attempt power cycle [ 934.505390][ T8] cm6533_jd 0003:0D8C:0022.003D: unknown main item tag 0x0 [ 934.513021][ T8] cm6533_jd 0003:0D8C:0022.003D: item fetching failed at offset 4/5 [ 934.521559][ T8] cm6533_jd 0003:0D8C:0022.003D: parse failed [ 934.528077][ T8] cm6533_jd 0003:0D8C:0022.003D: probe with driver cm6533_jd failed with error -22 [ 934.687780][ T46] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 934.709966][ T46] usb 3-1: device descriptor read/8, error -71 [ 934.727353][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3396'. [ 934.733510][T20775] FAULT_INJECTION: forcing a failure. [ 934.733510][T20775] name failslab, interval 1, probability 0, space 0, times 0 [ 934.748989][T20775] CPU: 0 UID: 0 PID: 20775 Comm: syz.1.3400 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 934.759771][T20775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 934.769828][T20775] Call Trace: [ 934.773102][T20775] [ 934.776029][T20775] dump_stack_lvl+0x241/0x360 [ 934.780708][T20775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.785900][T20775] ? __pfx__printk+0x10/0x10 [ 934.790490][T20775] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 934.796470][T20775] ? __pfx___might_resched+0x10/0x10 [ 934.801753][T20775] ? __netlink_dump_start+0x533/0x790 [ 934.807127][T20775] should_fail_ex+0x3b0/0x4e0 [ 934.811807][T20775] should_failslab+0xac/0x100 [ 934.816480][T20775] ? __alloc_skb+0x1c3/0x440 [ 934.821063][T20775] kmem_cache_alloc_node_noprof+0x71/0x320 [ 934.826866][T20775] __alloc_skb+0x1c3/0x440 [ 934.831276][T20775] ? __pfx___alloc_skb+0x10/0x10 [ 934.836208][T20775] ? netlink_ack_tlv_len+0x6e/0x200 [ 934.841406][T20775] netlink_ack+0x13f/0xa30 [ 934.845817][T20775] ? __pfx_lock_acquire+0x10/0x10 [ 934.850836][T20775] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 934.856559][T20775] ? __pfx_ethnl_default_done+0x10/0x10 [ 934.862109][T20775] netlink_rcv_skb+0x262/0x430 [ 934.866873][T20775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.871895][T20775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.877190][T20775] ? __netlink_deliver_tap+0x77e/0x7c0 [ 934.882651][T20775] genl_rcv+0x28/0x40 [ 934.886629][T20775] netlink_unicast+0x7f6/0x990 [ 934.891397][T20775] ? __pfx_netlink_unicast+0x10/0x10 [ 934.896679][T20775] ? __virt_addr_valid+0x183/0x530 [ 934.901789][T20775] ? __check_object_size+0x48e/0x900 [ 934.907073][T20775] netlink_sendmsg+0x8e4/0xcb0 [ 934.911838][T20775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.917117][T20775] ? aa_sock_msg_perm+0x91/0x160 [ 934.922051][T20775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.927322][T20775] __sock_sendmsg+0x221/0x270 [ 934.931996][T20775] ____sys_sendmsg+0x52a/0x7e0 [ 934.936757][T20775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.942044][T20775] __sys_sendmsg+0x292/0x380 [ 934.946628][T20775] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.951741][T20775] ? __pfx_vfs_write+0x10/0x10 [ 934.956514][T20775] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 934.962847][T20775] ? do_syscall_64+0x100/0x230 [ 934.967618][T20775] ? do_syscall_64+0xb6/0x230 [ 934.972295][T20775] do_syscall_64+0xf3/0x230 [ 934.976789][T20775] ? clear_bhb_loop+0x35/0x90 [ 934.981459][T20775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.987345][T20775] RIP: 0033:0x7fb8dad7dff9 [ 934.991754][T20775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.011360][T20775] RSP: 002b:00007fb8dbbf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.019775][T20775] RAX: ffffffffffffffda RBX: 00007fb8daf35f80 RCX: 00007fb8dad7dff9 [ 935.027752][T20775] RDX: 0000000000000000 RSI: 0000000020000c80 RDI: 0000000000000003 [ 935.035728][T20775] RBP: 00007fb8dbbf8090 R08: 0000000000000000 R09: 0000000000000000 [ 935.043704][T20775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.051674][T20775] R13: 0000000000000000 R14: 00007fb8daf35f80 R15: 00007fb8db05fa28 [ 935.059658][T20775] [ 935.198131][ T46] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 935.238432][ T46] usb 3-1: device descriptor read/8, error -71 [ 935.335700][ T8] usb 5-1: USB disconnect, device number 62 [ 935.350323][ T46] usb usb3-port1: unable to enumerate USB device [ 935.454994][T20785] binder: 20784:20785 ioctl c018620c 20000340 returned -22 [ 935.493866][T20785] binder: 20784:20785 unknown command 0 [ 935.513582][T20785] binder: 20784:20785 ioctl c0306201 20000a80 returned -22 [ 935.695748][ T8] usb 4-1: USB disconnect, device number 35 [ 935.877853][ T5282] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 936.031261][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 936.038582][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 936.046047][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 936.061751][ T5282] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 936.074911][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 936.090546][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 936.103264][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 936.110975][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 936.123044][ T5282] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 936.134924][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 936.146703][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 936.159339][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 936.166749][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 936.180311][ T5282] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 936.192428][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 936.215345][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 936.253694][ T5282] usb 5-1: string descriptor 0 read error: -22 [ 936.261869][ T5282] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 936.271545][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.287216][ T5282] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 936.360425][ T1121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.481890][ T1121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.586865][ T1121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.644734][ T5293] usb 5-1: USB disconnect, device number 63 [ 936.709435][ T1121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.711243][T19594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 936.736887][T19594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 936.747112][T19594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 936.754198][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 936.766064][T19594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 936.778201][T19594] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 936.787244][T19594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 936.884661][ T1121] bridge_slave_1: left allmulticast mode [ 936.892965][ T1121] bridge_slave_1: left promiscuous mode [ 936.899550][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.908295][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 936.915011][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 936.918087][ T1121] bridge_slave_0: left allmulticast mode [ 936.926836][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 936.937575][ T1121] bridge_slave_0: left promiscuous mode [ 936.944802][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 936.957203][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.962316][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 936.977118][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.987035][ T8] usb 3-1: config 0 descriptor?? [ 936.993613][T20802] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 937.009276][ T8] hub 3-1:0.0: USB hub found [ 937.364479][T20807] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 937.521605][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.585820][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.614103][ T1121] bond0 (unregistering): Released all slaves [ 937.887730][ T46] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 938.072178][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 938.130004][ T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 938.157638][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 938.167787][ T46] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 938.179285][ T46] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.192644][ T46] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 938.202230][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.221239][ T46] usbtmc 5-1:16.0: bulk endpoints not found [ 938.422290][ T1121] hsr_slave_0: left promiscuous mode [ 938.429918][ T1121] hsr_slave_1: left promiscuous mode [ 938.437253][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.445681][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.469094][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.488683][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.564921][ T1121] veth1_macvtap: left promiscuous mode [ 938.587524][ T1121] veth0_macvtap: left promiscuous mode [ 938.613693][ T1121] veth1_vlan: left promiscuous mode [ 938.646425][ T1121] veth0_vlan: left promiscuous mode [ 938.858435][T19594] Bluetooth: hci0: command tx timeout [ 939.204979][ T8] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 939.216407][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 939.222533][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 