last executing test programs: 38.097368383s ago: executing program 1 (id=2909): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12, 0xc00}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 37.871994331s ago: executing program 1 (id=2912): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x3}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 'wg1\x00', 'bridge0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 36.720179842s ago: executing program 1 (id=2918): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0xffffff7f}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r3}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0xffffb4e8, 0x4, 0x0, "b67bdbbf81e27c6d6263184725ac744194a3e05bfb992060c919a194da98e794", 0x4745504d}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x35075c}}]}, 0x144}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 36.501807071s ago: executing program 1 (id=2919): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x7ffff000}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000004200)="289dbb461123e1d0e52431f38bf4ba3e6bc5ba0dd7dcdc9fecdd46e04d17179134779609d0131d10114869d88c7ca27c21d3459b41a29d34056f91d60ce6f57aecf7ffcf0f9e1abe145b694e0422440cf0d8a1129e7c7b4ac6ed4e2928fc2f08553579a9a44694c516ea6b309fe553bf3557d1c74e2aed30c4435dbdf33a44d2a63886adcf0d5b4b156a7d6b3c5d7151dca269165f9187b5cfd95cc35020e0219ad7fe8337e2645946b4752ea29471a28b04e5cf90c85885bfd6541eccc85d0b5a563d6274d02826c5e9eb0d63fbb416c868542b50e8da5a0a727feffec4d123da01e011af11c8f62b95ec889390c9aabf2f73227889c762346c49455ee0682bcd1ce5590e30e9ef753325b36c5934fae219a9adc9b063df66ece56e36f811b3057f19a1d3b69d0fc95888c36523ba2b4d1c097cc4d264c38b3526d79c8174f79ad588d9f680ac9bd81bf2d2b77931c044b61638d652da6064f7939a7c5746039b040d7d2dd510abec82b05f9e5f36affa68fc8e4a3d17a76da293e869fc51aceb8fd46f2c158e8b417fae56fe6ba8b9d13819bbd0229e6d3d678123ba0a15a4fc7f090d63a5a553b4770cc5794e3fd1cc65fa04f70b5a4cbfb36935e6a123f57f709eaae84190eb916e3630fa5f5ad6ea9015231c13aee318bebfa3a5cfcf1675659cbbf417593f098e2acc8cca9249c82a927d4466fe7be01d212ce6ff38526693a0a00daf3499efca6cba669729e0e69869cb408245bc1dba6aa5eec2691e5e00f43066252116968eb888670fd8b13fac870f5a2b66f1d2098841305d06d5e56284fa6e7136ef88f14a18955afe87391bd286cba9724434468ba4e98a8b5a5dfffc275cb823c08495eb1f8f3695b1c85612e5590975fc893263fd76b5f06b269072cda2684e28efd77b1f640c78727f302b1612c94993fbd356bb3cf4e695b0d1072959eae0b2c8a7b58546fe17057d9d91a78adff06c4003a135c2a8579406460f9f4b8bd171362ae4091a3960594c5037edd5d571552fee2b296b3f32010e703de530785fc34e9629fb001621acb8df7bfb4c7bcd291966517bec6dec2c20c7aec95fa9c04530554bc4c157a2c4564c6231686535f46f43e83882c4a2843623fbdd9b68a80ba508c7cda0a3d93287b22b441941802b89157eb64d3833b2b31fbe362022229186be911bd2f908c6055985fd8336d46b5cd136a8f9fe85cba41e75e0b7b499e77859f9f8fe1e846d7307acc6d8bf9889ac69032117a1ea9a31e2f7e59bf7193e5411f5c92131e13d872f0c36a0072cda5d15ae17a1d9031347080a2196be6421afeea50d346eb42a4cc709de7c344b45aa5c4131dd8c02b30a8b1bbe7c9a8bdceff0623f94f85751fc03d55adc62333f13ca134d056be64ce821c063026361b3d4dd44299514f80339282c0e08cee69c2ad0b9e30615bb1d2cc1eddfa1f2cf81a0252bcbca2b3eb8921bcba6d5baf57ff99a8a3166e44c2234f5f64a72f851c662a574e298dd9a8c144c4618f0494cc1c965ab6c9d6fb94f98236e1f5c728089b9b4e10a81df81fcdd459d029d1f9e02aea8ea781b0a4b6e59a5f992acb8cfc335c88c9d3f23de6b640deab662fd71b7a2e2ffe8ba673ce36d683713ecfad62e1865f26b31ef532a47b8f1521102e9eb47dd5326272806c6a00c2a7ba8d7f7b4cba72e44719f603c2f1a8fd6cb090299683a928e98bfc8112948ee66979ff5cfda957bd168733dca091c7075c8f197140f53eed8f485637ee16ed177c22b8a23168fe9785a7ede667d1437d22c4bf75c862a98811d7caaa9d4415286f8e981af43e055ffe21d1b39bbbd6878be925e0f85415bed7321c045fea2ba1632a62b2caadda3a56bc63d99726be2cc20e44d80b48dcfe022cbdea9fd513177904f0d9b57f361ab83be1c712f141fba9b2a9b9af00b30ce786e0ca2c38b0efcac5d65ce57fa6caccfbdcea1babcd762f8e1ac3e071d010e62e1a7158f5feb861f0b0816bf69af9f8c949ac49599ac50546c255f44961c3fa465a1064a05ee1174339370aad9f8251f2fee0b202509aeb17c425386024f2843f76b045ba4fa478b65f17af2623390ac1d2d3c18d60ec7252f28a239deb79372530e6ead00020c6ce22fec26051c0f0ad6c3ebaeeea5727fef05e739c4a68b515e92266e8736ce90916ca74a2b38ccf0d2a6f670de20ceba442e2b0b8511328ce4d026c4d67ce512496f4e00e781f0e6cb72bd49d3fc977865e53ff6be2ba910511226bb33cee4308197225ef9b764f41bce18d2295f3a4577ec386b10d667c13fdb48331df3c1ad6aab3cc01bd6fafab7269fbd8e32e3b7a2dd5e68e22bd2911cdf0297b107495a4aa80fe37b009aecfc6ebc61d677dcd06cccd27c6bd64c0f45e432e804b908c3d5f6df1425a19d1f26617f4be7088b31133642189552132f6a9e47b119b8b667813f771c12a08f4b2163cf12465b5d44fc1c935df14beef8e9009ba550e9fac1fc5d40072b4ae982c57d55279e52130e55ce77c9792b4438109c63f8d96a4e4976a3d08f6709182ab29bc140fe5e02d8932ad5e1ddbad18cb9e3d03e5f44b76daf1309c187577aa5c9afd942354b45d7a95e7ea1efc076754a4a542b1b4bbfc20388fbcee0368627efb78f3bf206fb2f27dd1d4cf67ad5e09ec4a35a24af5823c7263018c110b984dc7996069b95b2530c7a317e1b094a1cbafd254178a5648ae2cf883b0c879699cfb6526e797d272ea8cb5d9db25b2365cba56b0d924d082cdd0723c6dd175a0b2cb7134607be54325f6fe6ea44f4190c2cc8240b5ae4b4e996e18e3d854122d1fe0c5804887bb19814bf47951e210270f236f22ffdcc7a694d13dcfd0c91d78292ad963451a13e67e75ca1d6236bee4e24cbc75a16b0c747a2c67851c19e4a74261cbc8902881cca8bc92ad2de8f4c1096b7f7663b45e967c90e1d37146d67eeb9f5fca64d266ae696514de8781ac9cdb3385cda4541b82707958483beffca4c3836f843d18dcbaec7eac1c0756b87e4ba15261771c1968c9cce274985c26aa7879435817af26a9c51f332b62af49c9d55023d6c8281a8fbc35a7b18ff0bf0158e7747f93e0f1eca7021c64667b598e7acf571863c5eada8c6ca29565417503e34e378946dcd937f181573349c44d899e674ea3039c96cbfde9c2f01c13feed032cb86b33d3e9b57c7f44a706858d23eb100a30a0bd2d6fb4123a3c296b90dfedeaf98c9a6da9ce6351f8f47d359a01d66c5969aed5965135dc670c777c18a14afa317ae63a2e1da7ee5de0da4d5ceb4126eced641b8ef9d0a03e63c726dda6e7365c93dc19889e5845c6b0f83026650ef549a4d8f48e86644d6587832619d8e4a0960fb2d594f0ef57f5ffeae0237dbe99c2ed2ad1fd64152977929ca8d963a807b56257673992ab772b00403564f238b57d395c632601ab05bb4b90da49a664d2f4572b8c858515a41fc6bd876813a5fe3a36245fdd221536cf0a67ceddd879f3c30648c388ed586e3171fd12af8ee03d83d9c44c6f05aa6492d354556c9b5127d7a86c6eb1d783a0f1b4a0b0b5ba9ce580dfe58a2c87d264f3056f8fef1a1f4046e1d8732017fc69ec1561eb91fd8a44abc2b16af0679ee59e56c5e2d65ccd47a0b9e59428cc58243b1b5bb91cdb7ddd3af7192178b77bc0c22644ec6a7ccc16a725652f251035d5199045e74decda56694c7093b01d6f8605a78a05a85f9fe8589ecefcdafcfc3e6ad7ce421afc25a126376abf5a1f1d46dd1209df9765df7a625305acaea620b7c6a58b8169d2cf177e2916a5fdb6239d4aac5726a44081988fd21bc3018f66cfd432cd4d6724d9fa9098bb370ef5fe7dfc5ba6aa3c2ba71582675ef10ac990c152d651204d1979dc554a22523c52ba4ae2d9de23cd17f833959b88faf63424dd8ff5829e1f31eb850eafd076ee7e0d3b5281a56fb20ea2115514b0e766c399fec96970c90e69e97668aab7c35dbc749eff5156e6ff853bc1cdf2af8aa2f1e8f628e82b037c74b41beab4567c6026b61b24472f4aa62ff826387ecaf2d6f526c067d8abc210458cd65747d2928ed9227011430bd6b73bd7c3d2f3ba1a62237f687a82dd24177ecbe9420774655e10c9534ad253d6e355f6672c0c7188dcf1fd6b37b75f66bae89ccc57c66e94a67f466f1b9ddc693851192bab5a32af4455fbfa4e32dc8d9bb345db4d58d69a4975dcdc576768e7165bd57ffa437e4037ee5df47dd73bda17eab569f2bd495c651fe31863ef7f2a93e5212f3eaca15bf4d7c9d54b330f331605cd657ce1feaefc9139d01920dfcc347404efec3a2c560c04222cf200191d73580cdc4779649e098c0a68f931284e91785dbc8ca16e40a0a62ab610fc73f665efb2bfab823f0e804d568bd97d3d87aedd9c8bc457130843f3c7a7cfc507d4f5330589062df8f78ab96a29c5d7588aec3f95d3c82fcb02aa8b431e85833e9dc441707396846eaa71f1091dcf4075b370e4c67c93279b9d21a635047e969b70a25133315e353dfa3048c2cf917ca3b9e386ff43e1cce593b4dc54600f51752a5612a772781bfdf2ccb3dc0191d84884ed2bab9e6a1c55b19735a437b415a973e34c0cfbb75502c86f55253b0677a6d33ff76517bd0869e7f295c7b9cdef70e90d62fcaf584552af0228651471a259b383a7ae4d4788a5003e63511e12e66e46e11e7ea57897712b5c0a821e78a8ba45391a7d9f43a67a7f57aa4d5d3f4a6175680b44a2f6af039a935ae10d8fef10411e6e13585b248d3532b52ad6815c0b4cc98a52ab3ba4de0186512f2a397524b9e397445a9dc7156fbb24a82383369056f4c5b5fe8e8ff318cf1f2a426fec6a2e2300034e76460f019c6af721f5fa43e23834f0b120e9a3fbc3e7b1595b9dd13190aa877ba0193804ef67193aa83d3ec40f705d469bc45f747ce75c65a30b383c562de68a76323650164c2c56847f0c5003a904ed95ee71a3c26098ff0a17ec9cc9d9a328f828dddfca6cb05ce255ee61bbccb3bcee2bad006738f4e3579a58b93a268ea7f99af4a6f50e12b3474e2ff566c982fba61e22ee760b3fa8857bcd84a2b68e68f8f6e7a909b9fefff5b472c22fee74704c8cf2ef8f4ab2a13cbe74f56a893a835fa7faf8726d303c308f223646dbd3803a59d389c67c85440751284fc0de6a4ed5580ada05a88e213a4282a811e0739bc402551eebc58d9164bb8531df428232afecc093bee9c53b3ee3e2d00de5bfaed0b5549f5ef2e6c0af3381e2cfd4c0c50843f1f7ef8b8f812e5362d66496239d999900c2be4990df1200c82af39544157656d70a0fbff5d1f8d1a8fc7dd6a18d0ed4dca8512f59fb96fa327d44ca15a815318ba34a07750785a5888efe0d0af16e26131e288d3c51c9960fc1e8ab10a589d3bf61dcbb990434ccc4aecbe1a906c3e78db16ad10fb49b9fc30d110267fd07fbcfca242a32f3be3eefa0c0afa235cdfbcf46fe2ee50577ac87a2c985063178a674e57557047090bd977258672882d8b2470d10e771a1de9a32a5edf5291b18ef5a01ed179aa83a6598195e4f83e2d6467356e487c706c9e487cbb28f8fc7324e71bcb92912bcdbd620ed3d23f578d1a38763feafe7552a5f24f13e213e1ad35dea974479d9782caa805b7d127ffc69d64588591ea5c906530d567db8f0b154af08cbe7667d1415b257bcf0a993c295697f962929f265ce530fcbfc711517c31de6791348515fe5eaec6ab2457b4681c93d4f8b0b60c0a566e729298578ab1a963af28531c7d48f085a1f3245f1ac79e9583c4939214c0f7d091adcb26c1f38fa37a3fd8737843397ffc6b625f00ddb79af822acd194d1b9adbb98a63d8aa5eabdb89b3be8bd75b560e437f7d41e45d25a6dc2e7a4a5c1ae966d1a8e70f221dcd593c0b33aac8fffe8fa97f60e0cf393bddd01d2cb02013f7ea3acfeca87ce9cdef7d10e377bccb3cb6b7ba36ffdc44352e01077bda5f7b50db9b7667a74520dcac09c12edc27d44c857bdd11b17864a6d7a103d9cdd0c944fa4129e751454464b04b20d74fe00b990b1f36f144c4c3b9cdf48164f7e1dfaae436ff72ec43bf660d3e7ffe553159a1231da1bc2ff5cd17bd356c0a18f08367ddac4f730a838a83b12ccb1a9c8f14084d4bcf5d1302441b58f93c2610d9d557234db4866b67f340e357ec4f1b1a2da86976f18e4f7af415a298c35772de8e66153490cbce153f571ce9999fd4aee2a429c9b6856536d071c9f416e000456d6b27f6ee9022cbc81c978397c77e8f28df9832c341edc309ab8eb41d0af83658b30ba0bbd75de8cb08f5f1fa40107e6ef3a8baea72127678a904edac05e8ff5942ef704cb0787882c92a93680bfc6b0d12d333f2aefa700767e9bcf142d0aac216f27360f63cca57beb8b4b8ae71f836515e4890adda378bb7cba4d2f7de09c48354cdaec6b877034576772da421d3b7f098115af4fbcde746ca0bde67438f807ea2613eefc70343b7aef1af457245ab03b35acebf6f6469c00c0a4b70d392e2115ebaf4b00e77b14ce7405fb93a368c3d0413f7484900d162d70c71eea4d97d2d6465f816a60298da8ec5d114b768b96ad0c77a0c125fde7c96a7f4fa607a05c9cd534f2f307fdd0b645f35deb49f5dc77a6a3ce03c9ca51048d0ccc9037dfc31fa74e53f6116cd414f7c4b449f2bde588041c6abd529626a9b20cf139d2c093abd332eb32c71125422c89c37dd444567966efd8ea4c5ae3995491da268075463e47c1af1c1183d50a3e4f09c0bc0a951b061d451c56606258ec5e178de85f0209c2e25392ac3f57b34dc885aa499467b4b0ef49e930cbc21467df2f7f3ad24838c0e88f24a1caa83409b3aaa8f17dc15fa7f72f0583bba2b58b2db7d163b8a9554ed422ff4b3c91a1b3ce18b50df2bed3095bc4974d2217f3178b5579b09d160640396e39c0866eea1570ad72ffe8a903b1622280c732a460ffacffa054ad09707103a749f9cd39f9961b29179748253159ca06231748b3604a07546a899e671152ee0a8583fed9868352fd7e3311665a8fbf324ba552c6fda02d3ce131d91e38d2a8d94c114808f5424c093b27fc032f473b883f9fce2ec4849a8ac8d4aaf7d5e74ff105a6ce235bd3d108c3190e6fca6b7be08c4dab3bc14b0ffe8d26483b4f26c49324a906efc17891601e73d8998eb76a047bfa36d0a58e0d2614a0dec35eb87cf6d0715c5d6c4be89ef5300bff7c78ead83624174844031de0b55513ede995b75afbaaffa62e011614d654c9ce8dde59b2c57807b84beee24cf95256280aaef6c64c0881797f65f1ce73b530a6981bef882a1834f20fa7fbe4e56b07d3cf179f5f92b402ad947bf30423fa04e83f1d5dfa9e8f96cefa9d4e286246b95e11e1a4cbed9f2c172866459bf8d24c6ea950c7739a929a2b4a4ea23c4b1505e8acba1029937533fbb25bb278b26dc7872ab07369fe4af811727591f210dc8499d864392f8f3d708573b7e185d3bdb0219e79b552bbd0f8d3b1689f6240a2dc2e1619be71f2f822bf3386ff58f04a0bd1d66b9182e6bbd0b0a2ce69ca32df06846dc0a39ccb8c1f79fc2f528bfa59f657294d9066432a54f6b1fe260e1f6b7749473d2707e9b9fa2186930dde9dbfea2ff407dbd4b05c0c58938c19a3fd3557d3907032ec5e05d0ba0614738d968db90ad8faf7dff617cb96e05e95710845fe696780ab1329f4c169fcc352a4d6632d667ac746a4e24d57b738c132c567dca35a37133f5d45db213781c8b6043655048d686ca63c180fb7202eb3bbbf4c95e853afe2be003420018441bafb143c33bf09990edc90f1c61994fb5f5b53cc5f7638f92d57bc63cc83f2a88e9ea9895901b6f2a26a5d46d8f1d1cf7a0c4c0f7125c1748d833ad5b9a97e5703651e95520837bdd64b091745bf206060c2e08aca6844a37f45dd932ec3c5f2eed7a5f22fe236cba948e33c9abae4fd96b91a5fa550cc3f793f960d124eb0ca8306e9282eda41b4c21eb35594f5bc6d96929a05e5fa3955b89aff7db74bced024ec3716d5cfe58bfb74ade694d67649133a882e755018c354f0c851537438e2c9fd8aa113457ae15259e138403c056d19a307f9e95016fc3221424fe1f485b94fd6081a31aa313990c505d64c946c266414af568d7e0f3b5e32f2459a89368620822e747d3c816e9f6ae9196913112b3d9ee18044068f21396e6e45f373ae0fef637f4dd148b6565627f64bf99a7e90f6b601ef43b71298976e58fc73ef19371516041e5be0cf123c011ecd6fe5f3cdf93fb0339b3ab5f1cd00df7e4b40727c12d9754d525192f416e943288c40363a84e0e88176c9bb9b05d8d720ad1f2e9bdf1c8dd710c7ee46f5cbfa6605e5ff1869e5478b055cf05a733410ac775328426cee82e411b6d1a5e73a81ba4d68ee9c3aef1f171d5a3ca52e97403a050dd2a59b9e35e124cd7a6653bb34f3a549263608d81df6185d8db70959429b3262c3997bf841c7e418441dd707d29f5b398711d2f2d33e71043ba26b7c240aa6079a809af2ab3c10985609323d290910306a951b928a7472e6a3021ab294dddad30fd47de17544adaa815668de50bb9cabac7042b4cb5bf12c7fc995b46cd16c301b4646fbed56f4d01f7e3ed48668b4931eccf2d4629a07ae90b1d13c353ecff326adc80e7ce4f2a5d4c4cd5ef1a598df3cd1d765a6d4c48b4ac04cd24d0fab7fe9c4d82d6a41822dbb5e06621faf117eefa9a82b2bfffdd13b7cca30a1b30f843d027e887b99943c1ac7a67d4c556c98b489044d784c4c555951eac5ceb07e135adc74dfe14efa5325e5ee12d4daf5ea0b695fb6feda32f10cf3a5eac946415613aa3df2004bd059124fd5bdafd790eed0592b15fd26c21d6efcb8d7858aeb290aacfd0909a90d578f36161963b8e11c50adbb2220208d285babfafb8e7d7e49123393a6349ebaecc8f55bfbebd41ae040297885db5f94c4a7b478aa2d32af2264fb464bcefd052365108f9b8ab865d957805bf6517ad4040b7db1301921f1ea1a3f4e2149dfd6881d2f1cba569e52e01f634ca98ec0eb82c60d323ba4e41947ef2b3556b3771d7ae1a1e7421e46a92a0fe07ada1dadf995c553cc5e5f929f2bb504bfad4a87e0cce4777de8fe1198035136422fbb16d3492de8c785fc9795de14c763799bca9ddf49703b2eed5af0b44edebd5c605818b5ef2abdc53381fa2386ea86ed8d0ea1213702bea050cf2c406e7d8f847e05a8c1b48684e66a262bb9303c48aef90edd93c356373a92d3f2d9c5449b1d21270349fdbece575469c6b3c2ec4cf10345ed078fae662fee34c7a57f1b0bb09c4cfc47a4d24f9d961d37de79bc21b94cbf78d9e27ebb4a49886c373336ee1a89400241c5d08cb3a630bfff5af172063262122b0e3ebbdb3a2a515c8035d1d996bbc67a8a37e2b098307162b49d45c1ee3c6b6dd82eeb83f7418fc5b831e000b2a5a39c44775554138a77c57056db6830117d1814042753c61326bdf8a8d921475136707eb5b4b227cd05bfb11a45bf13aebba80dfb46b92b9477d2b0ec2c094e5f55e89f9542883d99dada78270c289ee385d314f58ddc7545ffe9cc2e16b1ec8ae0dd9d0132605360536943ec060a1d1242c2885a03d13bd6bfdf42358ac1fa466337e5ad1b06ea10e64db639237d6c1b7b292febd1a2314953d21d21a24acc3536f9fa349930762f8adb4fbc0d0cfb6ca60e977a8ffe75270c0738a5d11ee00edde6d69a5640d434b277e33140f7c396979277dceaf06c874d10ad16139327bf8b6dd708394a58b973648f13dc057850a88e6fe633cd85b310b28b2d2221208300122150d919b5a763f4c0fe7caefeb7c809acd412df0d7964ce46cc4c2de305158996c6344074b8fe40fc46c922001eda549f9b700a5179ae2423fdc4d480ff3081b63f36eb9d44dc66fde542e0816bda378987d861cfe7c3eabaf30129d597794b27e053ed6f1470b4ee8cdb6039cd57c4551ae93072ec63a5a0851bc121f15c70aa4fdfff69d1b4d3a6a5af258c9825ada720dc0861dbc4342c739684d584d16a53edb104242c6dd9bda30f30596e566efcb9d4e9ffa270f958de408b12a32d5a941c60f925a0e03d448153cb2dbda2a03d0ed4e813c70e77bb7f4e611fc7e0945045333e59333b0ffdfa0717d814c71a1c3e38277e1f5ef27f9bc4785274984d61bf84caeabd91896face66fe0985ce291dd9b23a122de962aae1906ee00f98ed93988b810cd78bec0b8d37f8ff53123c751a16f6ac6147f76ce205fdec798658b824b083ac3db63c168bfb210eb6c09b0a1c32e2c2d099498dde6f58525081eaedfdcecec46ad3441955b323a53af8d4f4e34190195d2685dc7ad23b26f3dd57909cc10fe77ac15c0e6442f70dc99696bf1080b94e0a364bfd3affe84e281c443eaa819a23bb53c5c389b34685b58e55fe1ca264923153a07d355fcbb394bf36f2e192849520cb4e55fe95e9d5466b6b598ed9cd0e47f2372ce424e1290f4874e5814bff8fa14c4b1dffdbb7d9af0107f22e86587ac055831a044d34d0f0ec14eb56eae5709faadaf8ca7bfe5f9822fc7f0bdf9f1f6c5ca2f40cbc67dbe7f337de71e70585399c2c86ba6dc9d8592706ac429f4405dde26d5d34bfa3f1a63082c009cfa28dd2aa39252d398b08655084bbf4fd1bc4b766690e489e03611fe8e5a89ba78d58f21ca93158ce4ad4e2eb4f2c0bee9655015f3008ec33e3850dd4653848ea9d200d6cfaf26e9ae418cc3dd70ea141d8aac9ccf1384bac42fa15e4fa9a1dca6507047a14a02b3306a5e190b4c1b4b78016525702f5d6171cce1a77fc6b2cf393bbad803c6e3348ec912fda10e595f8b15adf8ad3901200b4ffac410059597566d84b725c922f3cee6373e9ca72a61759abc2f40374864d23f4e0444fd30260c91f585c2fb40d09e41a47d0a7a239f6d51c802538cf017b9631354174b28eae399d233094b820cf8841f5fbc4152cf323766cb554217ccc5a47e1ae3b69d0282277b6cdc20dceb240e0634804664281b1a86d0a93f56ca250c48d3b7c7cf893a8e4ed5e51377536a7993f4906cf5ac5c9bb3264c78ac1b7be4a6dc08ee7b79ceb7de0fd5acd40d52346974a598f5f3f96fe67f4c9dd086c775daf24f5fbcf24fe1660f5e38d237cbb09cab0ef16ccf08d45a05df7f30f73855727dc7ea280838beae9966058b909cc57c6ef6cdfaccd0cf0e2235cb7307e6fe06e877aada6a5d03c1c3b9937e3191e8e9632f010ea02b3610e977f8782178b168fc8186504403b050f98b79d37dcc2e97336425c8577030a72f8d96513c8bd78d98ed39944be9c05d7ce8b2764eb50dcac909af39c4bbc718f5a6d88ed01e8978a7ae155512c72c4c2a7d343fd2495f948e9a059f02892e2dd39d7c65b038331dc78336b513802415348036e616b01f8f789ba785c97b3153180426de3dd129f9c672778a6504af3475eeb71f89b901771646cc186fb92b9605e4a9f8ce4d6d9872a1a534f01bd6998a129e7168374ecbe23d0eaf8dae9a57cda042c1b36eddaf2a0598ace5a597f62498f40b15a48784277088a8126d88d3a29af4", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x99}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x0) 32.874623686s ago: executing program 1 (id=2933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x1000000) 28.35355102s ago: executing program 1 (id=2947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000002060500000000000015000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a31000000002c0007801800018014000201118000040000000000000000000000aa08000640000000000800084000000000050005000200000005000100"], 0x78}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async, rerun: 64) ioctl$sock_ifreq(r0, 0xc9, &(0x7f0000000340)={'veth1_to_bond\x00', @ifru_names='pim6reg0\x00'}) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) r4 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) (rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r4, 0x0) (async) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async, rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) io_uring_setup(0x252f, &(0x7f0000000280)={0x0, 0x0, 0x542, 0x2, 0xfffffffe}) (async) openat$mice(0xffffffffffffff9c, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) (async) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) 10.952907705s ago: executing program 2 (id=2976): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffe}, 0x1c) close(r2) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 9.814437434s ago: executing program 2 (id=2981): syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x5b, 0xd3, 0xa, 0x20, 0x3f0, 0x581d, 0x20a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x0, 0x0, 0xff, 0x1, 0x7}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x36, 0x32, 0x2e}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x56442825bad79a6, 0x70, &(0x7f0000000500)=ANY=[@ANYBLOB="12011001020000102505a1a440000102030109025e0002010e60a40904000001020d000007240600012fb705240071000d240f010101004d0edfb80dc514f01a50c2380905810300040079400904010000060000000904010102020d00000905820200020507040905030210000900257f02e91bb7ba418c44f3a5419b4e07337e8cf2803eae27c0dcc44ede5d39fee8463522c4d70d0f629b5385faabb5c67be99944016352ee417162db186a9700a051d2510a33ee5a3d2907771561115e9fb1a489e1e6066265907d2560870b171cbffb8d8474213021852d885df028fa06b3373e3df150fe19e5593c49d4fc2af9746eeab9e264c2e84ec38ad70fccbf2b9969d583a8c1b94b78d5ab51da625990555cedf2d47b3d66e37fcf6c70c1fed48e6eb401230a65b989ee1ba7e1afb475bf90484cb20ab84c91d5a5448d7251257e7fb1f5bc3b070f9b2b9cc16801fce50d6498ecb0baee1229aefad8fe7356d0d921"], &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xb, 0x2, 0x2, 0x8, 0x9}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x6b, &(0x7f00000001c0)=@string={0x6b, 0x3, "0fb966f78f7023f7789f91c3e86871a4bfd94e1a200c560fb537b328f597a3c3f9f5a70734972e75500654e57fc0b8f28ce8c1ed3e26b344d7227b6045b22f1f89cc0fdb0c3cac2bc000e577e3662c746719015c1eb258f1489fa932f9154b3147527f07a8d26e98f2"}}, {0x26, &(0x7f0000000240)=@string={0x26, 0x3, "9301405b8ffbda5f0c15e8a5d086c3131317df1b3b2ef6cdc9b71a026e2d0b7097a1bf6a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x75, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000022, 0x0, 0x10}]) 8.521149981s ago: executing program 0 (id=2988): getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x80}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}}, &(0x7f0000000200)=0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r5 = syz_usb_connect(0x2, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000"], 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)={0x6, 0xfffffffffffffe01, 0x6, 0x0, 0x0, [{{r4}, 0xfffffffffffffffe}, {{}, 0x5}, {{r2}, 0x5}, {{r4}, 0x2}, {{r2}}, {{r3}}]}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x200400c5) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0, @ANYBLOB="6ce8aaf5f8c7c9eaed666e1a849aa82beac1551ccfc7ba2bf094daa81076b998ef4ef70322235b430e430344ba41df6254754103ae4c540c5f04b7fc5f", @ANYRESDEC=0x0, @ANYBLOB=','], 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1122000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000003c08000f0001000000", 0x24) socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8.093245625s ago: executing program 2 (id=2990): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a6ff504000000020000000300"/31], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000005600000000006f5fb9e854e879f4fe53dd85d0a5c1c92787b5f41cae63061588ab2f0000a9c4bea3bbaab8e8ad71b70fa60500"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000140)=""/203) syz_emit_ethernet(0xd0, &(0x7f0000000340)=ANY=[@ANYRES8=r1], &(0x7f0000000140)={0x0, 0x3, [0xa0c, 0xa3b, 0x7b4, 0x417]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) eventfd2(0x7, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000a80)=""/102391, 0x18ff7}], 0x1000000000000222, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='%:%/(!]