939.249903][ T8] usb 3-1: USB disconnect, device number 34 [ 939.854247][T20845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.929154][T20846] usb usb8: usbfs: process 20846 (syz.2.3420) did not claim interface 1 before use [ 940.309829][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 940.445840][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 940.621908][ T5282] usb 5-1: USB disconnect, device number 64 [ 940.947857][T19594] Bluetooth: hci0: command tx timeout [ 942.311275][T20806] chnl_net:caif_netlink_parms(): no params data found [ 942.791297][T20806] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.828392][T20806] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.865225][T20806] bridge_slave_0: entered allmulticast mode [ 942.898631][T20806] bridge_slave_0: entered promiscuous mode [ 942.936300][T20806] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.984376][T20806] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.022381][T20806] bridge_slave_1: entered allmulticast mode [ 943.037410][T20870] FAULT_INJECTION: forcing a failure. [ 943.037410][T20870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.051967][T19594] Bluetooth: hci0: command tx timeout [ 943.059442][T20806] bridge_slave_1: entered promiscuous mode [ 943.156142][ T46] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 943.168666][T20806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.187726][T20870] CPU: 1 UID: 0 PID: 20870 Comm: syz.2.3426 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 943.198537][T20870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 943.208605][T20870] Call Trace: [ 943.211900][T20870] [ 943.214838][T20870] dump_stack_lvl+0x241/0x360 [ 943.219539][T20870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.224743][T20870] ? __pfx__printk+0x10/0x10 [ 943.229346][T20870] ? __pfx_lock_release+0x10/0x10 [ 943.234389][T20870] should_fail_ex+0x3b0/0x4e0 [ 943.239100][T20870] _copy_from_user+0x2f/0xe0 [ 943.243712][T20870] input_event_from_user+0x1e2/0x4a0 [ 943.249003][T20870] ? __pfx_input_event_from_user+0x10/0x10 [ 943.254821][T20870] ? input_inject_event+0xd6/0x340 [ 943.259946][T20870] evdev_write+0x470/0x790 [ 943.264373][T20870] ? __pfx_evdev_write+0x10/0x10 [ 943.269314][T20870] ? bpf_lsm_file_permission+0x9/0x10 [ 943.274681][T20870] ? security_file_permission+0x74/0x280 [ 943.280317][T20870] ? rw_verify_area+0x1c3/0x6f0 [ 943.285167][T20870] ? __pfx_evdev_write+0x10/0x10 [ 943.290105][T20870] vfs_write+0x29c/0xc90 [ 943.294353][T20870] ? kmem_cache_free+0x1a2/0x420 [ 943.299294][T20870] ? __pfx_vfs_write+0x10/0x10 [ 943.304051][T20870] ? __fget_files+0x29/0x470 [ 943.308649][T20870] ? __fget_files+0x3f3/0x470 [ 943.313319][T20870] ? __fget_files+0x29/0x470 [ 943.317911][T20870] ? fdget_pos+0x19a/0x320 [ 943.322325][T20870] ksys_write+0x183/0x2b0 [ 943.326652][T20870] ? __pfx_ksys_write+0x10/0x10 [ 943.331496][T20870] ? do_syscall_64+0x100/0x230 [ 943.336259][T20870] ? do_syscall_64+0xb6/0x230 [ 943.340934][T20870] do_syscall_64+0xf3/0x230 [ 943.345432][T20870] ? clear_bhb_loop+0x35/0x90 [ 943.350103][T20870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.355998][T20870] RIP: 0033:0x7f66d3b7dff9 [ 943.360410][T20870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.380015][T20870] RSP: 002b:00007f66d4a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 943.388428][T20870] RAX: ffffffffffffffda RBX: 00007f66d3d35f80 RCX: 00007f66d3b7dff9 [ 943.396399][T20870] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000004 [ 943.404372][T20870] RBP: 00007f66d4a20090 R08: 0000000000000000 R09: 0000000000000000 [ 943.412342][T20870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.420338][T20870] R13: 0000000000000000 R14: 00007f66d3d35f80 R15: 00007f66d3e5fa28 [ 943.428315][T20870] [ 943.450989][T20806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.555454][ T46] usb 5-1: config 0 has no interfaces? [ 943.563517][ T46] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 943.573139][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.591864][ T46] usb 5-1: config 0 descriptor?? [ 943.638536][T20806] team0: Port device team_slave_0 added [ 943.705619][T20806] team0: Port device team_slave_1 added [ 943.782330][ T5298] usb 5-1: USB disconnect, device number 65 [ 943.921147][T20806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.935615][T20806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.081474][T20806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.149543][T20806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.156535][T20806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.182486][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.189237][T20806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.214158][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'. [ 944.234266][T20893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.264644][T20893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.296724][T20893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.327720][T20893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.510835][T20806] hsr_slave_0: entered promiscuous mode [ 944.537134][T20806] hsr_slave_1: entered promiscuous mode [ 945.098028][T19594] Bluetooth: hci0: command tx timeout [ 945.850936][T20806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 945.890897][T20806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 945.916327][T20806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 945.937347][T20934] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3435'. [ 945.967375][T20806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 946.148310][ T5289] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 946.227280][T20806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.264177][T20806] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.301022][ T2547] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.308280][ T2547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.309581][ T5289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.339419][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.346535][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.346662][ T5289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 946.388307][ T5289] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 946.441987][ T5289] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 946.466459][T20806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.475939][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.519576][T20928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 946.530318][ T5289] hub 3-1:1.0: bad descriptor, ignoring hub [ 946.554553][ T5289] hub 3-1:1.0: probe with driver hub failed with error -5 [ 946.586252][ T5289] cdc_wdm 3-1:1.0: skipping garbage [ 946.602130][T20806] veth0_vlan: entered promiscuous mode [ 946.602838][ T5289] cdc_wdm 3-1:1.0: skipping garbage [ 946.644266][T20806] veth1_vlan: entered promiscuous mode [ 946.645957][ T5289] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 946.680942][ T5289] cdc_wdm 3-1:1.0: Unknown control protocol [ 946.729218][T20806] veth0_macvtap: entered promiscuous mode [ 946.753575][T20806] veth1_macvtap: entered promiscuous mode [ 946.830231][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.865810][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.907302][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.930995][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.947800][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.961419][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.985831][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.018132][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.050369][T20806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.080366][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.117631][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.144157][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.188607][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.212520][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.237615][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.257681][T20806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.285984][T20806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.323325][T20806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.350198][T20806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.369449][T20806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.393748][T20806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.412837][T20806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.483967][T20928] cdc_wdm 3-1:1.0: Error autopm - -16 [ 947.484123][T10735] usb 3-1: USB disconnect, device number 35 [ 947.622790][T10235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.651336][T10235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.667672][T10735] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 947.715835][T10235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.746564][T10235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.859004][T10735] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.870731][T10735] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 947.890778][T10735] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 947.918238][T10735] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 947.927315][T10735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.949403][T20931] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 947.958263][T10735] hub 3-1:1.0: bad descriptor, ignoring hub [ 947.984017][T20973] FAULT_INJECTION: forcing a failure. [ 947.984017][T20973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.999603][T20973] CPU: 1 UID: 0 PID: 20973 Comm: syz.3.3412 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 948.010390][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 948.020444][T20973] Call Trace: [ 948.023721][T20973] [ 948.026643][T20973] dump_stack_lvl+0x241/0x360 [ 948.031336][T20973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.036533][T20973] ? __pfx__printk+0x10/0x10 [ 948.041122][T20973] ? __pfx_lock_release+0x10/0x10 [ 948.046148][T20973] should_fail_ex+0x3b0/0x4e0 [ 948.050839][T20973] _copy_from_user+0x2f/0xe0 [ 948.055451][T20973] copy_msghdr_from_user+0xae/0x680 [ 948.060661][T20973] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 948.066483][T20973] __sys_recvmsg+0x24c/0x3d0 [ 948.071071][T20973] ? __pfx___sys_recvmsg+0x10/0x10 [ 948.076182][T20973] ? arch_do_signal_or_restart+0x316/0x860 [ 948.081992][T20973] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 948.088316][T20973] ? do_syscall_64+0x100/0x230 [ 948.093067][T20973] ? do_syscall_64+0xb6/0x230 [ 948.097730][T20973] do_syscall_64+0xf3/0x230 [ 948.102225][T20973] ? clear_bhb_loop+0x35/0x90 [ 948.106889][T20973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.112782][T20973] RIP: 0033:0x7faeb677dff9 [ 948.117184][T20973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.136785][T20973] RSP: 002b:00007faeb74ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 948.145204][T20973] RAX: ffffffffffffffda RBX: 00007faeb6936058 RCX: 00007faeb677dff9 [ 948.153170][T20973] RDX: 0000000040000002 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 948.161126][T20973] RBP: 00007faeb74ae090 R08: 0000000000000000 R09: 0000000000000000 [ 948.169096][T20973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.177073][T20973] R13: 0000000000000000 R14: 00007faeb6936058 R15: 00007faeb6a5fa28 [ 948.185041][T20973] [ 948.197318][T10735] hub 3-1:1.0: probe with driver hub failed with error -5 [ 948.219725][T10735] cdc_wdm 3-1:1.0: skipping garbage [ 948.224981][T10735] cdc_wdm 3-1:1.0: skipping garbage [ 948.236441][T10735] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 948.242601][T10735] cdc_wdm 3-1:1.0: Unknown control protocol [ 948.250266][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.257050][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.263313][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.269907][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.276161][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.282750][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.289039][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.295639][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.306368][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.312971][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.319731][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.326322][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.332591][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.339175][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.345535][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.352127][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.358436][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.365022][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.371313][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 948.377926][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 948.977709][ T5281] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 949.060005][T20992] wireguard0: entered promiscuous mode [ 949.068120][T20992] wireguard0: entered allmulticast mode [ 949.167673][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 949.177307][ T5281] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 949.187094][ T5281] usb 5-1: can't read configurations, error -22 [ 949.317781][ T5281] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 949.401664][ T5283] usb 3-1: USB disconnect, device number 36 [ 949.511942][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 949.574046][ T5281] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 949.593083][ T5281] usb 5-1: can't read configurations, error -22 [ 949.610748][ T5281] usb usb5-port1: attempt power cycle [ 949.619582][T21004] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 949.818689][T21012] program syz.2.3449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.987674][ T5281] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 950.028241][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 950.078464][ T5281] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 950.097823][ T5281] usb 5-1: can't read configurations, error -22 [ 950.237684][ T5281] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 950.268469][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 950.279108][ T5281] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 950.302888][ T5281] usb 5-1: can't read configurations, error -22 [ 950.309809][ T5281] usb usb5-port1: unable to enumerate USB device [ 951.463104][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 951.480743][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 951.489638][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 951.508886][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 951.540670][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 951.567256][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 952.476244][T21067] FAULT_INJECTION: forcing a failure. [ 952.476244][T21067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.514218][T21067] CPU: 1 UID: 0 PID: 21067 Comm: syz.3.3455 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 952.525034][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 952.535094][T21067] Call Trace: [ 952.538375][T21067] [ 952.541297][T21067] dump_stack_lvl+0x241/0x360 [ 952.545964][T21067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 952.551156][T21067] ? __pfx__printk+0x10/0x10 [ 952.555740][T21067] ? snprintf+0xda/0x120 [ 952.559974][T21067] should_fail_ex+0x3b0/0x4e0 [ 952.564646][T21067] _copy_to_user+0x2f/0xb0 [ 952.569053][T21067] simple_read_from_buffer+0xca/0x150 [ 952.574420][T21067] proc_fail_nth_read+0x1e9/0x250 [ 952.579442][T21067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.584990][T21067] ? rw_verify_area+0x55e/0x6f0 [ 952.589840][T21067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.595395][T21067] vfs_read+0x201/0xbc0 [ 952.599562][T21067] ? __pfx_lock_release+0x10/0x10 [ 952.604586][T21067] ? __pfx_vfs_read+0x10/0x10 [ 952.609283][T21067] ? __fget_files+0x3f3/0x470 [ 952.613985][T21067] ? fdget_pos+0x24e/0x320 [ 952.618411][T21067] ksys_read+0x183/0x2b0 [ 952.622668][T21067] ? __pfx_ksys_read+0x10/0x10 [ 952.627437][T21067] ? do_syscall_64+0x100/0x230 [ 952.632207][T21067] ? do_syscall_64+0xb6/0x230 [ 952.636886][T21067] do_syscall_64+0xf3/0x230 [ 952.641392][T21067] ? clear_bhb_loop+0x35/0x90 [ 952.646075][T21067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.651979][T21067] RIP: 0033:0x7faeb677ca3c [ 952.656399][T21067] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 952.676022][T21067] RSP: 002b:00007faeb74cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.684466][T21067] RAX: ffffffffffffffda RBX: 00007faeb6935f80 RCX: 00007faeb677ca3c [ 952.692443][T21067] RDX: 000000000000000f RSI: 00007faeb74cf0a0 RDI: 0000000000000004 [ 952.700414][T21067] RBP: 00007faeb74cf090 R08: 0000000000000000 R09: 0000000000000000 [ 952.708401][T21067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.716389][T21067] R13: 0000000000000000 R14: 00007faeb6935f80 R15: 00007faeb6a5fa28 [ 952.724368][T21067] [ 953.475680][T21095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.745225][T19594] Bluetooth: hci3: command tx timeout [ 953.764981][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.783329][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.796516][ T2547] bond0 (unregistering): Released all slaves [ 953.889062][T21099] netlink: 'syz.3.3460': attribute type 1 has an invalid length. [ 953.977702][T21100] team0: Port device team_slave_1 removed [ 954.358404][ T5289] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 954.471909][T21049] chnl_net:caif_netlink_parms(): no params data found [ 954.477448][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 954.489059][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 954.533851][ T2547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.545598][ T5289] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 954.562503][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.577655][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.596006][ T5289] usb 4-1: Product: syz [ 954.603312][ T5289] usb 4-1: Manufacturer: syz [ 954.613882][ T2547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.622868][ T5289] usb 4-1: SerialNumber: syz [ 954.641843][ T5289] usb 4-1: config 0 descriptor?? [ 