\x00', &(0x7f0000000240)='kfree\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f000068c000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/247, 0xfffffffffffffdc6, 0x0, &(0x7f0000000440)=""/193, 0xc1}, &(0x7f0000000540)=0x40) unshare(0x22000000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f000000a000), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) syz_pidfd_open(r7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x7041, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000880)=ANY=[@ANYRES8=r6, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="d694b893b44b97698f9923e5648f5eeeaac06c248c2a607d3caf213c77113fa79600dcd914a5b407adb0e0eb9ab928e95f22c81b1391c8c692e79fd5a6cf948cb006c633d33fe9373ea60cb73cd5456664ef390b63fce5b10ff5470e29c4c08f4da76ba501e252babf8d01f5550f9add68b5c5380c2b0b6fe6a1e61c7f6db0c2f19ea0656f010ad09204262b22655c685c2bd0e9cfd139faaac45ba0d96bd8cbd36061fbeaec2aedaf094a1447996834637bc7ae8727773f871e05a76578b8f2e4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r9 = openat(r4, &(0x7f0000000300)='./file0\x00', 0x0, 0x8) write$vga_arbiter(r9, &(0x7f00000000c0)=ANY=[@ANYRES64=r9], 0xe) 7.018750442s ago: executing program 4 (id=2994): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffff9, 0x3, 0x2}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xa2ab, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}, 0x1c) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000000c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001180)={'sit0\x00', &(0x7f00000010c0)={'erspan0\x00', 0x0, 0x20, 0x8, 0x2, 0x6, {{0x20, 0x4, 0x3, 0x4, 0x80, 0x65, 0x0, 0x80, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0x8c, 0x3, 0x0, [{@remote, 0x40}, {@private=0xa010102, 0x3}, {@private=0xa010101, 0x400}, {@loopback, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}, {@broadcast, 0x50e}, {@rand_addr=0x64010100, 0x8001}, {@private=0xa010102, 0x5}]}, @rr={0x7, 0x7, 0xe5, [@remote]}, @ssrr={0x89, 0x7, 0x9a, [@local]}, @end, @end, @rr={0x7, 0x17, 0x51, [@dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000011c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xe, r1}) (async) getsockname$packet(r0, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001240)=0x14) (async) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000001280)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x2, 0x2, 0xfffffffffffffffa, 0x8, 0x8f]}, &(0x7f0000001300)=0x78) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x2, 0x1000, 0x500, 0x8, 0x0, r2}) (async) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000013c0)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000014c0)={0x0, 0xc0, &(0x7f0000001400)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x80000001, @private0, 0x3}, @in6={0xa, 0x4e23, 0xf314, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x10, @private0, 0xba9e}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000001500)=0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000001540)={0x6, 0x1, 'client0\x00', 0x80000004, "120c2f65bf98be22", "2add85264d3ebcf3347cd8bfe2e696d2a79d3fbe4539de1e88160b6fb0135963", 0x5879, 0xb65}) (async, rerun: 64) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000001600)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000001640)=0x4, 0x4) (async) r6 = getpgid(0xffffffffffffffff) capset(&(0x7f0000001680)={0x20071026, r6}, &(0x7f00000016c0)={0xf5a5, 0x8, 0x6, 0xfffffffa, 0xf24}) (async) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001700)=""/147) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000001800)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0x8}}, 0x30) bind$rds(r0, &(0x7f0000001840)={0x2, 0x4e22, @loopback}, 0x10) (async, rerun: 64) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000001880)=0xfff) (rerun: 64) syz_open_dev$hiddev(&(0x7f00000018c0), 0x3ff, 0x400000) recvmmsg(r5, &(0x7f0000002200)=[{{&(0x7f0000001900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001980)=""/202, 0xca}, {&(0x7f0000001a80)=""/131, 0x83}, {&(0x7f0000001b40)=""/98, 0x62}, {&(0x7f0000001bc0)=""/117, 0x75}, {&(0x7f0000001c40)=""/49, 0x31}], 0x5, &(0x7f0000001d00)=""/125, 0x7d}, 0x5cfc}, {{&(0x7f0000001d80)=@llc, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e00)=""/113, 0x71}, {&(0x7f0000001e80)=""/11, 0xb}, {&(0x7f0000001ec0)=""/16, 0x10}, {&(0x7f0000001f00)=""/160, 0xa0}, {&(0x7f0000001fc0)=""/153, 0x99}, {&(0x7f0000002080)=""/20, 0x14}], 0x6, &(0x7f0000002140)=""/187, 0xbb}, 0x1}], 0x2, 0x3, 0x0) capget(&(0x7f0000002280)={0x20080522, r6}, &(0x7f00000022c0)={0x2, 0x9, 0x5, 0x4, 0x1, 0x78}) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x28, r7, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000002400)) 6.946790932s ago: executing program 3 (id=2995): syz_usb_connect$uac1(0x6, 0xbe, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x5, 0x60, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x1, 0x6, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5957, 0xfff7, 0x8b, "6584d1fbda9a"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd, 0x3, 0xfc, 0x0, "91cb77"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x1, 0x3, 0xe, "a0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x4, 0x40, {0x7, 0x25, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x6, 0x6}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x6, 0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x77, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x40, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7f, 0x40, 0x4, {0x7, 0x25, 0x1, 0x3, 0x4, 0x401}}}}}}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) flistxattr(0xffffffffffffffff, &(0x7f00000000c0)=""/63, 0x3f) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000001c0)={0xc}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x5000000}], 0x400000000000172, 0x0) 6.326866706s ago: executing program 4 (id=2996): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[], 0xfec8}}, 0x200000) 5.7276465s ago: executing program 4 (id=2997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005002000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 5.466812517s ago: executing program 2 (id=2998): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="cf040000000000000000130000", @ANYRES32=r2, @ANYBLOB="0a008e2d0bfe097600a6634c630906", @ANYBLOB], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) syz_emit_ethernet(0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000108004500002600000000002f907ae18c3501e0000001000088be00129078010000000a10402d86dd"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 4.931657245s ago: executing program 0 (id=2999): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x42, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001ffc25bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000600", @ANYRES32, @ANYBLOB="07002588", @ANYRES32, @ANYBLOB="08000300"], 0x48}}, 0x0) 4.664726465s ago: executing program 4 (id=3000): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0xd, 0x2, {0x2, 0xe}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close(0x3) r2 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000001fc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0xc2, 0x1, 0x0, 0x10}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x52, 0x6, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x40, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x6, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000005c0)={0x14, &(0x7f0000002100)={0x20, 0xc, 0x4, {0x4, 0x9, "f762"}}, 0x0}, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x4}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x2, 0x0, [{0xd000, 0x1000, &(0x7f0000001e00)=""/4096}, {0x2, 0x56, &(0x7f0000000600)=""/86}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x40) 4.529409095s ago: executing program 0 (id=3001): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x2c8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0xfc00}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) close(r1) 3.783421605s ago: executing program 2 (id=3002): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2, &(0x7f0000000000)=@raw=[@alu, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) r2 = fanotify_init(0x200, 0x0) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000002580)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000006c0)=0xe8) sendmsg$netlink(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x10, 0x24, 0x2, 0x70bd29, 0x25dfdbfe}, 0x10}, {&(0x7f0000000dc0)={0x164c, 0x40, 0xb87, 0x70bd27, 0x25dfdbfb, "", [@generic="0373c053e7b54caf80d388ef229a93fd2d866df693296b10b33e141eb218ffe73289716e0ee5da7eddb036dc733181d16193cd5054009bc9ea919397ed71860f64137d78497545caf0e1d18acda6c9ec0bfb1d0b997174bb46f36c9c64a0d90baef491bf5a78bdb3bd7f3e0d27eb6c88a372c9dc9f16d94ed0f449ffec0e47841a", @typed={0xc, 0x52, 0x0, 0x0, @u64=0x4}, @nested={0x93, 0xe1, 0x0, 0x1, [@generic="6bd545154f7e8003f2b24938e3d379296024dc5025f091e8c5b95adc3be3a83c8b38e4478e3b0ac57ef2a18c292782f0b28b135e99257339be3bf35deace99f95dd28a419f138c90c713b90d47b81a2a75bcc98afbd80b032d9036db284294aab8635a57cef81b6524b9ba34ed7e335dd13a18ae551cab1529b8aed0a877feac956a52f90fd11792f47c6005d34933"]}, @nested={0x28, 0x32, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0xf6, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xbb, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x7, 0x0, 0x0, @fd}]}, @nested={0x1389, 0x9e, 0x0, 0x1, [@generic="2486d0d9f5db713be2d61a7cfa0c7e565e0d085d77cf1067abb42892e4a438c815bdb0f78f5e98d3d117dbd7db8bfafcc3e6b12f3c9ddc5cd5a512e16ce05cb2074e8695655beb448d865651f3da3c90706743872dec0bbbc3d6db652f956a5ef349415b8c9e0aa3f22f008c13bf17311c16236a66a156addebf595696284e", @generic="3b1501e0d36d28c26bad6069f7c1adc47308fdc11d10a3578226e186f3e125af539e659e06670a460386857007c5eb368693d37d419f1bfaddb15ac5a6a1db6b9e6538692bcd910f0ef13ebb372033e0d6e53be80474e352c4264395b6a2355f418bfca44cb86751edd72f68c8d7c8", @generic="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", @generic="f7f3aefc21bb3b7ee000d9788edf974ddb7abbe0eec66cc574a495369e5a033fac111c3b44c8702b416fda5cdf72629807141e7e116282b41b20f448562ead6ceac8bce8f7050d5579b1d03d8cf2c308b608cac2f6f4d929adec22fe604e7cc52a2ce9eff9b9babfcad47fa89c50ae1b132c8889d7b697c33828f6", @generic="dc26fa2477ff794159b8eb6bd45315b963b49ab4ee5e289218855ae031f0547264b94b2a4a1e86c1265ae4fab6b4a79906fe53d7a8eeb78203f445b0d60e77cbfc5e438b4b42316df915dcd51c6daa128d661e2ca8ae71f9042d283698c453f72197ee30929f3a64672a8bf926eab21aeba5bf85f8e2b867d633ce2471a35a02dfa2dc7fc063f7da012e8b561fa771bd5f1f64f03b0b9d0547a6ea89f6e7833012a6720c326c9067f2951c1d2016608cf9963540e08b6d05037ac6e5ad6f0a4dd39ff14c27ea3ef328a30e981a288e56c0668749ea57538cf8266dd03a17e7ed", @generic="975991ecaed619ed6f124f1e2360a0b1b8491c0a86f558f29f048efece3ed1733f43d08df819a00be74c16ef5eb8cbe527f31811df8c2992be39bc7d0e3625405ddd826d30c4e7746fc8b9517e857227750b18caf188b2d226a6b9f778587181272b3828929b62172914429e7ab585e4168a541fde6b36717ac4b923e5988b1ea7840fac0c44267ea1836eceb56f3b252ce8d0daf2d1a03d0829279af249641c17cc4b9746187c93ec8ed36c63568dc00795ad8c5053d6b9b8ca68d271c05e1873b572ae6b3c70de9c59ef6ee73c9a77435d31", @generic="ce07389cbc24a8bdd9b7e076ee2bd9d28524d02adebc97039e4972faadb70b92b49ceaa2f8b2bad1b85936450b128f0bd8274748c9f67f3bd1358f77485859744abe83a6b0a921630cb2cdf48ee57ab137c7cdfbe401616646e592bd553210ad35c1ff2fa2459ccba2"]}, @typed={0x5, 0xca, 0x0, 0x0, @str='\x00'}, @nested={0x155, 0x1a, 0x0, 0x1, [@generic="af9e106404d185b1528651ce4309a6936b9e09b102eebf56d38b0ee30e227ba1afaa5b150395799757a245ceda72869933400d06ada2c5919e07b092d8e1326ebb666f", @generic="014cb59af3bdd0c1a1f09d3bc40584cd9b3b5d2d6afb059f68c29a180c49c71b85652facd626757a5fd7df8ac021266bb29964a77661ade68f7f2aca0ae3979606eaf5c72d234fd7104d7c5eafc32f55010ca0aa957485e09b39e01d0ad6f287b93a1e0bbb9114b512da36a89442e3105936f5621e2ecbf90926adde67fb07b04aee9068df9a073ca2b8984d93596193e8f4", @generic="3d0631d40157920c7cfb485bb3bbcedb28bef9060353ec7ef964771645a3d6157ae3b2a5faea84889d0c834d6047e1e5e68c4c686ef568e82d6f8bc7dda4f28bdfcd11487707abe1da3efb086061bbd724d26ddb4687d79d7427e322a22916db024ce8a9acda911e8f73dd67ac050dd069e35667", @typed={0x8, 0x4d, 0x0, 0x0, @fd=r1}]}, @nested={0x4, 0x127}]}, 0x164c}, {&(0x7f0000000100)={0x50, 0x35, 0x200, 0x70bd28, 0x25dfdbfc, "", [@nested={0x3d, 0xab, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @pid=r6}, @generic="fae7b3b76242db8ff4d7d52463857671f2a95d07f04e4cca1492bb0d9cb335a39df13b999ac81919f5", @typed={0x8, 0x13c, 0x0, 0x0, @u32=0x5977}]}]}, 0x50}, {&(0x7f0000002440)={0x104, 0x1b, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic="65f7981eca889690aeaf7421c25c7612e93cfea571ed6fe12f788e5c9968360c4ea83d2161eb79696f387eda29e788924519287d8d12a0b18cff95dae6b2f206ba37d97f9c7cf971b19a1744a69576589a116e3a70ab84b65bdc84b17b7669ebed6d3c89616a50cf1421049902c6a6f6e13dde5e1d794b02d1f3472c038dbc7393c44ee1c89703c663d0113214a2226dbfd51d401bbac1165f32beb02e9aafc8f6b1caab0a883e0948abd24206317bd3e8a70b3ccbfe4a9fc35c56fcb3cb8472a3e8b1718bf468f42b33606ea7d4d22fa0b30ee023ec5472cffd76da1f3cf3d685470717aebccc3395d8159154a07f41ed42"]}, 0x104}], 0x4, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r2, r3, r5, r8]}}], 0x40, 0x44}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800b00010074756e6e656c00000900010073797a30000000000900020073797a32004000001400000011000100"/103], 0x68}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000034c0)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}}, 0x0) r11 = dup(r3) fanotify_mark(r2, 0x1, 0x4800105a, r11, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c00) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x80, 0x8080, 0x97, 0x1, {{0xd, 0x4, 0x3, 0x4, 0x34, 0x66, 0x0, 0xf9, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}, {[@timestamp={0x44, 0x20, 0x5e, 0x0, 0xd, [0x4, 0x0, 0xfcf7, 0xa2f3, 0x7ff, 0x6, 0xfff]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_fd={0x18, 0x6, 0x1, 0x0, r11}], &(0x7f0000000040)='GPL\x00', 0x2, 0x1, &(0x7f0000000480)=""/1, 0x41000, 0x10, '\x00', r13, 0x0, r11, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xb, 0x0, 0x149}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r11, r11, r11, r11], &(0x7f0000000640)=[{0x2, 0x5, 0x2, 0xb}, {0x2, 0x5, 0x9, 0x1}, {0x4, 0x2, 0xb, 0x5}, {0x5, 0x3, 0xb, 0xb}, {0x2, 0x5, 0x0, 0x2}], 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOWNER(r11, 0x400454cc, r12) close(r0) 3.694793543s ago: executing program 3 (id=3003): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb"], 0x230}, 0x0) (async, rerun: 32) r1 = socket$kcm(0xa, 0x2, 0x0) (rerun: 32) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000b00)}, 0x12160) (async) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef00142c00fe8000000000000000000000000000000000000000bb000000000000000000000000000c907801000000"], 0x0) (async) getpid() (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x80}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xfffffffb}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300, &(0x7f0000000300)}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000280), &(0x7f0000000480)=[{}, {}, {}], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0xa}) (rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000440)=[r8, r9, 0x0, r10, 0x0, r9], &(0x7f00000002c0)}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2}) 3.293692221s ago: executing program 3 (id=3004): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x3}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 'wg1\x00', 'bridge0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 3.180036906s ago: executing program 0 (id=3005): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000040)={0x4, @raw_data="6b4fff48fdf5402b54d5cca75ff038c90940ccc66a0a9083a62c367de88008c5ba9a70ea366a435af5994c751f8fe4921ca47f49e6660d8f410ef7d498f71fa5f2670de885ab66152f1bee1aaa30d51acc7fe3e10d1e50bb41b9231d26d805596e2393238dc948dc6c5cc18545dc117a778d734a50ccded6b2f06fcea5c2b617d6c4a5dc7770dbf868fbfbb9f12b63b32f2665c9e3d08b0a92f7deaca5d72ea055caf4834613662b3e88b7816153897979b2ae19a62be86c11667bea87ec2e2e571505f10b492a32"}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000980"], 0x34}}, 0x0) (fail_nth: 1) 2.159233737s ago: executing program 0 (id=3006): syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff00052406000105240000000d240f010000000000f2ff000006241a000000042402"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xb9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 2.137432184s ago: executing program 2 (id=3007): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioprio_set$pid(0x1, 0x0, 0x4000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.683928809s ago: executing program 3 (id=3008): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100090a000000000000000000000003000500000000000200000000000000000000000000000003000600000000000a000000ffffffff0000000000000000020013"], 0x50}}, 0x0) 1.191056887s ago: executing program 4 (id=3009): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (fail_nth: 5) 1.190049375s ago: executing program 3 (id=3010): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x42, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001ffc25bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000600", @ANYRES32, @ANYBLOB="07002588", @ANYRES32, @ANYBLOB="08000300"], 0x48}}, 0x0) 719.983137ms ago: executing program 4 (id=3011): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="cf04000000000000000013000000", @ANYRES32=r1, @ANYBLOB="0a008e2d0bfe097600a6634c630906", @ANYBLOB], 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) syz_emit_ethernet(0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000108004500002600000000002f907ae18c3501e0000001000088be00129078010000000a10402d86dd"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 415.670881ms ago: executing program 3 (id=3012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000406010100000000ffffffffffffff040500010007"], 0x44}, 0x1, 0x44000000}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$isdn(r1, &(0x7f00000001c0)={0x22, 0x8, 0xfc, 0x91, 0x91}, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) 0s ago: executing program 0 (id=3013): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x190, 0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r2 = signalfd4(r1, &(0x7f0000000140), 0x8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r3, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r2, r3, 0x0, 0x1000000000006) pselect6(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) execveat(r5, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1100) setsockopt$inet6_int(0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7b00008f28aaf0"}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): rm/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.874829][ T46] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 966.353457][ T9] usb 4-1: USB disconnect, device number 25 [ 966.556682][T17285] netem: unknown loss type 8 [ 966.583799][T17285] netem: change failed [ 966.834249][T16544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.875835][T16544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.213853][T17294] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 967.217496][T16544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.247802][T16544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.433590][T16544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.479939][T16544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.673965][T16544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.729053][T16544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.223535][T17307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 968.298063][T17307] bridge_slave_1: left allmulticast mode [ 968.303776][T17307] bridge_slave_1: left promiscuous mode [ 968.351749][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.458625][T16544] bridge_slave_1: left allmulticast mode [ 968.464355][T16544] bridge_slave_1: left promiscuous mode [ 968.501684][T16544] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.598220][T16544] bridge_slave_0: left allmulticast mode [ 968.627713][T16544] bridge_slave_0: left promiscuous mode [ 968.633567][T16544] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.657740][ T6428] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 968.877956][ T6428] usb 4-1: Using ep0 maxpacket: 16 [ 968.906792][ T6428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 968.948141][ T6428] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 969.010065][ T6428] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 969.097041][ T6428] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 969.126299][ T6428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.157176][ T6428] usb 4-1: Product: syz [ 969.176979][ T6428] usb 4-1: Manufacturer: syz [ 969.200639][ T6428] usb 4-1: SerialNumber: syz [ 969.235688][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 969.250019][ T6428] usb 4-1: config 0 descriptor?? [ 969.256314][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 969.265808][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 969.290218][T17310] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 969.297916][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 969.311964][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 969.321634][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 971.395310][ T54] Bluetooth: hci4: command tx timeout [ 971.680844][T16544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.754320][T16544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.875040][T16544] bond0 (unregistering): Released all slaves [ 971.956015][T16544] bond1 (unregistering): Released all slaves [ 972.095654][T17360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.113556][ T6428] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 972.150870][ T6428] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 972.168644][T17360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.198959][ T6428] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 972.231637][ T6428] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 972.259851][T17355] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2625'. [ 972.306612][ T6428] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 972.372400][ T6428] usb 4-1: USB disconnect, device number 26 [ 972.412196][ T6428] mcba_usb 4-1:0.0 can0: device disconnected [ 973.084579][T16544] hsr_slave_0: left promiscuous mode [ 973.098167][ T6428] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 973.138817][T16544] hsr_slave_1: left promiscuous mode [ 973.222607][T16544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.250180][T16544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.268539][T16544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.268747][ T6428] usb 4-1: device descriptor read/64, error -71 [ 973.282776][T16544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.388982][T16544] veth1_macvtap: left promiscuous mode [ 973.394586][T16544] veth0_macvtap: left promiscuous mode [ 973.439400][T16544] veth1_vlan: left promiscuous mode [ 973.460501][T16544] veth0_vlan: left promiscuous mode [ 973.468055][ T54] Bluetooth: hci4: command tx timeout [ 973.590352][ T6428] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 973.681841][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 973.699667][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 973.740103][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 973.778393][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 973.788518][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 973.798686][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 973.808411][ T6428] usb 4-1: device descriptor read/64, error -71 [ 973.961066][ T6428] usb usb4-port1: attempt power cycle [ 974.417706][ T6428] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 974.488522][ T6428] usb 4-1: device descriptor read/8, error -71 [ 974.777787][ T6428] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 974.829920][ T6428] usb 4-1: device descriptor read/8, error -71 [ 974.952264][ T6428] usb usb4-port1: unable to enumerate USB device [ 975.219468][T17413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.267901][T17413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.548234][ T54] Bluetooth: hci4: command tx timeout [ 975.648049][T17418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.690803][T17418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.724853][T17418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.751396][T17418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.868427][ T54] Bluetooth: hci6: command tx timeout [ 975.974087][T17418] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 976.071167][T17418] kvm: pic: level sensitive irq not supported [ 976.071261][T17418] kvm: pic: non byte read [ 976.109768][T17418] kvm: pic: level sensitive irq not supported [ 976.109852][T17418] kvm: pic: non byte read [ 976.303521][T16544] team0 (unregistering): Port device team_slave_1 removed [ 976.543077][T16544] team0 (unregistering): Port device team_slave_0 removed [ 977.497901][T17435] xt_recent: Unsupported userspace flags (00000064) [ 977.629721][ T54] Bluetooth: hci4: command tx timeout [ 977.947739][ T54] Bluetooth: hci6: command tx timeout [ 978.389303][T17438] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2644'. [ 978.427667][T17438] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 978.441610][T17439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.478372][T17439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.528041][T17438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.558212][T17438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.885303][T17426] netlink: 'syz.3.2641': attribute type 21 has an invalid length. [ 978.909313][T17426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2641'. [ 979.474331][T17328] chnl_net:caif_netlink_parms(): no params data found [ 979.572601][T17452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.618653][T17452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.751733][T17452] fuse: Unknown parameter '0x0000000000000004' [ 980.026510][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2647'. [ 980.035971][ T54] Bluetooth: hci6: command tx timeout [ 980.603111][T17328] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.650679][T17328] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.726508][T17328] bridge_slave_0: entered allmulticast mode [ 980.766736][T17328] bridge_slave_0: entered promiscuous mode [ 980.839878][T17328] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.871767][T17328] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.903629][T17328] bridge_slave_1: entered allmulticast mode [ 980.947785][T17479] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 980.965032][T17328] bridge_slave_1: entered promiscuous mode [ 981.188803][T17484] random: crng reseeded on system resumption [ 981.339935][T17394] chnl_net:caif_netlink_parms(): no params data found [ 981.412474][T17328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.596876][T17328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.108044][ T54] Bluetooth: hci6: command tx timeout [ 982.156283][T17328] team0: Port device team_slave_0 added [ 982.217321][T17328] team0: Port device team_slave_1 added [ 982.518199][ T5287] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 982.660837][T17328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.678303][T17328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.732152][T17328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.760719][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.776790][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.789372][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.804073][T17394] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.816117][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 982.828395][T17394] bridge_slave_0: entered allmulticast mode [ 982.850603][ T5287] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 982.871308][T17394] bridge_slave_0: entered promiscuous mode [ 982.874905][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.907305][ T5287] usb 1-1: config 0 descriptor?? [ 982.922695][T17328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.981855][T17328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.083978][T17328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.128862][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.163792][T17394] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.201879][T17394] bridge_slave_1: entered allmulticast mode [ 983.241292][T17394] bridge_slave_1: entered promiscuous mode [ 983.365585][T17488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.418103][T17488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.519683][T17394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.834430][T17328] hsr_slave_0: entered promiscuous mode [ 983.918474][T17328] hsr_slave_1: entered promiscuous mode [ 983.951255][T17328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 983.967661][T17328] Cannot create hsr debugfs directory [ 984.010864][T17394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.196890][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 984.221961][T17512] netlink: 'syz.1.2654': attribute type 1 has an invalid length. [ 984.236545][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 984.250045][T17513] netlink: 'syz.1.2654': attribute type 1 has an invalid length. [ 984.539256][T17394] team0: Port device team_slave_0 added [ 984.600600][T17522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.664365][T17522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.752553][T17394] team0: Port device team_slave_1 added [ 984.866903][T17522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.940338][T17522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.053230][T17394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.098049][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.238739][T17394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.340589][T17394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.385174][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.564728][T17394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.780997][ T5287] usbhid 1-1:0.0: can't add hid device: -71 [ 985.846875][ T5287] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 985.895013][ T5287] usb 1-1: USB disconnect, device number 120 [ 986.081203][T17394] hsr_slave_0: entered promiscuous mode [ 986.108430][T17394] hsr_slave_1: entered promiscuous mode [ 986.124476][T17394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.143329][T17394] Cannot create hsr debugfs directory [ 986.601543][T17547] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 986.601543][T17547] program syz.0.2663 not setting count and/or reply_len properly [ 987.754846][ T9] IPVS: starting estimator thread 0... [ 987.867905][T17565] IPVS: using max 16 ests per chain, 38400 per kthread [ 987.967278][T17563] tipc: Started in network mode [ 987.998921][T17563] tipc: Node identity ac1414aa, cluster identity 4711 [ 988.061702][T17563] tipc: Enabled bearer , priority 10 [ 988.115619][T17567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2665'. [ 988.598453][T17575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.763123][T17575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.188038][ T6428] tipc: Node number set to 2886997162 [ 989.203368][T17394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.286944][T17328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 989.359451][T17328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 989.518716][T17599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.551383][T17394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.602715][T17599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.632426][T17328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 989.649535][T17599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.671931][T17328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 989.687601][T17599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.792853][T17394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.147904][T17394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.648186][T17328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.759801][T17328] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.968887][T16546] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.976069][T16546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.031741][T17617] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2678'. [ 991.141431][T17613] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 991.183994][T16546] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.191335][T16546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.303634][T17612] program syz.0.2677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.396400][T17394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 991.496522][T17394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 991.608483][T17394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 991.689761][T17328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 991.783896][T17394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 991.963459][T17629] binder: 17627:17629 ioctl c0306201 20000680 returned -14 [ 992.069843][T17328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.444688][T17328] veth0_vlan: entered promiscuous mode [ 992.552833][T17328] veth1_vlan: entered promiscuous mode [ 992.722679][T17394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.816682][T17646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'. [ 992.960858][T17394] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.128817][T17651] FAULT_INJECTION: forcing a failure. [ 993.128817][T17651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 993.186342][T17651] CPU: 0 UID: 0 PID: 17651 Comm: syz.3.2688 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 993.196839][T17651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 993.206939][T17651] Call Trace: [ 993.210269][T17651] [ 993.213244][T17651] dump_stack_lvl+0x241/0x360 [ 993.218068][T17651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.223321][T17651] ? __pfx__printk+0x10/0x10 [ 993.227964][T17651] ? validate_chain+0x11e/0x5900 [ 993.232957][T17651] should_fail_ex+0x3b0/0x4e0 [ 993.237682][T17651] prepare_alloc_pages+0x1da/0x5d0 [ 993.242855][T17651] __alloc_pages_noprof+0x166/0x6c0 [ 993.245715][T17328] veth0_macvtap: entered promiscuous mode [ 993.248088][T17651] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 993.248129][T17651] ? __lock_acquire+0x137a/0x2040 [ 993.248178][T17651] ___kmalloc_large_node+0x8b/0x1d0 [ 993.248211][T17651] __kmalloc_large_node_noprof+0x1a/0x80 [ 993.275546][T17651] ? iovec_from_user+0x87/0x240 [ 993.280449][T17651] __kmalloc_noprof+0x2ae/0x400 [ 993.283196][T17328] veth1_macvtap: entered promiscuous mode [ 993.285334][T17651] iovec_from_user+0x87/0x240 [ 993.295770][T17651] __import_iovec+0x132/0x820 [ 993.300505][T17651] import_iovec+0xeb/0x120 [ 993.304976][T17651] copy_msghdr_from_user+0x52f/0x680 [ 993.310336][T17651] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 993.316213][T17651] ? rcu_read_lock_any_held+0xb7/0x160 [ 993.321744][T17651] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 993.327703][T17651] __sys_sendmsg+0x237/0x390 [ 993.332360][T17651] ? __pfx___sys_sendmsg+0x10/0x10 [ 993.337521][T17651] ? vfs_write+0x7bf/0xc90 [ 993.341998][T17651] ? do_sys_openat2+0x17a/0x1d0 [ 993.346932][T17651] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 993.353323][T17651] ? do_syscall_64+0x100/0x230 [ 993.356691][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.358114][T17651] ? do_syscall_64+0xb6/0x230 [ 993.358151][T17651] do_syscall_64+0xf3/0x230 [ 993.358179][T17651] ? clear_bhb_loop+0x35/0x90 [ 993.358208][T17651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.358233][T17651] RIP: 0033:0x7fdb59f7def9 [ 993.358255][T17651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.358282][T17651] RSP: 002b:00007fdb5ad00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.358315][T17651] RAX: ffffffffffffffda RBX: 00007fdb5a135f80 RCX: 00007fdb59f7def9 [ 993.358334][T17651] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 993.399735][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.412510][T17651] RBP: 00007fdb5ad00090 R08: 0000000000000000 R09: 0000000000000000 [ 993.412532][T17651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.412548][T17651] R13: 0000000000000000 R14: 00007fdb5a135f80 R15: 00007fdb5a25fa28 [ 993.412582][T17651] [ 993.483402][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.483465][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.591368][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.650538][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.696906][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.747561][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.790386][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.855703][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.891556][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.948357][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.989873][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.023872][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.052267][T17328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.109247][T17656] netlink: 'syz.0.2689': attribute type 3 has an invalid length. [ 994.125813][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2689'. [ 994.171236][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2691'. [ 994.247788][T17669] bridge_slave_1: left allmulticast mode [ 994.253504][T17669] bridge_slave_1: left promiscuous mode [ 994.308333][T17669] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.455441][T17669] bridge1: port 1(bridge_slave_1) entered blocking state [ 994.487344][T17669] bridge1: port 1(bridge_slave_1) entered disabled state [ 994.510097][T17669] bridge_slave_1: entered allmulticast mode [ 994.602387][T17669] bridge_slave_1: entered promiscuous mode [ 994.731202][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.771766][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.812594][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.861504][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.905553][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.957159][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.035405][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.055201][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.117930][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.158237][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.190469][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.231458][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.283348][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.321797][T17328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.376000][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.389930][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.397144][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.461860][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.469085][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.470813][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.571585][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.625430][T17328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.682623][T17328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.739276][T17328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.790541][T17328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.094377][T17708] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 996.100956][T17708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 996.250096][T17707] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 996.256691][T17707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 996.258968][T16544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.307382][T16544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.327930][T17708] vhci_hcd vhci_hcd.0: Device attached [ 996.360787][T17707] vhci_hcd vhci_hcd.0: Device attached [ 996.465915][T17394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.498205][T17709] vhci_hcd: connection closed [ 996.498676][ T9441] vhci_hcd: stop threads [ 996.509505][T17710] vhci_hcd: connection closed [ 996.545565][ T9441] vhci_hcd: release socket [ 996.583998][T16544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.607890][ T4645] usb 15-2: new low-speed USB device number 2 using vhci_hcd [ 996.629205][ T9441] vhci_hcd: disconnect device [ 996.647185][T17711] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 996.658137][T16544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.692960][ T9441] vhci_hcd: stop threads [ 996.738702][ T9441] vhci_hcd: release socket [ 996.779813][ T9441] vhci_hcd: disconnect device [ 996.871413][T17394] veth0_vlan: entered promiscuous mode [ 996.930659][T17394] veth1_vlan: entered promiscuous mode [ 997.038015][ T6428] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 997.202150][T17394] veth0_macvtap: entered promiscuous mode [ 997.260055][ T6428] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.289159][T17394] veth1_macvtap: entered promiscuous mode [ 997.315832][ T6428] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 997.353870][ T6428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.449087][ T6428] usb 4-1: Product: syz [ 997.457467][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.480477][ T6428] usb 4-1: Manufacturer: syz [ 997.485140][ T6428] usb 4-1: SerialNumber: syz [ 997.511284][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.532202][ T6428] usb 4-1: config 0 descriptor?? [ 997.562968][ T6428] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 997.573000][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.580086][ T5316] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 997.609599][ T6428] dvb-usb: bulk message failed: -22 (3/0) [ 997.630788][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.664054][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.689019][ T6428] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 997.716484][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.768671][ T6428] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 997.789874][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.828471][ T6428] dvb_usb_umt_010 4-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 997.829706][ T5316] usb 1-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 997.851268][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.902683][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 997.919455][ T5316] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 997.930871][ T5316] usb 1-1: config 16 has no interfaces? [ 997.936629][ T5316] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 997.997784][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.021357][ T5316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.124130][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.233892][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.271162][T17727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.283521][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.325336][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.356061][T17727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.396621][T17394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.521862][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.574658][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.651333][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.707745][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.792146][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.826911][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.849945][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.879134][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.920018][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.966767][T17756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2704'. [ 998.973495][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.024856][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.087715][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.186762][T17394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.271564][T17394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.296909][T17394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.365160][T17760] tipc: Enabling of bearer rejected, failed to enable media [ 999.454919][T17394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.502841][T17394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.506215][T17760] fuse: Bad value for 'fd' [ 999.537373][T17394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.547315][T17394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.916406][ T6428] usb 4-1: USB disconnect, device number 31 [ 1000.154818][ T9441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.210762][ T9441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.374077][T17773] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2706'. [ 1000.436963][T16555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.508935][T16555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.853966][T17773] ebt_limit: overflow, try lower: 570423552/2483027968 [ 1000.861999][T11855] usb 1-1: USB disconnect, device number 121 [ 1001.037077][T17791] netlink: 'syz.1.2708': attribute type 10 has an invalid length. [ 1001.200152][T17798] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 1001.200152][T17798] program syz.2.2709 not setting count and/or reply_len properly [ 1001.392958][T17791] team0: Port device netdevsim0 added [ 1001.677675][T11855] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1001.788143][ T4645] vhci_hcd: vhci_device speed not set [ 1001.958327][T11855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.987263][T11855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.037731][T17817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.053856][T11855] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1002.083627][T11855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.111663][T11855] usb 4-1: config 0 descriptor?? [ 1002.120846][T17817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.368164][ T46] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1002.506871][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 1002.695482][ T46] usb 5-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1002.757592][ T46] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.759585][T17802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.821606][ T46] usb 5-1: config 16 has no interfaces? [ 1002.867371][T17802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.896463][ T46] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1002.977749][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.054226][T17833] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1003.080393][T17802] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1003.473720][T17840] tipc: Enabling of bearer rejected, failed to enable media [ 1003.731557][T11855] uclogic 0003:256C:006D.0016: v1 frame probing failed: -71 [ 1003.761811][T17820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.773866][T11855] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 1003.804620][T11855] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 1003.875543][T17820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.878653][T17840] fuse: Bad value for 'fd' [ 1003.908171][T11855] usb 4-1: USB disconnect, device number 32 [ 1004.246802][T17857] FAULT_INJECTION: forcing a failure. [ 1004.246802][T17857] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.305685][T17857] CPU: 1 UID: 0 PID: 17857 Comm: syz.0.2723 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1004.316370][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1004.326473][T17857] Call Trace: [ 1004.329782][T17857] [ 1004.332737][T17857] dump_stack_lvl+0x241/0x360 [ 1004.337455][T17857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.342705][T17857] ? __pfx__printk+0x10/0x10 [ 1004.347339][T17857] ? fs_reclaim_acquire+0x93/0x140 [ 1004.352505][T17857] ? __pfx___might_resched+0x10/0x10 [ 1004.357851][T17857] should_fail_ex+0x3b0/0x4e0 [ 1004.362658][T17857] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1004.368389][T17857] should_failslab+0xac/0x100 [ 1004.373166][T17857] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1004.378892][T17857] __kmalloc_noprof+0xd8/0x400 [ 1004.383667][T17857] ? kfree+0x4e/0x360 [ 1004.387662][T17857] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1004.393224][T17857] tomoyo_path_number_perm+0x23a/0x880 [ 1004.398699][T17857] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1004.404344][T17857] ? tomoyo_path_number_perm+0x208/0x880 [ 1004.409993][T17857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1004.415990][T17857] ? sb_end_write+0xe9/0x1c0 [ 1004.420598][T17857] ? vfs_write+0x7bf/0xc90 [ 1004.425032][T17857] ? __pfx_vfs_write+0x10/0x10 [ 1004.429823][T17857] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1004.435818][T17857] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1004.442161][T17857] security_file_ioctl+0xc6/0x2a0 [ 1004.447217][T17857] __se_sys_ioctl+0x47/0x170 [ 1004.451817][T17857] do_syscall_64+0xf3/0x230 [ 1004.456326][T17857] ? clear_bhb_loop+0x35/0x90 [ 1004.461016][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.466917][T17857] RIP: 0033:0x7f1b2b97def9 [ 1004.471340][T17857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.490952][T17857] RSP: 002b:00007f1b2c704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.499392][T17857] RAX: ffffffffffffffda RBX: 00007f1b2bb35f80 RCX: 00007f1b2b97def9 [ 1004.507369][T17857] RDX: 0000000000000000 RSI: 0000000000008903 RDI: 0000000000000003 [ 1004.515346][T17857] RBP: 00007f1b2c704090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.523325][T17857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.531294][T17857] R13: 0000000000000000 R14: 00007f1b2bb35f80 R15: 00007f1b2bc5fa28 [ 1004.539285][T17857] [ 1005.340097][T17874] FAULT_INJECTION: forcing a failure. [ 1005.340097][T17874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.436025][T17874] CPU: 0 UID: 0 PID: 17874 Comm: syz.2.2727 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1005.440018][T17857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1005.446504][T17874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1005.463281][T17874] Call Trace: [ 1005.466592][T17874] [ 1005.469555][T17874] dump_stack_lvl+0x241/0x360 [ 1005.474286][T17874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.479533][T17874] ? __pfx__printk+0x10/0x10 [ 1005.484178][T17874] ? snprintf+0xda/0x120 [ 1005.488473][T17874] should_fail_ex+0x3b0/0x4e0 [ 1005.493204][T17874] _copy_to_user+0x2f/0xb0 [ 1005.497667][T17874] simple_read_from_buffer+0xca/0x150 [ 1005.503089][T17874] proc_fail_nth_read+0x1e9/0x250 [ 1005.508162][T17874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1005.513751][T17874] ? rw_verify_area+0x55e/0x6f0 [ 1005.518638][T17874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1005.524231][T17874] vfs_read+0x201/0xbc0 [ 1005.528441][T17874] ? __pfx_vfs_read+0x10/0x10 [ 1005.533163][T17874] ? do_sys_openat2+0x17a/0x1d0 [ 1005.538079][T17874] ? __fdget_pos+0x265/0x320 [ 1005.542724][T17874] ksys_read+0x1a0/0x2c0 [ 1005.547001][T17874] ? __pfx_ksys_read+0x10/0x10 [ 1005.551776][T17874] ? do_syscall_64+0x100/0x230 [ 1005.556546][T17874] ? do_syscall_64+0xb6/0x230 [ 1005.561235][T17874] do_syscall_64+0xf3/0x230 [ 1005.565746][T17874] ? clear_bhb_loop+0x35/0x90 [ 1005.570429][T17874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.576324][T17874] RIP: 0033:0x7f816297c93c [ 1005.580745][T17874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1005.600361][T17874] RSP: 002b:00007f81637b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1005.608787][T17874] RAX: ffffffffffffffda RBX: 00007f8162b35f80 RCX: 00007f816297c93c [ 1005.616758][T17874] RDX: 000000000000000f RSI: 00007f81637b50a0 RDI: 0000000000000004 [ 1005.624731][T17874] RBP: 00007f81637b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.632712][T17874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.640687][T17874] R13: 0000000000000000 R14: 00007f8162b35f80 R15: 00007f8162c5fa28 [ 1005.648694][T17874] [ 1006.040543][T17877] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1006.097866][ T29] audit: type=1326 audit(1726571821.221:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1006.208842][ T29] audit: type=1326 audit(1726571821.221:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1006.287448][ T29] audit: type=1326 audit(1726571821.321:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1006.337919][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1006.384440][ T29] audit: type=1326 audit(1726571821.321:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1006.487238][ T29] audit: type=1326 audit(1726571821.321:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1006.511825][ T25] usb 4-1: device descriptor read/64, error -71 [ 1006.645039][ T29] audit: type=1326 audit(1726571821.321:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1006.743845][ T29] audit: type=1326 audit(1726571821.321:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1006.835080][ T29] audit: type=1326 audit(1726571821.321:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1006.858509][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1006.948242][ T29] audit: type=1326 audit(1726571821.331:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1007.037678][ T25] usb 4-1: device descriptor read/64, error -71 [ 1007.083069][ T29] audit: type=1326 audit(1726571821.331:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17873 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1007.188118][ T25] usb usb4-port1: attempt power cycle [ 1007.372639][T17892] FAULT_INJECTION: forcing a failure. [ 1007.372639][T17892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.463227][T17892] CPU: 0 UID: 0 PID: 17892 Comm: syz.0.2732 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1007.473714][T17892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1007.483804][T17892] Call Trace: [ 1007.487104][T17892] [ 1007.490048][T17892] dump_stack_lvl+0x241/0x360 [ 1007.494751][T17892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.499974][T17892] ? __pfx__printk+0x10/0x10 [ 1007.504582][T17892] ? __pfx_lock_release+0x10/0x10 [ 1007.509648][T17892] ? __lock_acquire+0x137a/0x2040 [ 1007.514699][T17892] should_fail_ex+0x3b0/0x4e0 [ 1007.519402][T17892] _copy_from_user+0x2f/0xe0 [ 1007.524060][T17892] kstrtouint_from_user+0xc6/0x190 [ 1007.529194][T17892] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1007.534948][T17892] ? __pfx_lock_acquire+0x10/0x10 [ 1007.540010][T17892] proc_fail_nth_write+0xaa/0x2d0 [ 