954.647202][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.703295][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 954.715149][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 954.722225][ T5282] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 954.731213][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 954.735317][ T2547] veth1_macvtap: left promiscuous mode [ 954.747796][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 954.755481][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 954.755594][ T2547] veth0_macvtap: left promiscuous mode [ 954.769253][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 954.878887][ T5289] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 954.899282][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 954.907737][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 954.918106][ T5289] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 954.924288][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 954.945513][ T5289] usb 4-1: USB disconnect, device number 36 [ 954.946648][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 954.965480][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 954.977961][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 954.985417][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 954.996177][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 955.015127][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 955.055241][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 955.083063][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 955.090791][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 955.110150][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 955.132474][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 955.143950][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 955.177455][ T5282] usb 5-1: string descriptor 0 read error: -22 [ 955.199651][ T5282] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 955.209864][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.235371][ T5282] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 955.451161][T21111] xt_TPROXY: Can be used only with -p tcp or -p udp [ 955.817601][T19594] Bluetooth: hci3: command tx timeout [ 956.151562][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 956.246520][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 956.409300][T21140] binder: 21139:21140 ioctl 4018620d 0 returned -22 [ 956.738337][T10735] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 956.860779][T19594] Bluetooth: hci2: command tx timeout [ 956.904825][T10735] usb 4-1: Using ep0 maxpacket: 8 [ 956.912968][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.924911][T10735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.947630][T10735] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 956.956793][T10735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.967450][T10735] usb 4-1: config 0 descriptor?? [ 956.985303][ T8] usb 5-1: USB disconnect, device number 70 [ 957.002236][T21145] lo: entered allmulticast mode [ 957.190661][T21049] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.215471][T21049] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.224734][T21049] bridge_slave_0: entered allmulticast mode [ 957.232686][T21049] bridge_slave_0: entered promiscuous mode [ 957.253114][T21049] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.262477][T21049] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.270237][T21049] bridge_slave_1: entered allmulticast mode [ 957.299292][T21155] program syz.2.3475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 957.308666][T21049] bridge_slave_1: entered promiscuous mode [ 957.369549][T21049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.395996][T21049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.490837][T21049] team0: Port device team_slave_0 added [ 957.516615][T21049] team0: Port device team_slave_1 added [ 957.553622][T21049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.560727][T21049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.594404][T21049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.607042][T21147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.640853][T21147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.655006][T10735] usbhid 4-1:0.0: can't add hid device: -71 [ 957.663163][T10735] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 957.682415][T10735] usb 4-1: USB disconnect, device number 37 [ 957.764673][ T2547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.792342][T21049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.799562][T21049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.850516][T21049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.907590][T19594] Bluetooth: hci3: command tx timeout [ 957.926269][ T2547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.962794][T21118] chnl_net:caif_netlink_parms(): no params data found [ 958.020993][ T2547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.095528][ T2547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.151467][T21049] hsr_slave_0: entered promiscuous mode [ 958.170665][T21049] hsr_slave_1: entered promiscuous mode [ 958.187008][T21049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.208695][T21049] Cannot create hsr debugfs directory [ 958.484176][T21118] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.501624][T21118] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.511193][T21118] bridge_slave_0: entered allmulticast mode [ 958.524908][T21118] bridge_slave_0: entered promiscuous mode [ 958.624000][T21118] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.650601][T21118] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.663816][T21118] bridge_slave_1: entered allmulticast mode [ 958.674855][T21118] bridge_slave_1: entered promiscuous mode [ 958.822105][T21118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.865231][ T2547] bridge_slave_1: left allmulticast mode [ 958.882873][ T2547] bridge_slave_1: left promiscuous mode [ 958.895725][ T2547] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.912258][ T2547] bridge_slave_0: left allmulticast mode [ 958.919460][ T2547] bridge_slave_0: left promiscuous mode [ 958.925484][ T2547] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.948264][T19594] Bluetooth: hci2: command tx timeout [ 959.128126][T10735] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 959.348238][T10735] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 959.359663][T10735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.369385][T10735] usb 4-1: Product: syz [ 959.381757][T10735] usb 4-1: Manufacturer: syz [ 959.387451][T10735] usb 4-1: SerialNumber: syz [ 959.428599][T10735] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 959.502747][ T5282] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 959.548593][T21194] FAULT_INJECTION: forcing a failure. [ 959.548593][T21194] name failslab, interval 1, probability 0, space 0, times 0 [ 959.567954][T21194] CPU: 1 UID: 0 PID: 21194 Comm: syz.4.3481 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 959.578768][T21194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 959.588844][T21194] Call Trace: [ 959.592136][T21194] [ 959.595079][T21194] dump_stack_lvl+0x241/0x360 [ 959.599785][T21194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.604997][T21194] ? __pfx__printk+0x10/0x10 [ 959.609618][T21194] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 959.615624][T21194] ? __pfx___might_resched+0x10/0x10 [ 959.620934][T21194] should_fail_ex+0x3b0/0x4e0 [ 959.625637][T21194] should_failslab+0xac/0x100 [ 959.630333][T21194] ? __alloc_skb+0x1c3/0x440 [ 959.634935][T21194] kmem_cache_alloc_node_noprof+0x71/0x320 [ 959.640770][T21194] __alloc_skb+0x1c3/0x440 [ 959.645208][T21194] ? __pfx___alloc_skb+0x10/0x10 [ 959.650181][T21194] ? netlink_autobind+0xd6/0x2f0 [ 959.655592][T21194] ? netlink_autobind+0x2b0/0x2f0 [ 959.660651][T21194] netlink_sendmsg+0x638/0xcb0 [ 959.665455][T21194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.670758][T21194] ? aa_sock_msg_perm+0x91/0x160 [ 959.675723][T21194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.681027][T21194] __sock_sendmsg+0x221/0x270 [ 959.685738][T21194] ____sys_sendmsg+0x52a/0x7e0 [ 959.690540][T21194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.695871][T21194] __sys_sendmsg+0x292/0x380 [ 959.700492][T21194] ? __pfx___sys_sendmsg+0x10/0x10 [ 959.705632][T21194] ? __pfx_vfs_write+0x10/0x10 [ 959.710408][T21194] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 959.716732][T21194] ? do_syscall_64+0x100/0x230 [ 959.721508][T21194] ? do_syscall_64+0xb6/0x230 [ 959.726358][T21194] do_syscall_64+0xf3/0x230 [ 959.730871][T21194] ? clear_bhb_loop+0x35/0x90 [ 959.735553][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.741449][T21194] RIP: 0033:0x7fe092f7dff9 [ 959.745858][T21194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.765455][T21194] RSP: 002b:00007fe093e64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.773872][T21194] RAX: ffffffffffffffda RBX: 00007fe093135f80 RCX: 00007fe092f7dff9 [ 959.781848][T21194] RDX: 0000000000008000 RSI: 0000000020000140 RDI: 0000000000000003 [ 959.789816][T21194] RBP: 00007fe093e64090 R08: 0000000000000000 R09: 0000000000000000 [ 959.797796][T21194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.805756][T21194] R13: 