1007.545053][T17892] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1007.550976][T17892] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1007.556631][T17892] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1007.562282][T17892] vfs_write+0x29c/0xc90 [ 1007.566551][T17892] ? __pfx_vfs_write+0x10/0x10 [ 1007.571337][T17892] ? __fget_files+0x3f3/0x470 [ 1007.576045][T17892] ? __fdget_pos+0x24e/0x320 [ 1007.580656][T17892] ksys_write+0x1a0/0x2c0 [ 1007.585004][T17892] ? __pfx_ksys_write+0x10/0x10 [ 1007.589878][T17892] ? do_syscall_64+0x100/0x230 [ 1007.594672][T17892] ? do_syscall_64+0xb6/0x230 [ 1007.599372][T17892] do_syscall_64+0xf3/0x230 [ 1007.603892][T17892] ? clear_bhb_loop+0x35/0x90 [ 1007.608588][T17892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.614494][T17892] RIP: 0033:0x7f1b2b97c9df [ 1007.618920][T17892] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1007.638596][T17892] RSP: 002b:00007f1b2c704030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1007.647034][T17892] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b2b97c9df [ 1007.655022][T17892] RDX: 0000000000000001 RSI: 00007f1b2c7040a0 RDI: 0000000000000004 [ 1007.663007][T17892] RBP: 00007f1b2c704090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.670990][T17892] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1007.678972][T17892] R13: 0000000000000000 R14: 00007f1b2bb35f80 R15: 00007f1b2bc5fa28 [ 1007.686994][T17892] [ 1007.767687][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1007.808484][ T25] usb 4-1: device descriptor read/8, error -71 [ 1008.087668][ T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1008.148519][ T25] usb 4-1: device descriptor read/8, error -71 [ 1008.289236][ T5287] usb 5-1: USB disconnect, device number 114 [ 1008.298197][ T25] usb usb4-port1: unable to enumerate USB device [ 1008.946697][T17907] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1008.978251][ T25] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1009.229357][ T25] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1009.256214][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.316647][ T25] usb 1-1: config 0 descriptor?? [ 1009.344070][ T25] cp210x 1-1:0.0: cp210x converter detected [ 1009.573065][ T25] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1009.819407][T17918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1009.879530][T17918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1009.958141][T17918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1009.990798][T17918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2740'. [ 1010.133750][T17929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.220101][T17929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.279398][T17927] tipc: Enabled bearer , priority 10 [ 1010.408191][T17933] netem: change failed [ 1010.467696][ T4645] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1010.660305][ T4645] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1010.721223][ T4645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.779382][ T4645] usb 4-1: config 0 descriptor?? [ 1010.904690][T17939] netlink: 'syz.1.2747': attribute type 29 has an invalid length. [ 1010.960046][T17941] netlink: 'syz.1.2747': attribute type 29 has an invalid length. [ 1011.164970][T17941] netlink: 'syz.1.2747': attribute type 29 has an invalid length. [ 1011.277820][T11855] tipc: Node number set to 3773759489 [ 1011.628069][ T4645] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 1011.781022][ T4645] usb 1-1: USB disconnect, device number 122 [ 1011.810075][ T4645] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1011.869340][ T4645] cp210x 1-1:0.0: device disconnected [ 1013.829661][T17981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.938293][T17981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.379947][T17985] fuse: Unknown parameter 'fA' [ 1014.505871][T17989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.537130][T17989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.890826][T11855] usb 4-1: USB disconnect, device number 37 [ 1015.448398][T11855] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1015.478567][T18006] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1015.680722][T11855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1015.737683][T11855] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1015.772544][T11855] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1015.789081][T18012] fuse: Unknown parameter 'group_i00000000000000000000' [ 1015.830440][T11855] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1015.850714][T11855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.859270][T11855] usb 4-1: Product: syz [ 1015.863582][T11855] usb 4-1: Manufacturer: syz [ 1015.869296][T11855] usb 4-1: SerialNumber: syz [ 1015.887532][T11855] hub 4-1:1.0: bad descriptor, ignoring hub [ 1015.917841][T11855] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1016.091955][T11855] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1016.327937][ T6428] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1016.629870][ T6428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.675830][ T6428] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1016.708947][ T6428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.767841][ T6428] usb 5-1: config 0 descriptor?? [ 1017.071180][ T5303] usb 4-1: USB disconnect, device number 38 [ 1017.111496][ T5303] usblp0: removed [ 1017.574955][ T6428] hid-multitouch 0003:1FD2:6007.0017: unbalanced collection at end of report description [ 1017.630180][ T6428] hid-multitouch 0003:1FD2:6007.0017: probe with driver hid-multitouch failed with error -22 [ 1017.803794][T18048] netlink: 'syz.0.2780': attribute type 4 has an invalid length. [ 1018.039252][T18016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.132969][T18016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.398295][ T5303] usb 5-1: USB disconnect, device number 115 [ 1018.618463][T11855] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1018.830260][T11855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1018.883632][T11855] usb 1-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=17.01 [ 1018.913264][T11855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.941647][T11855] usb 1-1: Product: syz [ 1018.960794][T11855] usb 1-1: Manufacturer: syz [ 1018.976299][T11855] usb 1-1: SerialNumber: syz [ 1018.993131][T11855] usb 1-1: config 0 descriptor?? [ 1019.024523][T11855] f81232 1-1:0.0: f81534a converter detected [ 1019.236024][T11855] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1019.294671][T11855] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1019.344664][T11855] usb 1-1: USB disconnect, device number 123 [ 1019.366401][T11855] f81232 1-1:0.0: device disconnected [ 1019.740325][T18070] sctp: [Deprecated]: syz.2.2784 (pid 18070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1019.740325][T18070] Use struct sctp_sack_info instead [ 1019.907483][T18072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2785'. [ 1020.455660][T18083] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1021.258751][T18085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.328349][T18085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.436726][T16546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.750463][T16546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.944659][T18116] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1022.978073][T16546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.312982][T16546] bond0: (slave netdevsim0): Releasing backup interface [ 1023.361661][T16546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.850524][T16546] dummy0: left allmulticast mode [ 1023.871568][T16546] dummy0: left promiscuous mode [ 1023.887929][T11855] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1023.900612][T16546] bridge0: port 2(dummy0) entered disabled state [ 1023.974995][T16546] bridge_slave_0: left allmulticast mode [ 1023.988987][T16546] bridge_slave_0: left promiscuous mode [ 1023.995401][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1024.019811][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1024.038316][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1024.044949][T16546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.056654][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1024.064582][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1024.072217][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1024.108400][T11855] usb 5-1: Using ep0 maxpacket: 16 [ 1024.142920][T11855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.192161][T16546] bridge_slave_1: left allmulticast mode [ 1024.205517][T16546] bridge_slave_1: left promiscuous mode [ 1024.213695][T11855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.219452][T16546] bridge2: port 1(bridge_slave_1) entered disabled state [ 1024.259069][T11855] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1024.299892][T11855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.345445][T11855] usb 5-1: config 0 descriptor?? [ 1024.658696][T18138] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2804'. [ 1024.660613][T18135] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2791'. [ 1025.004231][T18147] program syz.0.2806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1025.332026][T11855] hid (null): global environment stack underflow [ 1025.358814][T11855] bigben 0003:146B:0902.0018: unexpected rdesc, please submit for review [ 1025.410986][T11855] bigben 0003:146B:0902.0018: unknown main item tag 0x0 [ 1025.436166][T11855] bigben 0003:146B:0902.0018: global environment stack underflow [ 1025.445396][T11855] bigben 0003:146B:0902.0018: item 0 2 1 11 parsing failed [ 1025.457421][T11855] bigben 0003:146B:0902.0018: parse failed [ 1025.464042][T11855] bigben 0003:146B:0902.0018: probe with driver bigben failed with error -22 [ 1025.477821][T18156] fuse: Bad value for 'fd' [ 1026.192980][T16291] Bluetooth: hci0: command tx timeout [ 1026.199985][T16291] Bluetooth: hci2: command 0x0406 tx timeout [ 1027.021893][T16546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.048179][T16546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.072635][T16546] bond0 (unregistering): Released all slaves [ 1027.349207][T16546] tipc: Disabling bearer [ 1027.391080][T16546] tipc: Left network mode [ 1027.537366][ T6428] usb 5-1: USB disconnect, device number 116 [ 1028.277815][ T54] Bluetooth: hci0: command tx timeout [ 1028.757279][T16546] hsr_slave_0: left promiscuous mode [ 1028.791152][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1028.791174][ T29] audit: type=1326 audit(1726571843.941:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1028.887966][T16546] hsr_slave_1: left promiscuous mode [ 1028.918814][T16546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.929637][ T29] audit: type=1326 audit(1726571843.941:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1028.965833][T16546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.002687][T16546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.012876][T16546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.072829][ T29] audit: type=1326 audit(1726571843.941:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1029.193214][ T29] audit: type=1326 audit(1726571843.941:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1029.198811][T16546] veth1_macvtap: left promiscuous mode [ 1029.241513][ T5289] kworker/0:4 (5289) used greatest stack depth: 18536 bytes left [ 1029.297800][ T29] audit: type=1326 audit(1726571843.941:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1029.320197][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.328199][T16546] veth0_macvtap: left promiscuous mode [ 1029.351598][T16546] veth0_vlan: left promiscuous mode [ 1029.439313][ T29] audit: type=1326 audit(1726571843.951:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1029.560105][T18195] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1029.567847][ T29] audit: type=1326 audit(1726571843.951:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1029.723076][ T29] audit: type=1326 audit(1726571843.951:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1029.828867][ T29] audit: type=1326 audit(1726571843.951:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1029.851430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.945114][T16291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1029.960084][T16291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1029.970159][T16291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1029.979468][T16291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1029.989400][T16291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1029.997196][T16291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1030.011600][ T29] audit: type=1326 audit(1726571843.951:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9df7def9 code=0x7ffc0000 [ 1030.361669][ T54] Bluetooth: hci0: command tx timeout [ 1030.486810][T18203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.707785][T18203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.107802][ T54] Bluetooth: hci4: command tx timeout [ 1032.151135][T16546] team0 (unregistering): Port device team_slave_1 removed [ 1032.412184][T16546] team0 (unregistering): Port device team_slave_0 removed [ 1032.428948][ T54] Bluetooth: hci0: command tx timeout [ 1034.216214][ T54] Bluetooth: hci4: command tx timeout [ 1035.026119][T18132] chnl_net:caif_netlink_parms(): no params data found [ 1035.107863][T18196] netlink: 'syz.4.2814': attribute type 8 has an invalid length. [ 1035.886160][T18221] tipc: Enabling of bearer rejected, already enabled [ 1035.955184][T18221] fuse: Bad value for 'fd' [ 1036.228677][T18132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.262441][T18132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.277767][ T54] Bluetooth: hci4: command tx timeout [ 1036.328254][T18132] bridge_slave_0: entered allmulticast mode [ 1036.363044][T18132] bridge_slave_0: entered promiscuous mode [ 1036.487873][T18132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.515968][T18132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.555146][T18132] bridge_slave_1: entered allmulticast mode [ 1036.605684][T18132] bridge_slave_1: entered promiscuous mode [ 1036.771181][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 1036.842174][T18236] bridge1: port 1(bridge_slave_1) entered blocking state [ 1036.880137][T18236] bridge1: port 1(bridge_slave_1) entered disabled state [ 1036.908934][T18236] bridge_slave_1: entered allmulticast mode [ 1036.937902][T18236] bridge_slave_1: entered promiscuous mode [ 1037.066095][T18132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.326948][T18132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.351887][T16546] IPVS: stop unused estimator thread 0... [ 1037.803549][T18132] team0: Port device team_slave_0 added [ 1037.917668][ T6428] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1037.927335][T18132] team0: Port device team_slave_1 added [ 1038.155096][T18262] netlink: 'syz.0.2828': attribute type 10 has an invalid length. [ 1038.239392][ T6428] usb 5-1: Using ep0 maxpacket: 8 [ 1038.260949][T18262] team0: Port device netdevsim0 added [ 1038.348765][ T54] Bluetooth: hci4: command tx timeout [ 1038.374979][ T6428] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.464959][ T6428] usb 5-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 1038.518423][T18132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.545352][ T6428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.566204][T18132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.608706][ T6428] usb 5-1: config 0 descriptor?? [ 1038.691268][T18132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.739023][ T6428] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1038.757005][T18132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.775810][ T6428] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1038.826892][T18132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.998797][T18278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.021183][T18132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.062715][T18278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.245770][T18278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.331433][T18278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.385670][T16546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.413945][ T6428] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 1039.429152][ T6428] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1039.457100][ T6428] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1039.537871][ T6428] usb 5-1: USB disconnect, device number 117 [ 1039.853239][T16546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.938704][T18201] chnl_net:caif_netlink_parms(): no params data found [ 1040.523021][T16546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.045630][T16546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.248376][T18132] hsr_slave_0: entered promiscuous mode [ 1041.286561][T18132] hsr_slave_1: entered promiscuous mode [ 1041.318632][T18132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.346953][T18132] Cannot create hsr debugfs directory [ 1041.709548][T18201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.734572][T18201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.760022][T18201] bridge_slave_0: entered allmulticast mode [ 1041.792730][T18201] bridge_slave_0: entered promiscuous mode [ 1041.909930][T18201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.941314][T18201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.972425][T18201] bridge_slave_1: entered allmulticast mode [ 1042.006253][T18201] bridge_slave_1: entered promiscuous mode [ 1042.350650][T18201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.505937][T18201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.664309][T16546] bridge_slave_1: left allmulticast mode [ 1042.742388][T16546] bridge_slave_1: left promiscuous mode [ 1042.781282][T16546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.835144][T16546] bridge_slave_0: left allmulticast mode [ 1042.878899][T16546] bridge_slave_0: left promiscuous mode [ 1042.906892][T16546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.009913][T16546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.048160][T16546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.082850][T16546] bond0 (unregistering): Released all slaves [ 1045.238584][T18201] team0: Port device team_slave_0 added [ 1045.640621][T18201] team0: Port device team_slave_1 added [ 1045.887274][T18201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.917261][T18201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.043418][T18201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.364809][T18201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.397944][T18201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.423969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.567896][T18335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2844'. [ 1046.568041][T18201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.085365][T18337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.131442][T18337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.131483][T16546] hsr_slave_0: left promiscuous mode [ 1047.139639][ T25] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1047.200372][T16546] hsr_slave_1: left promiscuous mode [ 1047.237828][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2845'. [ 1047.273147][T16546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.308233][T16546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.329053][T16546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.371034][ T25] usb 5-1: config 0 has no interfaces? [ 1047.376553][ T25] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1047.397764][T16546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.431350][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.489444][ T25] usb 5-1: config 0 descriptor?? [ 1047.514604][T16546] veth1_macvtap: left promiscuous mode [ 1047.567765][T16546] veth0_macvtap: left promiscuous mode [ 1047.609742][T16546] veth1_vlan: left promiscuous mode [ 1047.637310][T16546] veth0_vlan: left promiscuous mode [ 1048.877847][T18347] xt_socket: unknown flags 0x50 [ 1050.736087][T18358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.898213][T18358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.006921][T16546] team0 (unregistering): Port device team_slave_1 removed [ 1051.301043][T16546] team0 (unregistering): Port device team_slave_0 removed [ 1054.834089][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.842485][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.438629][ T9] usb 5-1: USB disconnect, device number 118 [ 1055.449272][T18355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2850'. [ 1055.571180][T18201] hsr_slave_0: entered promiscuous mode [ 1055.628504][T18201] hsr_slave_1: entered promiscuous mode [ 1055.663428][T18201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.671232][T18201] Cannot create hsr debugfs directory [ 1056.157732][ T25] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1056.396933][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.458971][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1056.498312][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1056.548710][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1056.637681][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1056.672073][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.704592][ T25] usb 5-1: config 0 descriptor?? [ 1056.728912][T18365] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1057.218867][ T5287] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1057.450244][ T5287] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1057.497446][ T5287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.537242][ T5287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1057.579178][ T5287] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1057.623809][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.670719][ T5287] usb 1-1: Product: syz [ 1057.674992][ T5287] usb 1-1: Manufacturer: syz [ 1057.685769][T18132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1057.717902][ T5287] usb 1-1: SerialNumber: syz [ 1057.771595][T18132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1057.784732][T18380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.874699][T18132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1057.950609][T18380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.995405][T18132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1058.041351][T18380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.100710][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 1058.108990][T18380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.135943][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1058.227091][ T25] usb 5-1: USB disconnect, device number 119 [ 1058.852801][T18384] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1059.043798][T18384] kvm: pic: level sensitive irq not supported [ 1059.045542][T18384] kvm: pic: non byte read [ 1059.109023][T18384] kvm: pic: level sensitive irq not supported [ 1059.111443][T18384] kvm: pic: non byte read [ 1059.125621][T18384] kvm: pic: level sensitive irq not supported [ 1059.130049][T18384] kvm: pic: non byte read [ 1059.206335][T18384] kvm: pic: level sensitive irq not supported [ 1059.222149][T18384] kvm: pic: non byte read [ 1059.408078][T18384] kvm: pic: level sensitive irq not supported [ 1059.408173][T18384] kvm: pic: non byte read [ 1059.564049][T18384] kvm: pic: level sensitive irq not supported [ 1059.564777][T18384] kvm: pic: non byte read [ 1060.154590][T18132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.156033][ T5287] usb 1-1: 0:2 : does not exist [ 1060.358062][ T5287] usb 1-1: USB disconnect, device number 124 [ 1060.608311][T18132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.658680][T18362] udevd[18362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.968540][T16546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.975849][T16546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.076876][T18201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1061.169721][T18201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1061.329788][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.337029][T16550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.475065][T18201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1061.579467][T18201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1061.811619][T18132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1062.032538][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 1062.071342][T18132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.305728][T18132] veth0_vlan: entered promiscuous mode [ 1062.415098][T18421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1062.468497][T18423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1062.565740][T18132] veth1_vlan: entered promiscuous mode [ 1062.605635][T18421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1062.922037][T18201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.930234][ T5287] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1062.981193][T18132] veth0_macvtap: entered promiscuous mode [ 1063.086286][T18132] veth1_macvtap: entered promiscuous mode [ 1063.120147][T18432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.139361][ T5287] usb 1-1: Using ep0 maxpacket: 8 [ 1063.188343][ T5287] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1063.199390][ T5287] usb 1-1: config 131 has an invalid interface number: 65 but max is 0 [ 1063.223913][T18201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.238801][T18432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.268040][ T5287] usb 1-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 1063.311521][ T5287] usb 1-1: config 131 has no interface number 0 [ 1063.357403][ T5287] usb 1-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 1063.382374][T16546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.389549][T16546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.408073][ T5287] usb 1-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 1063.426388][T16546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.433651][T16546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.442370][ T5287] usb 1-1: config 131 interface 65 has no altsetting 0 [ 1063.492661][ T5287] usb 1-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 1063.502226][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.517634][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.527778][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.611476][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.722624][T18436] fuse: Bad value for 'fd' [ 1063.738601][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.816191][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.857712][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.877267][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.917988][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.935209][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.955588][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.991498][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.036898][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.100871][T18132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.207281][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.242203][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.282771][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.326857][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.366147][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.407626][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.439885][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.493263][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.549859][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.596746][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.642291][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.691255][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.730163][T18132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.814069][T18132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.852223][T18132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.887130][T18132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.935787][T18132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.303719][ T5287] ti_usb_3410_5052 1-1:131.65: required endpoints missing [ 1065.419803][ T5287] usb 1-1: USB disconnect, device number 125 [ 1065.658434][T18201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.701115][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.753098][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.035117][ T9441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.098201][ T9441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.221187][T18201] veth0_vlan: entered promiscuous mode [ 1066.311292][T18201] veth1_vlan: entered promiscuous mode [ 1066.489219][T18201] veth0_macvtap: entered promiscuous mode [ 1066.532304][T18201] veth1_macvtap: entered promiscuous mode [ 1066.700092][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.797436][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.857809][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.920542][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.968364][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.035698][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.104700][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.158128][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.217760][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.259634][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.292422][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.407966][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.451107][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.511245][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.594988][T18201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.731682][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.853163][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.897954][ T5287] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1067.953697][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.023593][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.092295][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.109391][ T5287] usb 4-1: device descriptor read/64, error -71 [ 1068.126721][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.172394][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.196794][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.217683][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.252333][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.297803][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.342422][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.387918][ T5287] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1068.395733][T18201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.447810][T18201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.476238][T18201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.562955][T18201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.588120][ T5287] usb 4-1: device descriptor read/64, error -71 [ 1068.617641][ T5303] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1068.627772][T18201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.636560][T18201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.677863][T18201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.711352][ T5287] usb usb4-port1: attempt power cycle [ 1068.861664][ T5303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1068.952493][ T5303] usb 5-1: config 3 has an invalid interface number: 232 but max is 0 [ 1068.997559][ T5303] usb 5-1: config 3 has no interface number 0 [ 1069.006770][ T5303] usb 5-1: config 3 interface 232 altsetting 16 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1069.085047][ T5303] usb 5-1: config 3 interface 232 has no altsetting 0 [ 1069.138166][ T5303] usb 5-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice=bf.d3 [ 1069.158095][ T9441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.188000][ T5287] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1069.217884][ T9441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.222617][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.253201][ T5287] usb 4-1: device descriptor read/8, error -71 [ 1069.267800][ T5303] usb 5-1: Product: syz [ 1069.274263][ T5303] usb 5-1: Manufacturer: syz [ 1069.304773][ T5303] usb 5-1: SerialNumber: syz [ 1069.378816][T16548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.435658][T16548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.577666][ T5287] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1069.678377][ T5287] usb 4-1: device descriptor read/8, error -71 [ 1069.828423][ T5287] usb usb4-port1: unable to enumerate USB device [ 1069.929879][T18503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.055963][T18503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.159057][T18520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.246427][T18520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.585992][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1071.749273][T18541] batadv1: entered allmulticast mode [ 1071.841793][T18541] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1071.933564][T18540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1071.962397][ T5303] usb 5-1: USB disconnect, device number 120 [ 1072.469575][T18362] udevd[18362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.502437][T18562] program syz.1.2888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.637700][ T5287] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1072.850099][ T5287] usb 1-1: config 0 has no interfaces? [ 1072.887789][ T5287] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1072.896856][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.016068][ T5287] usb 1-1: config 0 descriptor?? [ 1073.398383][ T4645] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1073.586539][ T4645] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1073.586563][ T4645] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.586579][ T4645] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1073.614007][ T4645] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1073.614048][ T4645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.614074][ T4645] usb 4-1: Product: syz [ 1073.614093][ T4645] usb 4-1: Manufacturer: syz [ 1073.614111][ T4645] usb 4-1: SerialNumber: syz [ 1074.250475][T11855] usb 1-1: USB disconnect, device number 126 [ 1074.471637][T18594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.573441][T18594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.442879][ T4645] usb 4-1: 0:2 : does not exist [ 1076.568398][ T4645] usb 4-1: USB disconnect, device number 43 [ 1076.724033][T18622] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 1076.733911][T18622] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 1076.808972][T18362] udevd[18362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.868938][T18623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2901'. [ 1077.846988][T18647] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2907'. [ 1077.941427][T18647] openvswitch: netlink: Tunnel attr 0 has unexpected len 3052 expected 8 [ 1079.617841][ T4645] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1079.852161][ T4645] usb 5-1: New USB device found, idVendor=0df6, idProduct=004b, bcdDevice=56.d7 [ 1079.887619][ T4645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.930393][ T4645] usb 5-1: Product: syz [ 1079.934626][ T4645] usb 5-1: Manufacturer: syz [ 1080.035126][ T4645] usb 5-1: SerialNumber: syz [ 1080.071094][ T4645] usb 5-1: config 0 descriptor?? [ 1080.087126][ T4645] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1080.087155][ T4645] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1080.621656][ T4645] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 1080.657859][ T4645] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1080.727179][ T4645] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1080.912080][ T4645] usb 5-1: USB disconnect, device number 121 [ 1081.212945][T18719] FAULT_INJECTION: forcing a failure. [ 1081.212945][T18719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.307219][T18719] CPU: 1 UID: 0 PID: 18719 Comm: syz.3.2922 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1081.317725][T18719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1081.327827][T18719] Call Trace: [ 1081.331144][T18719] [ 1081.334118][T18719] dump_stack_lvl+0x241/0x360 [ 1081.338946][T18719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.344202][T18719] ? __pfx__printk+0x10/0x10 [ 1081.348846][T18719] ? __pfx_lock_release+0x10/0x10 [ 1081.353940][T18719] should_fail_ex+0x3b0/0x4e0 [ 1081.358674][T18719] _copy_from_user+0x2f/0xe0 [ 1081.363312][T18719] memdup_user+0x64/0xc0 [ 1081.367683][T18719] strndup_user+0x68/0xc0 [ 1081.372035][T18719] __se_sys_fsconfig+0x50d/0xf70 [ 1081.376999][T18719] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1081.382478][T18719] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1081.388480][T18719] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1081.394836][T18719] ? do_syscall_64+0x100/0x230 [ 1081.399614][T18719] ? __x64_sys_fsconfig+0x20/0xc0 [ 1081.404660][T18719] do_syscall_64+0xf3/0x230 [ 1081.409178][T18719] ? clear_bhb_loop+0x35/0x90 [ 1081.413871][T18719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.419774][T18719] RIP: 0033:0x7fe6c997def9 [ 1081.424200][T18719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.443825][T18719] RSP: 002b:00007fe6ca7bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1081.452251][T18719] RAX: ffffffffffffffda RBX: 00007fe6c9b35f80 RCX: 00007fe6c997def9 [ 1081.460232][T18719] RDX: 0000000020000040 RSI: 0000000000000005 RDI: 0000000000000003 [ 1081.468218][T18719] RBP: 00007fe6ca7bb090 R08: 0000000000000004 R09: 0000000000000000 [ 1081.476238][T18719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.484217][T18719] R13: 0000000000000000 R14: 00007fe6c9b35f80 R15: 00007fe6c9c5fa28 [ 1081.492299][T18719] [ 1082.339165][T18737] xt_l2tp: invalid flags combination: 0 [ 1082.847619][ T8] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1083.061237][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1083.146364][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1083.190158][ T8] usb 5-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 1083.220189][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.253301][ T8] usb 5-1: Product: syz [ 1083.277575][ T8] usb 5-1: Manufacturer: syz [ 1083.282254][ T8] usb 5-1: SerialNumber: syz [ 1083.346303][ T8] usb 5-1: config 0 descriptor?? [ 1083.381598][ T8] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 1083.437785][ T8] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1083.446888][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1083.699308][ T5316] usb 5-1: USB disconnect, device number 122 [ 1084.389816][ T6428] usb 2-1: USB disconnect, device number 108 [ 1085.062093][ T1064] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.197689][ T5287] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1085.264040][T18767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2937'. [ 1085.367587][T18767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2937'. [ 1085.376589][T18767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2937'. [ 1085.436252][ T5287] usb 4-1: Using ep0 maxpacket: 16 [ 1085.586945][ T5287] usb 4-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=8d.4d [ 1085.609970][T18767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2937'. [ 1085.657656][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.707848][ T5287] usb 4-1: Product: syz [ 1085.726591][ T5287] usb 4-1: Manufacturer: syz [ 1085.753872][ T1064] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.792214][ T5287] usb 4-1: SerialNumber: syz [ 1085.820344][ T5287] usb 4-1: config 0 descriptor?? [ 1085.902392][ T5287] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1085.947879][ T5287] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1086.445156][ T1064] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.525492][ T5287] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 1086.563833][ T5287] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1086.605543][ T5287] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1086.828362][T18780] fuse: Bad value for 'fd' [ 1087.124958][ T1064] team0: Port device netdevsim0 removed [ 1087.162930][ T1064] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.323292][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'. [ 1087.850550][ T1064] bridge_slave_0: left allmulticast mode [ 1087.898561][ T1064] bridge_slave_0: left promiscuous mode [ 1087.951284][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.063734][ T1064] bridge_slave_1: left allmulticast mode [ 1088.085579][ T1064] bridge_slave_1: left promiscuous mode [ 1088.109613][ T1064] bridge1: port 1(bridge_slave_1) entered disabled state [ 1088.611985][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 1088.612007][ T29] audit: type=1326 audit(1726571903.771:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18789 comm="syz.2.2944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676637def9 code=0x0 [ 1088.757337][ T29] audit: type=1326 audit(1726571903.801:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18789 comm="syz.2.2944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676637def9 code=0x0 [ 1089.787396][ T29] audit: type=1326 audit(1726571904.941:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18789 comm="syz.2.2944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676637def9 code=0x0 [ 1090.175200][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1090.189623][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1090.237878][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1090.247654][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1090.255427][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1090.264049][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1091.628626][ T4645] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1091.929559][ T4645] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1091.948559][ T4645] usb 1-1: config 0 has no interface number 0 [ 1091.954757][ T4645] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.028113][ T4645] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.068950][ T4645] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1092.108000][ T4645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.150372][ T4645] usb 1-1: config 0 descriptor?? [ 1092.427920][T16291] Bluetooth: hci5: command tx timeout [ 1092.928471][ T1064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.969945][ T1064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.995400][ T1064] bond0 (unregistering): Released all slaves [ 1093.220299][ T6428] usb 4-1: USB disconnect, device number 44 [ 1093.508520][ T1064] tipc: Disabling bearer [ 1093.526885][ T1064] tipc: Left network mode [ 1094.151825][ T4645] usbhid 1-1:0.2: can't add hid device: -71 [ 1094.214183][ T4645] usbhid 1-1:0.2: probe with driver usbhid failed with error -71 [ 1094.251305][ T4645] usb 1-1: USB disconnect, device number 127 [ 1094.487669][T11855] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1094.508145][T16291] Bluetooth: hci5: command tx timeout [ 1094.679759][T11855] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1094.714627][T11855] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1094.745222][T11855] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1094.774065][T11855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.819492][T18835] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1094.853899][T11855] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1094.939066][T17190] syz.4.2573: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1095.010303][T18845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2957'. [ 1095.066933][T17190] CPU: 1 UID: 0 PID: 17190 Comm: syz.4.2573 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1095.077431][T17190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1095.087533][T17190] Call Trace: [ 1095.090864][T17190] [ 1095.093802][T17190] dump_stack_lvl+0x241/0x360 [ 1095.098497][T17190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1095.103697][T17190] ? __pfx__printk+0x10/0x10 [ 1095.108310][T17190] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1095.114730][T17190] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1095.121247][T17190] warn_alloc+0x278/0x410 [ 1095.125595][T17190] ? __pfx_warn_alloc+0x10/0x10 [ 1095.130484][T17190] ? relay_open_buf+0x231/0xd60 [ 1095.135338][T17190] ? __get_vm_area_node+0x23d/0x270 [ 1095.140544][T17190] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 1095.146463][T17190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1095.152795][T17190] ? trace_kmalloc+0x1f/0xd0 [ 1095.157388][T17190] ? __kmalloc_node_noprof+0x247/0x440 [ 1095.162853][T17190] ? __kvmalloc_node_noprof+0x72/0x190 [ 1095.168428][T17190] __kvmalloc_node_noprof+0x142/0x190 [ 1095.173854][T17190] ? relay_open_buf+0x231/0xd60 [ 1095.178746][T17190] relay_open_buf+0x231/0xd60 [ 1095.183439][T17190] relay_open+0x3aa/0x890 [ 1095.187785][T17190] do_blk_trace_setup+0x573/0x9b0 [ 1095.192841][T17190] blk_trace_ioctl+0x359/0x9a0 [ 1095.197615][T17190] ? tomoyo_path_number_perm+0x71a/0x880 [ 1095.203278][T17190] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1095.208585][T17190] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1095.214614][T17190] ? file_to_blk_mode+0xcc/0x140 [ 1095.219573][T17190] blkdev_ioctl+0x40c/0x6a0 [ 1095.224094][T17190] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1095.229134][T17190] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1095.234165][T17190] __se_sys_ioctl+0xf9/0x170 [ 1095.238766][T17190] do_syscall_64+0xf3/0x230 [ 1095.243281][T17190] ? clear_bhb_loop+0x35/0x90 [ 1095.247965][T17190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.253855][T17190] RIP: 0033:0x7f8d14f7def9 [ 1095.258271][T17190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.277900][T17190] RSP: 002b:00007f8d15ce2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.286347][T17190] RAX: ffffffffffffffda RBX: 00007f8d15135f80 RCX: 00007f8d14f7def9 [ 1095.294345][T17190] RDX: 0000000020000180 RSI: 00000000c0481273 RDI: 0000000000000004 [ 1095.302754][T17190] RBP: 00007f8d14ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1095.310729][T17190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.318707][T17190] R13: 0000000000000000 R14: 00007f8d15135f80 R15: 00007f8d1525fa28 [ 1095.326693][T17190] [ 1095.392298][T18846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2957'. [ 1095.530191][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1095.711507][T18845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2957'. [ 1095.780180][T18846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.809051][T18855] input: syz0 as /devices/virtual/input/input48 [ 1095.837744][T17190] Mem-Info: [ 1095.854449][T17190] active_anon:30742 inactive_anon:1765 isolated_anon:0 [ 1095.854449][T17190] active_file:18821 inactive_file:1406 isolated_file:0 [ 1095.854449][T17190] unevictable:768 dirty:106 writeback:0 [ 1095.854449][T17190] slab_reclaimable:6525 slab_unreclaimable:105616 [ 1095.854449][T17190] mapped:38345 shmem:31111 pagetables:944 [ 1095.854449][T17190] sec_pagetables:0 bounce:0 [ 1095.854449][T17190] kernel_misc_reclaimable:0 [ 1095.854449][T17190] free:313367 free_pcp:1908 free_cma:0 [ 1096.103125][T17190] Node 0 active_anon:17708kB inactive_anon:6960kB active_file:8692kB inactive_file:2512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80424kB dirty:228kB writeback:0kB shmem:23828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10352kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no [ 1096.154601][T18846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.348478][ T5316] usb 4-1: USB disconnect, device number 45 [ 1096.494360][T17190] Node 1 active_anon:102676kB inactive_anon:0kB active_file:66620kB inactive_file:3124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73720kB dirty:248kB writeback:0kB shmem:97732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1016kB pagetables:1668kB sec_pagetables:0kB all_unreclaimable? no [ 1096.591172][T16291] Bluetooth: hci5: command tx timeout [ 1096.879041][T17190] Node 0 DMA free:3264kB boost:2048kB min:2256kB low:2308kB high:2360kB reserved_highatomic:0KB active_anon:2780kB inactive_anon:1036kB active_file:2756kB inactive_file:988kB unevictable:0kB writepending:108kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:32kB free_cma:0kB [ 1097.005802][T17190] lowmem_reserve[]: 0 2467 2468 0 0 [ 1097.042927][T17190] Node 0 DMA32 free:46708kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:4096KB active_anon:12540kB inactive_anon:1544kB active_file:5912kB inactive_file:1524kB unevictable:1536kB writepending:144kB present:3129332kB managed:2554504kB mlocked:0kB bounce:0kB free_pcp:9488kB local_pcp:3764kB free_cma:0kB [ 1097.227213][T17190] lowmem_reserve[]: 0 0 0 0 0 [ 1097.264513][T17190] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:8kB inactive_anon:12kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:8kB free_cma:0kB [ 1097.361869][ T1064] hsr_slave_0: left promiscuous mode [ 1097.370437][T17190] lowmem_reserve[]: 0 0 0 0 0 [ 1097.375247][T17190] Node 1 Normal free:1230256kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:68652kB inactive_anon:0kB active_file:66620kB inactive_file:3124kB unevictable:1536kB writepending:280kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:21684kB local_pcp:21004kB free_cma:0kB [ 1097.453300][T17190] lowmem_reserve[]: 0 0 0 0 0 [ 1097.457277][ T1064] hsr_slave_1: left promiscuous mode [ 1097.469646][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.490333][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.528592][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.536090][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.638990][ T1064] veth1_macvtap: left promiscuous mode [ 1097.652331][T17190] Node 0 DMA: 110*4kB (UM) 69*8kB (UM) 64*16kB (UM) 26*32kB (UM) 5*64kB (UM) 0*128kB 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3424kB [ 1097.669132][ T1064] veth0_macvtap: left promiscuous mode [ 1097.674863][ T1064] veth1_vlan: left promiscuous mode [ 1097.716721][ T1064] veth0_vlan: left promiscuous mode [ 1097.814398][T17190] Node 0 DMA32: 70*4kB (UMEH) 149*8kB (UMEH) 454*16kB (UMEH) 650*32kB (UMEH) 80*64kB (UMEH) 26*128kB (UMEH) 15*256kB (UME) 9*512kB (UM) 2*1024kB (M) 1*2048kB (U) 0*4096kB = 50528kB [ 1097.867669][T16291] Bluetooth: hci6: command 0x0406 tx timeout [ 1097.877865][T17190] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1097.930515][T17190] Node 1 Normal: 672*4kB (UME) 503*8kB (UME) 374*16kB (UM) 379*32kB (UME) 348*64kB (UME) 142*128kB (UME) 53*256kB (UME) 9*512kB (UM) 3*1024kB (M) 2*2048kB (UE) 286*4096kB (UM) = 1262072kB [ 1097.977186][T17190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.076203][T17190] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1098.164607][T17190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1098.177962][T17190] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1098.187327][T17190] 38259 total pagecache pages [ 1098.192559][T17190] 767 pages in swap cache [ 1098.196936][T17190] Free swap = 107960kB [ 1098.202080][T17190] Total swap = 124996kB [ 1098.206436][T17190] 2097051 pages RAM [ 1098.211171][T17190] 0 pages HighMem/MovableOnly [ 1098.215884][T17190] 427087 pages reserved [ 1098.246519][T17190] 0 pages cma reserved [ 1098.683143][ T54] Bluetooth: hci5: command tx timeout [ 1098.847436][T18894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.910015][T18894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.021405][T18894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.107914][ T5316] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1099.237944][T18894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.309031][ T5316] usb 4-1: Using ep0 maxpacket: 16 [ 1099.367984][ T5316] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1099.376755][ T5316] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1099.435060][ T5316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1099.476150][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 1099.487389][ T5316] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1099.549231][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.559098][ T5316] usb 4-1: Product: syz [ 1099.577318][ T5316] usb 4-1: Manufacturer: syz [ 1099.586496][ T5316] usb 4-1: SerialNumber: syz [ 1101.066497][T18904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2969'. [ 1101.660131][ T1064] team0 (unregistering): Port device team_slave_1 removed [ 1101.991803][ T1064] team0 (unregistering): Port device team_slave_0 removed [ 1104.483491][T18816] chnl_net:caif_netlink_parms(): no params data found [ 1104.585925][T18899] vlan2: entered promiscuous mode [ 1104.637938][T18899] batadv0: entered promiscuous mode [ 1104.672405][T18899] team0: Port device vlan2 added [ 1104.689494][ T5316] usb 4-1: 0:2 : does not exist [ 1104.744997][T18909] tipc: Started in network mode [ 1104.757793][T18909] tipc: Node identity f7, cluster identity 4711 [ 1104.774475][T18909] tipc: Node number set to 247 [ 1104.996065][ T5303] usb 4-1: USB disconnect, device number 46 [ 1105.060401][T18915] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2972'. [ 1105.606487][T18816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.646352][T18816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.685066][T18816] bridge_slave_0: entered allmulticast mode [ 1105.739197][T18816] bridge_slave_0: entered promiscuous mode [ 1105.803746][T18816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.879963][T18816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.899371][T18816] bridge_slave_1: entered allmulticast mode [ 1105.917119][T18816] bridge_slave_1: entered promiscuous mode [ 1106.387075][T18955] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2980'. [ 1106.427153][T18816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.480426][T18816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.896919][T18970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.927310][T18964] netlink: 'syz.3.2982': attribute type 7 has an invalid length. [ 1107.002096][T18970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.011181][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2982'. [ 1107.107336][T18816] team0: Port device team_slave_0 added [ 1107.148952][T18816] team0: Port device team_slave_1 added [ 1107.168004][ T4645] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1107.372803][ T4645] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.408588][ T4645] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1107.423246][ T4645] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1107.435850][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'. [ 1107.446828][ T4645] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 1107.466784][T18816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.477893][ T4645] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1107.498717][T18816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.500413][ T4645] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1107.592538][T18816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.613316][ T4645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.628626][ T4645] usb 4-1: Product: syz [ 1107.640580][ T4645] usb 4-1: Manufacturer: syz [ 1107.655540][ T4645] usb 4-1: SerialNumber: syz [ 1107.656639][T18816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.688937][ T4645] usb 4-1: ucan: probing device on interface #0 [ 1107.695266][ T4645] usb 4-1: ucan: invalid endpoint configuration [ 1107.702017][T18816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.730380][ T4645] usb 4-1: ucan: probe failed; try to update the device firmware [ 1107.810916][T18816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.905870][ T4645] usb 4-1: USB disconnect, device number 47 [ 1108.167892][T18987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.256020][T18816] hsr_slave_0: entered promiscuous mode [ 1108.257705][ T46] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1108.325310][T18987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.333891][T18816] hsr_slave_1: entered promiscuous mode [ 1108.352424][T18816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1108.371056][T18816] Cannot create hsr debugfs directory [ 1108.448262][ T4645] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1108.507229][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.555491][T18990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.574547][ T46] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1108.622901][ T46] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1108.652656][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.692907][ T46] usb 1-1: Product: syz [ 1108.717675][ T46] usb 1-1: Manufacturer: syz [ 1108.722836][T18990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.737683][ T46] usb 1-1: SerialNumber: syz [ 1108.750057][ T46] usb 1-1: config 0 descriptor?? [ 1109.786650][T19020] fuse: Unknown parameter '0x0000000000000004' [ 