0000000000000000 R14: 00007fe093135f80 R15: 00007fe09325fa28 [ 959.813725][T21194] [ 959.824053][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.881821][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.008765][T19594] Bluetooth: hci3: command tx timeout [ 960.016984][ T5283] usb 4-1: USB disconnect, device number 38 [ 960.182450][ T2547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.197907][ T2547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.213219][ T2547] bond0 (unregistering): Released all slaves [ 960.227446][T21118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.357251][T21118] team0: Port device team_slave_0 added [ 960.373072][T21118] team0: Port device team_slave_1 added [ 960.389614][ T46] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 960.499251][T21118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.506222][T21118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.534936][T21118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.570364][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 960.580713][ T46] usb 5-1: not running at top speed; connect to a high speed hub [ 960.601292][ T46] usb 5-1: config 115 has an invalid interface number: 142 but max is 2 [ 960.619277][ T5282] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 960.634085][ T46] usb 5-1: config 115 has an invalid interface number: 164 but max is 2 [ 960.634097][ T2547] hsr_slave_0: left promiscuous mode [ 960.650350][ T2547] hsr_slave_1: left promiscuous mode [ 960.650600][ T5282] ath9k_htc: Failed to initialize the device [ 960.664583][ T2547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.687333][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.687543][ T46] usb 5-1: config 115 has an invalid interface number: 148 but max is 2 [ 960.708583][ T5283] usb 4-1: ath9k_htc: USB layer deinitialized [ 960.723877][ T2547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.737635][ T46] usb 5-1: config 115 has no interface number 0 [ 960.743928][ T46] usb 5-1: config 115 has no interface number 1 [ 960.756408][ T2547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.762369][ T46] usb 5-1: config 115 has no interface number 2 [ 960.781319][ T46] usb 5-1: config 115 interface 142 has no altsetting 0 [ 960.802317][ T46] usb 5-1: config 115 interface 164 has no altsetting 0 [ 960.817519][ T46] usb 5-1: config 115 interface 148 has no altsetting 0 [ 960.825868][ T2547] veth1_macvtap: left promiscuous mode [ 960.844625][ T2547] veth0_macvtap: left promiscuous mode [ 960.856308][ T2547] veth1_vlan: left promiscuous mode [ 960.865400][ T2547] veth0_vlan: left promiscuous mode [ 960.875216][ T46] usb 5-1: string descriptor 0 read error: -71 [ 960.887330][ T46] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=1a.6a [ 960.917793][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.944825][ T46] usb 5-1: can't set config #115, error -71 [ 960.969495][ T46] usb 5-1: USB disconnect, device number 71 [ 961.020761][T19594] Bluetooth: hci2: command tx timeout [ 961.824903][ T2547] team0 (unregistering): Port device team_slave_1 removed [ 961.875937][ T2547] team0 (unregistering): Port device team_slave_0 removed [ 961.961332][ T5282] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 962.138890][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 962.168061][ T5282] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 962.177153][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.196805][ T5282] usb 3-1: Product: syz [ 962.201738][ T5282] usb 3-1: Manufacturer: syz [ 962.206361][ T5282] usb 3-1: SerialNumber: syz [ 962.214872][ T5282] usb 3-1: config 0 descriptor?? [ 962.235450][ T5282] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 962.460453][T21118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.468917][T21118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.496193][T21118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.583985][T21231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 962.591389][T21231] IPv6: NLM_F_CREATE should be set when creating new route [ 962.598679][T21231] IPv6: NLM_F_CREATE should be set when creating new route [ 962.796624][T21118] hsr_slave_0: entered promiscuous mode [ 962.826091][T21118] hsr_slave_1: entered promiscuous mode [ 962.833723][T21118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.851872][T21118] Cannot create hsr debugfs directory [ 962.989042][ T5283] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 963.097926][T19594] Bluetooth: hci2: command tx timeout [ 963.148712][ T5283] usb 5-1: config 0 has no interfaces? [ 963.160287][ T5283] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 963.187540][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.214177][ T5283] usb 5-1: Product: syz [ 963.224413][ T5283] usb 5-1: Manufacturer: syz [ 963.263447][ T5283] usb 5-1: SerialNumber: syz [ 963.283148][ T5283] usb 5-1: config 0 descriptor?? [ 963.440428][T21049] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 963.505320][T21118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.585645][T21049] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 963.611698][T21266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.646308][T21266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.659445][T21118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.676611][T21049] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 963.690749][T21049] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 963.759578][T21118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.863219][T21118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.954925][T21049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.034167][T21049] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.095793][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.102975][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.157421][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.164607][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.189529][T21118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 964.211471][T21118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 964.238549][T21118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 964.254614][T21118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 964.383303][T21049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.473861][T21118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.506969][T21049] veth0_vlan: entered promiscuous mode [ 964.524430][T21118] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.543809][T21049] veth1_vlan: entered promiscuous mode [ 964.574780][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.581952][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.604090][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.611284][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.634105][T21049] veth0_macvtap: entered promiscuous mode [ 964.657437][T21049] veth1_macvtap: entered promiscuous mode [ 964.680877][ T8] usb 5-1: USB disconnect, device number 72 [ 964.760645][T21049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.798559][T21049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.817874][T21049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.847606][T21049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.875494][T21049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.895222][T21049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.925474][T21049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.979254][T21049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.013561][T21049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.057720][T21049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.084737][T21049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.106665][T21049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.131436][T21300] sctp: [Deprecated]: syz.4.3496 (pid 21300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 965.131436][T21300] Use struct sctp_sack_info instead [ 965.137694][T21049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.167329][T21049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.203352][T21118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.265833][T21118] veth0_vlan: entered promiscuous mode [ 965.276942][T21049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.288890][T21049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.305756][T21049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.314695][T21049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.330896][T21118] veth1_vlan: entered promiscuous mode [ 965.413546][T21118] veth0_macvtap: entered promiscuous mode [ 965.431088][T21118] veth1_macvtap: entered promiscuous mode [ 965.499115][ T5282] gspca_sonixj: reg_r err -71 [ 965.503949][ T5282] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 965.527058][ T5282] usb 3-1: USB disconnect, device number 37 [ 965.552259][T21118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.582373][T21118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.593719][T21118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.608392][T21118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.620516][T21118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.631142][ T8] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 965.639570][T21118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.651387][T21118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.662527][T21118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.680605][T21118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.703163][T21118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.713568][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.725857][T21118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.733829][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.742958][T21118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.743262][T21118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.743282][T21118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.743299][T21118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.743318][T21118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.743332][T21118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.744820][T21118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.831918][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 965.839782][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 965.850592][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 965.861728][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 965.873280][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 965.884685][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 965.892560][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 965.893774][T21118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.913069][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 965.925605][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 965.943589][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 965.953860][T21118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.955347][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 965.968370][T21118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.971466][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 965.990287][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 966.000785][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 966.010061][T21118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.017894][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 966.057133][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.065230][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.180430][ T8] usb 5-1: string descriptor 0 read error: -22 [ 966.186697][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 966.225850][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.245206][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.266324][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.281598][ T8] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 966.364408][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.377051][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3500'. [ 966.387133][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.487918][ T5282] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 966.505710][T21336] delete_channel: no stack [ 966.638488][T21307] xt_TPROXY: Can be used only with -p tcp or -p udp [ 966.682472][ T5281] usb 5-1: USB disconnect, device number 73 [ 966.708808][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 966.720094][ T5282] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 966.820999][ T5282] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 966.832248][ T5282] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 966.846141][ T5282] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.870750][ T5282] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 966.909235][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.197735][ T5282] usb 3-1: GET_CAPABILITIES returned 0 [ 967.203361][ T5282] usbtmc 3-1:16.0: can't read capabilities [ 967.335417][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3504'. [ 967.393835][ T5281] usb 3-1: USB disconnect, device number 38 [ 967.498675][ T5282] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 967.667652][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 967.674799][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 967.682583][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 967.695409][ T5282] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.713868][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.725695][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 967.740605][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 967.748488][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 967.760242][ T5282] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.775389][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.787148][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 967.801032][ T5282] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 967.808530][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 967.820125][ T5282] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 967.832130][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 967.843315][ T5281] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 967.851100][ T5282] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 967.867248][ T5282] usb 5-1: string descriptor 0 read error: -22 [ 967.873603][ T5282] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 967.882701][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.904464][ T5282] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 968.032013][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.043046][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.052878][ T5281] usb 4-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 968.062399][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.073557][ T5281] usb 4-1: config 0 descriptor?? [ 968.204751][ T5289] usb 5-1: USB disconnect, device number 74 [ 968.482657][T21379] [ 968.485020][T21379] ===================================================== [ 968.491960][T21379] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 968.499423][T21379] 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 Not tainted [ 968.500911][ T5281] wacom 0003:056A:00BC.003E: unknown main item tag 0x0 [ 968.506519][T21379] ----------------------------------------------------- [ 968.506530][T21379] syz.2.3511/21379 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 968.506551][T21379] ffffffff8e60a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0x108/0x390 [ 968.517365][ T5281] wacom 0003:056A:00BC.003E: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 968.520325][T21379] [ 968.520325][T21379] and this task is already holding: [ 968.520337][T21379] ffff88807ff5cda0 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 968.561879][T21379] which would create a new lock dependency: [ 968.567755][T21379] (&f_owner->lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 968.575325][T21379] [ 968.575325][T21379] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 968.584769][T21379] (&dev->event_lock#2){..-.}-{2:2} [ 968.584797][T21379] [ 968.584797][T21379] ... which became SOFTIRQ-irq-safe at: [ 968.597660][T21379] lock_acquire+0x1ed/0x550 [ 968.602250][T21379] _raw_spin_lock_irqsave+0xd5/0x120 [ 968.607613][T21379] input_inject_event+0xc5/0x340 [ 968.612630][T21379] led_trigger_event+0x138/0x210 [ 968.617639][T21379] kbd_bh+0x1b5/0x290 [ 968.621698][T21379] tasklet_action_common+0x321/0x4d0 [ 968.627060][T21379] handle_softirqs+0x2c5/0x980 [ 968.631910][T21379] run_ksoftirqd+0xca/0x130 [ 968.636483][T21379] smpboot_thread_fn+0x544/0xa30 [ 968.641497][T21379] kthread+0x2f0/0x390 [ 968.645633][T21379] ret_from_fork+0x4b/0x80 [ 968.650122][T21379] ret_from_fork_asm+0x1a/0x30 [ 968.654974][T21379] [ 968.654974][T21379] to a SOFTIRQ-irq-unsafe lock: [ 968.661971][T21379] (tasklist_lock){.+.+}-{2:2} [ 968.661992][T21379] [ 968.661992][T21379] ... which became SOFTIRQ-irq-unsafe at: [ 968.674581][T21379] ... [ 968.674588][T21379] lock_acquire+0x1ed/0x550 [ 968.681729][T21379] _raw_read_lock+0x36/0x50 [ 968.686306][T21379] __do_wait+0x12d/0x850 [ 968.690623][T21379] do_wait+0x1e9/0x560 [ 968.694763][T21379] kernel_wait+0xe9/0x240 [ 968.699159][T21379] call_usermodehelper_exec_work+0xbd/0x230 [ 968.705119][T21379] process_scheduled_works+0xa63/0x1850 [ 968.710745][T21379] worker_thread+0x870/0xd30 [ 968.715409][T21379] kthread+0x2f0/0x390 [ 968.719551][T21379] ret_from_fork+0x4b/0x80 [ 968.724042][T21379] ret_from_fork_asm+0x1a/0x30 [ 968.728878][T21379] [ 968.728878][T21379] other info that might help us debug this: [ 968.728878][T21379] [ 968.739092][T21379] Chain exists of: [ 968.739092][T21379] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 968.739092][T21379] [ 968.752118][T21379] Possible interrupt unsafe locking scenario: [ 968.752118][T21379] [ 968.760421][T21379] CPU0 CPU1 [ 968.765767][T21379] ---- ---- [ 968.771110][T21379] lock(tasklist_lock); [ 968.775334][T21379] local_irq_disable(); [ 968.782069][T21379] lock(&dev->event_lock#2); [ 968.789254][T21379] lock(&f_owner->lock); [ 968.796085][T21379] [ 968.799517][T21379] lock(&dev->event_lock#2); [ 968.804354][T21379] [ 968.804354][T21379] *** DEADLOCK *** [ 968.804354][T21379] [ 968.812495][T21379] 5 locks held by syz.2.3511/21379: [ 968.817681][T21379] #0: ffffffff8eaa3f70 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x3b3/0x1820 [ 968.826821][T21379] #1: ffff8880283b0858 (&ctx->flc_lock){+.+.}-{2:2}, at: __break_lease+0x3c0/0x1820 [ 968.836296][T21379] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 968.845327][T21379] #3: ffff88802339e600 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 968.854442][T21379] #4: ffff88807ff5cda0 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 968.863475][T21379] [ 968.863475][T21379] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 968.873857][T21379] -> (&dev->event_lock#2){..-.}-{2:2} { [ 968.879578][T21379] IN-SOFTIRQ-W at: [ 968.883712][T21379] lock_acquire+0x1ed/0x550 [ 968.890290][T21379] _raw_spin_lock_irqsave+0xd5/0x120 [ 968.897569][T21379] input_inject_event+0xc5/0x340 [ 968.904510][T21379] led_trigger_event+0x138/0x210 [ 968.911449][T21379] kbd_bh+0x1b5/0x290 [ 968.917431][T21379] tasklet_action_common+0x321/0x4d0 [ 968.924707][T21379] handle_softirqs+0x2c5/0x980 [ 968.931456][T21379] run_ksoftirqd+0xca/0x130 [ 968.937956][T21379] smpboot_thread_fn+0x544/0xa30 [ 968.944891][T21379] kthread+0x2f0/0x390 [ 968.950940][T21379] ret_from_fork+0x4b/0x80 [ 968.957337][T21379] ret_from_fork_asm+0x1a/0x30 [ 968.964083][T21379] INITIAL USE at: [ 968.968133][T21379] lock_acquire+0x1ed/0x550 [ 968.974536][T21379] _raw_spin_lock_irqsave+0xd5/0x120 [ 968.981732][T21379] input_inject_event+0xc5/0x340 [ 968.988573][T21379] kbd_led_trigger_activate+0xb8/0x100 [ 968.995966][T21379] led_trigger_set+0x582/0x9c0 [ 969.002641][T21379] led_trigger_set_default+0x229/0x260 [ 969.010002][T21379] led_classdev_register_ext+0x6e6/0x8a0 [ 969.017542][T21379] input_leds_connect+0x489/0x630 [ 969.024489][T21379] input_register_device+0xd3b/0x1110 [ 969.031760][T21379] atkbd_connect+0x752/0xa00 [ 969.038251][T21379] serio_driver_probe+0x7f/0xa0 [ 969.045005][T21379] really_probe+0x2b8/0xad0 [ 969.051402][T21379] __driver_probe_device+0x1a2/0x390 [ 969.058578][T21379] driver_probe_device+0x50/0x430 [ 969.065491][T21379] __driver_attach+0x45f/0x710 [ 969.072145][T21379] bus_for_each_dev+0x239/0x2b0 [ 969.078908][T21379] serio_handle_event+0x1c7/0x920 [ 969.085821][T21379] process_scheduled_works+0xa63/0x1850 [ 969.093263][T21379] worker_thread+0x870/0xd30 [ 969.099754][T21379] kthread+0x2f0/0x390 [ 969.105734][T21379] ret_from_fork+0x4b/0x80 [ 969.112047][T21379] ret_from_fork_asm+0x1a/0x30 [ 969.118706][T21379] } [ 969.121365][T21379] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 969.130543][T21379] -> (&new->fa_lock){....}-{2:2} { [ 969.135734][T21379] INITIAL USE at: [ 969.139698][T21379] lock_acquire+0x1ed/0x550 [ 969.145924][T21379] _raw_write_lock_irq+0xd3/0x120 [ 969.152691][T21379] fasync_remove_entry+0xff/0x1d0 [ 969.159530][T21379] sock_fasync+0x87/0x100 [ 969.165578][T21379] __fput+0x71b/0x880 [ 969.171283][T21379] task_work_run+0x24f/0x310 [ 969.177595][T21379] syscall_exit_to_user_mode+0x168/0x370 [ 969.184980][T21379] do_syscall_64+0x100/0x230 [ 969.191290][T21379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.198919][T21379] INITIAL READ USE at: [ 969.203326][T21379] lock_acquire+0x1ed/0x550 [ 969.209995][T21379] _raw_read_lock_irqsave+0xdd/0x130 [ 969.217445][T21379] kill_fasync+0x199/0x4f0 [ 969.224034][T21379] sock_wake_async+0x147/0x170 [ 969.230957][T21379] sk_wake_async+0x183/0x280 [ 969.237794][T21379] unix_release_sock+0x727/0xd00 [ 969.244910][T21379] unix_release+0x91/0xc0 [ 969.251399][T21379] sock_close+0xbc/0x240 [ 969.257806][T21379] __fput+0x23f/0x880 [ 969.264036][T21379] task_work_run+0x24f/0x310 [ 969.270777][T21379] get_signal+0x15e8/0x1740 [ 969.277431][T21379] arch_do_signal_or_restart+0x96/0x860 [ 969.285135][T21379] syscall_exit_to_user_mode+0xc9/0x370 [ 969.292840][T21379] do_syscall_64+0x100/0x230 [ 969.299588][T21379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.307651][T21379] } [ 969.310219][T21379] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 969.318978][T21379] ... acquired at: [ 969.322844][T21379] lock_acquire+0x1ed/0x550 [ 969.327509][T21379] _raw_read_lock_irqsave+0xdd/0x130 [ 969.332957][T21379] kill_fasync+0x199/0x4f0 [ 969.337537][T21379] mousedev_notify_readers+0x719/0xc80 [ 969.343168][T21379] mousedev_event+0x5ca/0x1390 [ 969.348091][T21379] input_handler_events_default+0x107/0x1c0 [ 969.354149][T21379] input_pass_values+0x286/0x860 [ 969.359249][T21379] input_event_dispose+0x30f/0x600 [ 969.364516][T21379] input_handle_event+0xa71/0xbe0 [ 969.369694][T21379] input_inject_event+0x22f/0x340 [ 969.374874][T21379] evdev_write+0x5fd/0x790 [ 969.379442][T21379] vfs_write+0x29c/0xc90 [ 969.383839][T21379] ksys_write+0x183/0x2b0 [ 969.388323][T21379] do_syscall_64+0xf3/0x230 [ 969.392986][T21379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.399047][T21379] [ 969.401363][T21379] -> (&f_owner->lock){....}-{2:2} { [ 969.406574][T21379] INITIAL USE at: [ 969.410448][T21379] lock_acquire+0x1ed/0x550 [ 969.416503][T21379] _raw_write_lock_irq+0xd3/0x120 [ 969.423077][T21379] __f_setown+0x6b/0x380 [ 969.428865][T21379] f_setown+0x243/0x310 [ 969.434564][T21379] do_fcntl+0x115/0x1a60 [ 969.440355][T21379] __se_sys_fcntl+0xd2/0x1e0 [ 969.446491][T21379] do_syscall_64+0xf3/0x230 [ 969.452539][T21379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.460330][T21379] INITIAL READ USE at: [ 969.464641][T21379] lock_acquire+0x1ed/0x550 [ 969.471128][T21379] _raw_read_lock_irqsave+0xdd/0x130 [ 969.478395][T21379] send_sigio+0x37/0x390 [ 969.484615][T21379] kill_fasync+0x256/0x4f0 [ 969.491017][T21379] sock_wake_async+0x147/0x170 [ 969.497763][T21379] sk_wake_async+0x183/0x280 [ 969.504343][T21379] unix_release_sock+0x727/0xd00 [ 969.511267][T21379] unix_release+0x91/0xc0 [ 969.517580][T21379] sock_close+0xbc/0x240 [ 969.523808][T21379] __fput+0x23f/0x880 [ 969.529772][T21379] task_work_run+0x24f/0x310 [ 969.536340][T21379] get_signal+0x15e8/0x1740 [ 969.542824][T21379] arch_do_signal_or_restart+0x96/0x860 [ 969.550354][T21379] syscall_exit_to_user_mode+0xc9/0x370 [ 969.557886][T21379] do_syscall_64+0x100/0x230 [ 969.564457][T21379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.572352][T21379] } [ 969.574830][T21379] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 969.583661][T21379] ... acquired at: [ 969.587446][T21379] lock_acquire+0x1ed/0x550 [ 969.592117][T21379] _raw_read_lock_irqsave+0xdd/0x130 [ 969.597568][T21379] send_sigio+0x37/0x390 [ 969.601976][T21379] kill_fasync+0x256/0x4f0 [ 969.606553][T21379] sock_wake_async+0x147/0x170 [ 969.611477][T21379] sk_wake_async+0x183/0x280 [ 969.616232][T21379] unix_release_sock+0x727/0xd00 [ 969.621331][T21379] unix_release+0x91/0xc0 [ 969.625829][T21379] sock_close+0xbc/0x240 [ 969.630227][T21379] __fput+0x23f/0x880 [ 969.634367][T21379] task_work_run+0x24f/0x310 [ 969.639110][T21379] get_signal+0x15e8/0x1740 [ 969.643773][T21379] arch_do_signal_or_restart+0x96/0x860 [ 969.649484][T21379] syscall_exit_to_user_mode+0xc9/0x370 [ 969.655186][T21379] do_syscall_64+0x100/0x230 [ 969.659930][T21379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.665998][T21379] [ 969.668305][T21379] [ 969.668305][T21379] the dependencies between the lock to be acquired [ 969.668313][T21379] and SOFTIRQ-irq-unsafe lock: [ 969.681787][T21379] -> (tasklist_lock){.+.+}-{2:2} { [ 969.686895][T21379] HARDIRQ-ON-R at: [ 969.690857][T21379] lock_acquire+0x1ed/0x550 [ 969.696995][T21379] _raw_read_lock+0x36/0x50 [ 969.703132][T21379] __do_wait+0x12d/0x850 [ 969.709007][T21379] do_wait+0x1e9/0x560 [ 969.714729][T21379] kernel_wait+0xe9/0x240 [ 969.720709][T21379] call_usermodehelper_exec_work+0xbd/0x230 [ 969.728253][T21379] process_scheduled_works+0xa63/0x1850 [ 969.735445][T21379] worker_thread+0x870/0xd30 [ 969.741675][T21379] kthread+0x2f0/0x390 [ 969.747378][T21379] ret_from_fork+0x4b/0x80 [ 969.753440][T21379] ret_from_fork_asm+0x1a/0x30 [ 969.759846][T21379] SOFTIRQ-ON-R at: [ 969.763808][T21379] lock_acquire+0x1ed/0x550 [ 969.769961][T21379] _raw_read_lock+0x36/0x50 [ 969.776102][T21379] __do_wait+0x12d/0x850 [ 969.781973][T21379] do_wait+0x1e9/0x560 [ 969.787693][T21379] kernel_wait+0xe9/0x240 [ 969.793681][T21379] call_usermodehelper_exec_work+0xbd/0x230 [ 969.801219][T21379] process_scheduled_works+0xa63/0x1850 [ 969.808409][T21379] worker_thread+0x870/0xd30 [ 969.814651][T21379] kthread+0x2f0/0x390 [ 969.820364][T21379] ret_from_fork+0x4b/0x80 [ 969.826435][T21379] ret_from_fork_asm+0x1a/0x30 [ 969.832852][T21379] INITIAL USE at: [ 969.836727][T21379] lock_acquire+0x1ed/0x550 [ 969.842798][T21379] _raw_write_lock_irq+0xd3/0x120 [ 969.849384][T21379] copy_process+0x2267/0x3d50 [ 969.855618][T21379] kernel_clone+0x226/0x8f0 [ 969.861670][T21379] user_mode_thread+0x132/0x1a0 [ 969.868075][T21379] rest_init+0x23/0x300 [ 969.873787][T21379] start_kernel+0x47f/0x500 [ 969.879844][T21379] x86_64_start_reservations+0x2a/0x30 [ 969.886848][T21379] x86_64_start_kernel+0x9f/0xa0 [ 969.893334][T21379] common_startup_64+0x13e/0x147 [ 969.899844][T21379] INITIAL READ USE at: [ 969.904152][T21379] lock_acquire+0x1ed/0x550 [ 969.910637][T21379] _raw_read_lock+0x36/0x50 [ 969.917126][T21379] __do_wait+0x12d/0x850 [ 969.923350][T21379] do_wait+0x1e9/0x560 [ 969.929400][T21379] kernel_wait+0xe9/0x240 [ 969.935705][T21379] call_usermodehelper_exec_work+0xbd/0x230 [ 969.943604][T21379] process_scheduled_works+0xa63/0x1850 [ 