1109.844462][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1110.993583][T19030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1111.074762][T19030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1111.171790][T19030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1111.274329][T19030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1111.322705][ T6428] usb 1-1: USB disconnect, device number 2 [ 1111.406703][T18816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1111.501454][T18816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1111.567003][T19038] netlink: 'syz.0.2999': attribute type 6 has an invalid length. [ 1111.621698][T18816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1111.678727][T18816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1112.319830][ T46] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1112.449468][T18816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.547621][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 1112.620103][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1112.633974][T18816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.671221][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1112.707847][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1112.719447][T16547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.726695][T16547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.768872][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1112.790480][T16547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.797724][T16547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.800453][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.836271][ T46] usb 5-1: config 0 descriptor?? [ 1112.938361][T19046] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1112.957962][ T46] hub 5-1:0.0: USB hub found [ 1113.124824][T18816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.267893][ T46] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1113.326930][T19070] FAULT_INJECTION: forcing a failure. [ 1113.326930][T19070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.384610][T18816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.451090][T19070] CPU: 0 UID: 0 PID: 19070 Comm: syz.0.3005 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1113.461655][T19070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1113.471747][T19070] Call Trace: [ 1113.475026][T19070] [ 1113.477957][T19070] dump_stack_lvl+0x241/0x360 [ 1113.482662][T19070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1113.487866][T19070] ? __pfx__printk+0x10/0x10 [ 1113.492460][T19070] ? __pfx_lock_release+0x10/0x10 [ 1113.497509][T19070] should_fail_ex+0x3b0/0x4e0 [ 1113.502233][T19070] _copy_from_user+0x2f/0xe0 [ 1113.506825][T19070] copy_msghdr_from_user+0xae/0x680 [ 1113.512039][T19070] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1113.517895][T19070] __sys_sendmsg+0x237/0x390 [ 1113.522498][T19070] ? __pfx___sys_sendmsg+0x10/0x10 [ 1113.527613][T19070] ? vfs_write+0x7bf/0xc90 [ 1113.532237][T19070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1113.538573][T19070] ? do_syscall_64+0x100/0x230 [ 1113.543344][T19070] ? do_syscall_64+0xb6/0x230 [ 1113.548027][T19070] do_syscall_64+0xf3/0x230 [ 1113.552536][T19070] ? clear_bhb_loop+0x35/0x90 [ 1113.557217][T19070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.563109][T19070] RIP: 0033:0x7f1b2b97def9 [ 1113.567533][T19070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.587153][T19070] RSP: 002b:00007f1b2c704038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.595577][T19070] RAX: ffffffffffffffda RBX: 00007f1b2bb35f80 RCX: 00007f1b2b97def9 [ 1113.603568][T19070] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 1113.611539][T19070] RBP: 00007f1b2c704090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.619514][T19070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.627490][T19070] R13: 0000000000000000 R14: 00007f1b2bb35f80 R15: 00007f1b2bc5fa28 [ 1113.635493][T19070] [ 1113.689158][ T46] hid-generic 0003:046D:C314.0019: item fetching failed at offset 0/1 [ 1113.777985][ T46] hid-generic 0003:046D:C314.0019: probe with driver hid-generic failed with error -22 [ 1113.834254][T18816] veth0_vlan: entered promiscuous mode [ 1113.953605][T18816] veth1_vlan: entered promiscuous mode [ 1113.989982][T19046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.137128][T19046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.186411][T18816] veth0_macvtap: entered promiscuous mode [ 1114.260317][T18816] veth1_macvtap: entered promiscuous mode [ 1114.337684][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.354064][T19082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.380727][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.417659][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.447587][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.477409][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.477600][ T5287] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1114.510464][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.557538][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.607681][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.643958][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.688126][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.717524][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.757642][ T5287] usb 1-1: Using ep0 maxpacket: 32 [ 1114.766923][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.797596][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.808092][ T5287] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.832387][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1114.837544][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.900375][ T5287] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1114.915769][T18816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.922281][T19082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.945383][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.008757][ T5287] usb 1-1: config 0 descriptor?? [ 1115.041040][ T5287] usb 1-1: bad CDC descriptors [ 1115.048554][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.065297][ T5303] usb 5-1: USB disconnect, device number 124 [ 1115.118112][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.163076][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.193834][T19082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.213452][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.261629][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.283126][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.327743][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.327853][T19098] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1115.350481][ T5287] usb 1-1: USB disconnect, device number 3 [ 1115.377852][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.429857][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.447530][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.462497][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.474223][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.517762][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.560568][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.600760][T18816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.627862][T19082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.643254][T18816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.655011][T19082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.690114][T18816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.707733][T18816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.721835][T18816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.737089][T19082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.750976][T19094] netlink: 'syz.3.3010': attribute type 6 has an invalid length. [ 1116.161212][T19111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1116.210091][T16555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.272283][ T30] INFO: task syz.4.2573:17191 blocked for more than 143 seconds. [ 1116.272712][T18816] ieee80211 phy134: Selected rate control algorithm 'minstrel_ht' [ 1116.282867][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.296220][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.309343][ T30] Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1116.315398][T16555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.358600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.433508][ T30] task:syz.4.2573 state:D stack:26848 pid:17191 tgid:17189 ppid:16225 flags:0x00000004 [ 1116.494006][ T30] Call Trace: [ 1116.511930][ T30] [ 1116.540565][ T30] __schedule+0x1800/0x4a60 [ 1116.564014][ T30] ? __pfx___schedule+0x10/0x10 [ 1116.579825][T16556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.597839][ T30] ? __pfx_lock_release+0x10/0x10 [ 1116.619387][T16556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.658978][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1116.686600][ T30] ? schedule+0x90/0x320 [ 1116.715020][ T30] schedule+0x14b/0x320 [ 1116.739979][ T30] schedule_preempt_disabled+0x13/0x30 [ 1116.776851][ T30] __mutex_lock+0x6a4/0xd70 [ 1116.802594][ T30] ? __mutex_lock+0x527/0xd70 [ 1116.830473][ T30] ? blk_trace_ioctl+0xdd/0x9a0 [ 1116.852097][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1116.872160][ T30] ? kasan_save_track+0x51/0x80 [ 1116.891246][ T30] blk_trace_ioctl+0xdd/0x9a0 [ 1116.919903][ T30] ? do_vfs_ioctl+0xf08/0x2e40 [ 1116.938431][ T30] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1116.957315][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1116.972608][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1117.000410][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1117.019004][ T30] ? __pfx_lock_release+0x10/0x10 [ 1117.035460][ T30] blkdev_common_ioctl+0xe7b/0x2480 [ 1117.053154][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1117.077625][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1117.090386][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1117.116523][ T30] ? file_to_blk_mode+0xcc/0x140 [ 1117.136148][ T30] blkdev_ioctl+0x4ca/0x6a0 [ 1117.156612][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1117.178787][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1117.195780][ T30] __se_sys_ioctl+0xf9/0x170 [ 1117.209819][ T30] do_syscall_64+0xf3/0x230 [ 1117.220030][ T30] ? clear_bhb_loop+0x35/0x90 [ 1117.230553][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.244922][ T30] RIP: 0033:0x7f8d14f7def9 [ 1117.255342][ T30] RSP: 002b:00007f8d15cc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.274394][ T30] RAX: ffffffffffffffda RBX: 00007f8d15136058 RCX: 00007f8d14f7def9 [ 1117.308839][ T30] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000004 [ 1117.337563][ T30] RBP: 00007f8d14ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1117.356133][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.376767][ T30] R13: 0000000000000000 R14: 00007f8d15136058 R15: 00007f8d1525fa28 [ 1117.409659][ T30] [ 1117.412814][ T30] [ 1117.412814][ T30] Showing all locks held in the system: [ 1117.433198][ T30] 1 lock held by khungtaskd/30: [ 1117.444723][ T30] #0: ffffffff8e938660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1117.506436][ T30] 5 locks held by kworker/u8:7/1064: [ 1117.539829][ T30] 3 locks held by kworker/1:2/4645: [ 1117.566135][ T30] 2 locks held by getty/4987: [ 1117.582658][ T30] #0: ffff8880349aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1117.627767][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1117.661137][ T30] 3 locks held by kworker/1:6/5287: [ 1117.683277][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1117.703852][ T30] #1: ffffc90003d97d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1117.742199][ T30] #2: ffff88808e31e240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 1117.777018][ T30] 1 lock held by syz.2.301/6806: [ 1117.782604][ T30] 3 locks held by syz.4.2573/17190: [ 1117.795446][ T30] 1 lock held by syz.4.2573/17191: [ 1117.809691][ T30] #0: ffff888025abdbd0 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xdd/0x9a0 [ 1117.857939][ T30] 1 lock held by syz-executor/18816: [ 1117.872119][ T30] #0: ffffffff8e93da38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1117.921197][ T30] 1 lock held by syz.2.2976/18941: [ 1117.928852][ T30] 1 lock held by dhcpcd-run-hook/19127: [ 1117.941264][ T30] [ 1117.946427][ T30] ============================================= [ 1117.946427][ T30] [ 1117.993491][ T30] NMI backtrace for cpu 0 [ 1117.997907][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1118.008098][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1118.018193][ T30] Call Trace: [ 1118.021520][ T30] [ 1118.024491][ T30] dump_stack_lvl+0x241/0x360 [ 1118.029222][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.034462][ T30] ? __pfx__printk+0x10/0x10 [ 1118.039177][ T30] ? vprintk_emit+0x667/0x7c0 [ 1118.043889][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1118.048969][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1118.053968][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1118.059499][ T30] ? _printk+0xd5/0x120 [ 1118.063705][ T30] ? __pfx__printk+0x10/0x10 [ 1118.068333][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1118.073234][ T30] ? __pfx__printk+0x10/0x10 [ 1118.077873][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1118.083025][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1118.089049][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1118.095080][ T30] watchdog+0xff4/0x1040 [ 1118.099372][ T30] ? watchdog+0x1ea/0x1040 [ 1118.103839][ T30] ? __pfx_watchdog+0x10/0x10 [ 1118.108559][ T30] kthread+0x2f0/0x390 [ 1118.112661][ T30] ? __pfx_watchdog+0x10/0x10 [ 1118.117468][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.122101][ T30] ret_from_fork+0x4b/0x80 [ 1118.126563][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.131192][ T30] ret_from_fork_asm+0x1a/0x30 [ 1118.136023][ T30] [ 1118.141393][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1118.146665][ C1] NMI backtrace for cpu 1 [ 1118.146680][ C1] CPU: 1 UID: 0 PID: 17190 Comm: syz.4.2573 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1118.146702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1118.146713][ C1] RIP: 0010:local_clock+0x0/0x30 [ 1118.146739][ C1] Code: cc 48 c7 c7 60 fc 7f 8e 48 89 de e8 da 3d 81 03 e9 3f ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 ff 05 2d 2e 97 7e e8 80 1f 4f 0a 65 ff 0d 21 2e 97 [ 1118.146760][ C1] RSP: 0018:ffffc900040e7990 EFLAGS: 00000246 [ 1118.146777][ C1] RAX: ffffffff8205298e RBX: ffffea00010d5f80 RCX: 0000000000040000 [ 1118.146791][ C1] RDX: ffffc90010028000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1118.146804][ C1] RBP: 0000000000000000 R08: ffffea00010d5fb7 R09: 1ffffd400021abf6 [ 1118.146818][ C1] R10: dffffc0000000000 R11: fffff9400021abf7 R12: ffffea00010d5f80 [ 1118.146832][ C1] R13: 0000000000000000 R14: 1ffffd400021abf1 R15: ffffea00010d5f88 [ 1118.146846][ C1] FS: 00007f8d15ce26c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1118.146862][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.146875][ C1] CR2: 00007f937b013870 CR3: 000000006a13a000 CR4: 00000000003506f0 [ 1118.146892][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.146903][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1118.146915][ C1] Call Trace: [ 1118.146923][ C1] [ 1118.146930][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1118.146956][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1118.146984][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1118.147009][ C1] ? nmi_handle+0x2a/0x5a0 [ 1118.147036][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1118.147058][ C1] ? nmi_handle+0x14f/0x5a0 [ 1118.147076][ C1] ? nmi_handle+0x2a/0x5a0 [ 1118.147094][ C1] ? __pfx_local_clock+0x10/0x10 [ 1118.147113][ C1] ? default_do_nmi+0x63/0x160 [ 1118.147139][ C1] ? exc_nmi+0x123/0x1f0 [ 1118.147163][ C1] ? end_repeat_nmi+0xf/0x53 [ 1118.147187][ C1] ? __reset_page_owner+0x1e/0x430 [ 1118.147212][ C1] ? __pfx_local_clock+0x10/0x10 [ 1118.147232][ C1] ? __pfx_local_clock+0x10/0x10 [ 1118.147252][ C1] ? __pfx_local_clock+0x10/0x10 [ 1118.147272][ C1] [ 1118.147278][ C1] [ 1118.147284][ C1] __reset_page_owner+0x23/0x430 [ 1118.147307][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1118.147334][ C1] free_unref_page+0xd22/0xea0 [ 1118.147366][ C1] relay_destroy_buf+0x112/0x3a0 [ 1118.147392][ C1] relay_open+0x6e4/0x890 [ 1118.147416][ C1] do_blk_trace_setup+0x573/0x9b0 [ 1118.147454][ C1] blk_trace_ioctl+0x359/0x9a0 [ 1118.147481][ C1] ? tomoyo_path_number_perm+0x71a/0x880 [ 1118.147513][ C1] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1118.147543][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1118.147593][ C1] ? file_to_blk_mode+0xcc/0x140 [ 1118.147626][ C1] blkdev_ioctl+0x40c/0x6a0 [ 1118.147654][ C1] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1118.147684][ C1] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1118.147712][ C1] __se_sys_ioctl+0xf9/0x170 [ 1118.147736][ C1] do_syscall_64+0xf3/0x230 [ 1118.147767][ C1] ? clear_bhb_loop+0x35/0x90 [ 1118.147792][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.147815][ C1] RIP: 0033:0x7f8d14f7def9 [ 1118.147833][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1118.147851][ C1] RSP: 002b:00007f8d15ce2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.147873][ C1] RAX: ffffffffffffffda RBX: 00007f8d15135f80 RCX: 00007f8d14f7def9 [ 1118.147890][ C1] RDX: 0000000020000180 RSI: 00000000c0481273 RDI: 0000000000000004 [ 1118.147904][ C1] RBP: 00007f8d14ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1118.147918][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.147932][ C1] R13: 0000000000000000 R14: 00007f8d15135f80 R15: 00007f8d1525fa28 [ 1118.147958][ C1] [ 1118.797517][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1118.804497][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 1118.814704][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1118.824812][ T30] Call Trace: [ 1118.828112][ T30] [ 1118.831063][ T30] dump_stack_lvl+0x241/0x360 [ 1118.835761][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.841013][ T30] ? __pfx__printk+0x10/0x10 [ 1118.845614][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1118.851710][ T30] ? vscnprintf+0x5d/0x90 [ 1118.856060][ T30] panic+0x349/0x860 [ 1118.859967][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1118.866138][ T30] ? __pfx_panic+0x10/0x10 [ 1118.870564][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1118.875946][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1118.881510][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1118.886893][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1118.893058][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1118.899228][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1118.905402][ T30] watchdog+0x1033/0x1040 [ 1118.909753][ T30] ? watchdog+0x1ea/0x1040 [ 1118.914189][ T30] ? __pfx_watchdog+0x10/0x10 [ 1118.918880][ T30] kthread+0x2f0/0x390 [ 1118.922958][ T30] ? __pfx_watchdog+0x10/0x10 [ 1118.927649][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.932254][ T30] ret_from_fork+0x4b/0x80 [ 1118.936686][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.941296][ T30] ret_from_fork_asm+0x1a/0x30 [ 1118.946133][ T30] [ 1118.949450][ T30] Kernel Offset: disabled [ 1118.953807][ T30] Rebooting in 86400 seconds..