969.951479][T21379] worker_thread+0x870/0xd30 [ 969.958062][T21379] kthread+0x2f0/0x390 [ 969.964112][T21379] ret_from_fork+0x4b/0x80 [ 969.970514][T21379] ret_from_fork_asm+0x1a/0x30 [ 969.977259][T21379] } [ 969.979737][T21379] ... key at: [] tasklist_lock+0x18/0x40 [ 969.987448][T21379] ... acquired at: [ 969.991235][T21379] lock_acquire+0x1ed/0x550 [ 969.995897][T21379] _raw_read_lock+0x36/0x50 [ 970.000558][T21379] send_sigio+0x108/0x390 [ 970.005050][T21379] kill_fasync+0x256/0x4f0 [ 970.009623][T21379] lease_break_callback+0x26/0x30 [ 970.014804][T21379] __break_lease+0x6d5/0x1820 [ 970.019644][T21379] do_dentry_open+0x8d4/0x1460 [ 970.024592][T21379] vfs_open+0x3e/0x330 [ 970.028830][T21379] path_openat+0x2c84/0x3590 [ 970.033597][T21379] do_filp_open+0x235/0x490 [ 970.038269][T21379] do_sys_openat2+0x13e/0x1d0 [ 970.043112][T21379] __x64_sys_openat+0x247/0x2a0 [ 970.048128][T21379] do_syscall_64+0xf3/0x230 [ 970.052798][T21379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.058857][T21379] [ 970.061165][T21379] [ 970.061165][T21379] stack backtrace: [ 970.067032][T21379] CPU: 0 UID: 0 PID: 21379 Comm: syz.2.3511 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 970.077775][T21379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 970.087826][T21379] Call Trace: [ 970.091091][T21379] [ 970.094005][T21379] dump_stack_lvl+0x241/0x360 [ 970.098668][T21379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.103848][T21379] ? __pfx__printk+0x10/0x10 [ 970.108424][T21379] ? print_shortest_lock_dependencies+0xf2/0x160 [ 970.114740][T21379] validate_chain+0x4ebd/0x5920 [ 970.119585][T21379] ? __pfx_validate_chain+0x10/0x10 [ 970.124770][T21379] ? __pfx_validate_chain+0x10/0x10 [ 970.129952][T21379] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 970.135926][T21379] ? look_up_lock_class+0x77/0x170 [ 970.141059][T21379] ? __lock_acquire+0x1384/0x2050 [ 970.146075][T21379] ? mark_lock+0x9a/0x360 [ 970.150387][T21379] __lock_acquire+0x1384/0x2050 [ 970.155243][T21379] lock_acquire+0x1ed/0x550 [ 970.159771][T21379] ? send_sigio+0x108/0x390 [ 970.164272][T21379] ? __pfx_lock_acquire+0x10/0x10 [ 970.169291][T21379] ? __pfx_lock_acquire+0x10/0x10 [ 970.174308][T21379] ? do_raw_read_lock+0x3c/0x90 [ 970.179148][T21379] ? _raw_read_lock_irqsave+0xe9/0x130 [ 970.184601][T21379] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 970.190486][T21379] ? _raw_read_lock_irqsave+0xe9/0x130 [ 970.195932][T21379] _raw_read_lock+0x36/0x50 [ 970.200427][T21379] ? send_sigio+0x108/0x390 [ 970.204915][T21379] send_sigio+0x108/0x390 [ 970.209229][T21379] kill_fasync+0x256/0x4f0 [ 970.213630][T21379] ? kill_fasync+0x54/0x4f0 [ 970.218128][T21379] lease_break_callback+0x26/0x30 [ 970.223162][T21379] __break_lease+0x6d5/0x1820 [ 970.227845][T21379] ? __pfx___break_lease+0x10/0x10 [ 970.232959][T21379] ? __pfx_apparmor_file_open+0x10/0x10 [ 970.238499][T21379] ? tomoyo_file_open+0x165/0x220 [ 970.243524][T21379] ? security_file_open+0x513/0x990 [ 970.248719][T21379] do_dentry_open+0x8d4/0x1460 [ 970.253481][T21379] vfs_open+0x3e/0x330 [ 970.257556][T21379] path_openat+0x2c84/0x3590 [ 970.262169][T21379] ? __pfx_path_openat+0x10/0x10 [ 970.267093][T21379] do_filp_open+0x235/0x490 [ 970.271582][T21379] ? __pfx_do_filp_open+0x10/0x10 [ 970.276596][T21379] ? _raw_spin_unlock+0x28/0x50 [ 970.281436][T21379] ? alloc_fd+0x5a1/0x640 [ 970.285750][T21379] do_sys_openat2+0x13e/0x1d0 [ 970.290413][T21379] ? __pfx_do_sys_openat2+0x10/0x10 [ 970.295600][T21379] __x64_sys_openat+0x247/0x2a0 [ 970.300434][T21379] ? __pfx___x64_sys_openat+0x10/0x10 [ 970.305789][T21379] ? do_syscall_64+0x100/0x230 [ 970.310546][T21379] ? do_syscall_64+0xb6/0x230 [ 970.315222][T21379] do_syscall_64+0xf3/0x230 [ 970.319710][T21379] ? clear_bhb_loop+0x35/0x90 [ 970.324371][T21379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.330253][T21379] RIP: 0033:0x7f66d3b7dff9 [ 970.334651][T21379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.354245][T21379] RSP: 002b:00007f66d4a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 970.362647][T21379] RAX: ffffffffffffffda RBX: 00007f66d3d35f80 RCX: 00007f66d3b7dff9 [ 970.370603][T21379] RDX: 000000000000c002 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 970.378557][T21379] RBP: 00007f66d3bf0296 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 970.386511][T21379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.394473][T21379] R13: 0000000000000000 R14: 00007f66d3d35f80 R15: 00007f66d3e5fa28 [ 970.402435][T21379] [ 970.438396][ T5281] wacom 0003:056A:00BC.003E: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.3-1/input0 [ 970.562395][ T5281] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BC.003E/input/input38 [ 970.719599][ T5281] usb 4-1: USB disconnect, device number 39 [ 971.021333][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.190613][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.242987][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.321114][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.390233][ T11] bridge_slave_1: left allmulticast mode [ 971.395906][ T11] bridge_slave_1: left promiscuous mode [ 971.402997][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.411360][ T11] bridge_slave_0: left allmulticast mode [ 971.416995][ T11] bridge_slave_0: left promiscuous mode [ 971.423589][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.524500][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.534644][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.544758][ T11] bond0 (unregistering): Released all slaves [ 971.747646][ T11] hsr_slave_0: left promiscuous mode [ 971.768429][ T11] hsr_slave_1: left promiscuous mode [ 971.775422][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.784918][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.792902][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.802122][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.812050][ T11] veth1_macvtap: left promiscuous mode [ 971.819801][ T11] veth0_macvtap: left promiscuous mode [ 971.825369][ T11] veth1_vlan: left promiscuous mode [ 971.830936][ T11] veth0_vlan: left promiscuous mode [ 972.025578][ T11] team0 (unregistering): Port device team_slave_1 removed [ 972.051967][ T11] team0 (unregistering): Port device team_slave_0 removed [ 972.433016][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.494215][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.554293][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.612221][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.690561][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.710495][ T5284] kworker/1:7 (5284) used greatest stack depth: 18584 bytes left [ 972.742621][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.820767][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.872444][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.963579][ T11] bridge_slave_1: left allmulticast mode [ 972.970848][ T11] bridge_slave_1: left promiscuous mode [ 972.976995][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.989675][ T11] bridge_slave_0: left allmulticast mode [ 972.995358][ T11] bridge_slave_0: left promiscuous mode [ 973.001211][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.010242][ T11] bridge_slave_1: left allmulticast mode [ 973.015878][ T11] bridge_slave_1: left promiscuous mode [ 973.021938][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.030121][ T11] bridge_slave_0: left allmulticast mode [ 973.035750][ T11] bridge_slave_0: left promiscuous mode [ 973.041734][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.193711][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.204762][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.216874][ T11] bond0 (unregistering): Released all slaves [ 973.229477][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.239370][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.249096][ T11] bond0 (unregistering): Released all slaves [ 973.566326][ T11] hsr_slave_0: left promiscuous mode [ 973.582286][ T11] hsr_slave_1: left promiscuous mode [ 973.591074][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.601359][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.609171][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.616587][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.630540][ T11] hsr_slave_0: left promiscuous mode [ 973.636264][ T11] hsr_slave_1: left promiscuous mode [ 973.644391][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.651893][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.661581][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.669507][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.681538][ T11] veth1_macvtap: left promiscuous mode [ 973.687057][ T11] veth0_macvtap: left promiscuous mode [ 973.692820][ T11] veth1_vlan: left promiscuous mode [ 973.699454][ T11] veth0_vlan: left promiscuous mode [ 973.706298][ T11] veth1_macvtap: left promiscuous mode [ 973.711881][ T11] veth0_macvtap: left promiscuous mode [ 973.718306][ T11] veth1_vlan: left promiscuous mode [ 973.723529][ T11] veth0_vlan: left promiscuous mode [ 973.867039][ T11] team0 (unregistering): Port device team_slave_1 removed [ 973.895304][ T11] team0 (unregistering): Port device team_slave_0 removed [ 974.099692][ T11] team0 (unregistering): Port device team_slave_0 removed