last executing test programs: 10.934082449s ago: executing program 3 (id=1282): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$video(&(0x7f00000005c0), 0x5, 0x0) (rerun: 64) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x9}) (async) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550f, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) r5 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x200, 0x0, 0x23e}, &(0x7f0000000000), &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x80600, 0x42, 0x50}, 0x18) (async, rerun: 32) syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x60, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) (async) syz_io_uring_submit(r8, r6, &(0x7f00000009c0)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x10000, 0xb1, 0x3}, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x23456, {0x0, r7}}) (async) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) close(r1) 9.241308874s ago: executing program 3 (id=1290): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000e0000000000000000fbff0005000600000000000a00000000000000fe800000dfffffffffffffff000000bb00000000000000000200010000000000000000160000000005000500000000000a"], 0x70}}, 0x0) 8.960052487s ago: executing program 3 (id=1292): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) lseek(r7, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r11, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095060000ff7f0004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00', 0x0, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r13, 0xffffffffffffffff, 0x12, 0x8, 0x0, @prog_id}, 0x20) write$tcp_congestion(r11, &(0x7f0000000300)='reno\x00', 0x5) renameat2(r13, &(0x7f0000000040)='./cgroup\x00', r5, &(0x7f0000000340)='./cgroup\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) write$tcp_congestion(r11, &(0x7f0000000380)='reno\x00', 0x5) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904011800020d"], 0x0) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES16=r8, @ANYBLOB="71fb01dca17ed36f6c33b948baea0baaaf16ecbc8b9e9644b190f5971e71203ee45fa36b934ce03c6fcb866cdf5132473d4679a5bcebef6c81ad3c74f05d488c5b3dd965a4d08ad7e2b2a36c9544ad9631ba325e9a270df3b121e23c91bb0b0b22943d33d3942f24265e61f33930d7", @ANYRES32=r1, @ANYRESOCT=r5, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES16=r12, @ANYBLOB], 0x38, 0x20008044}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001400)="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", 0x1000}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="240000001c63000010008100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r13, @ANYRES32=r13, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r11, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x20000010}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="1258b9f5ee4cfc8a6c58853fd0df01fe40de659b84afddf6f1803aa0681a5f5e8ad20cd34691104e8b4a7e56ace34ab1402b5ad16c8daa349085b8f386256ea6f033b95f8f6f3ae5b1863387f8657398f104b924742fe2186513410ca8ea3599835c4f399885b482f0646f4327fa072668e9f6d3f293b9736043cc3e1567bf6710828ee3fd0c92c1fabbbbfc2c4da5b120ddc27333cf8947ee455559c9d46d76a008b07c7ef10b20784fc7212c0c68cedcdfdcc374c7bf198356f24e1fff8f90c391d6c48ef3c7e83c9d4996eb824624fec4eb757ff663", 0xd7}, {&(0x7f0000000b00)="60a19991d464e5e741cb6e90d9248d10655b73e464a559f59ed0d31cbc884ad3d6c4cb4cf20e851c7d9757a930026ba533f67abfffe1ae88eb32925ecd05f7a6403b40002294dba4c0cbf13830a815f3bf5bd10e63f89b65802d8a12b56ca48bf6e7fa98b826aa26b89705", 0x6b}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}], 0x20, 0x4}}], 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r14, 0x0, 0x39000, 0x0) 8.411628062s ago: executing program 1 (id=1295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff000109022400010000300009040000010300020009210700b90122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="478ecf6c8f7ad090a37f1c5f93a11b8e6b475b457d80b2d7ce16a46617534982226faa0c16eb66864c03f4d7b010053ddd5957efe8a3374c7fe971587b74c3549425629b19e01c1bac37291fd4c852cfd8f2488fe342aaa2518b5f55e8f2cf3eb73fb405778bbb47b7a102160d3bb99e886b69a09447c4dc0ccb2973acd68c88eb1389532e276711fc004b56df7b29d56ae42cc39c52d74049fd8f0df9f2e756b9e4f485d2ebfe43b63279ad7363ab848e2894151e82dc39aefc8ba90d18a963250f44e623cb7afc4e8aaf9112d34ef50376943eedb7cf02d1cf643c9a53ae49e3edd5445c26e9dc4ef9"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000000)={0x20, 0x5, 0x1e, "6278ae9f69769ad589d78bc2f919bca9a7cc8a1bce7cd08b02e1229c6f33"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x60, 0x50}}, 0x0, &(0x7f0000000680)={0x40, 0x9, 0x1}, 0x0, &(0x7f0000000700)={0x40, 0xf, 0x2, 0xb66}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000040)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "bac9"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xd8}}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x10, "2b0c33540cefa0783351aba17855272f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.357586895s ago: executing program 1 (id=1301): r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x7) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) preadv(r3, &(0x7f0000000300)=[{&(0x7f000000c300)=""/102397, 0x18ffd}, {&(0x7f0000000440)=""/90, 0x5a}, {0x0}, {&(0x7f00000007c0)=""/257, 0x101}], 0x4, 0x0, 0x7) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005380)={0x0, 0x0}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) (async) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r8}}, 0x10) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bf5d62464a541728cfc5ba2cd359c5b033f6f36ad26f09250f8ed36903f31b9a52a46bc221d07ec4e359442725ac7f3a42507e620f37f8a2f47ed204896ac70e782f6cc559bad23c0600000000000000b4e8c28d9bb2f262d26e78c27a97322ede61d6510d0a73d78c81983a58cf4b55fe50345fd2fd8ecb686f33d2b81daeca5e7f0000000000000000001b0000000000000000000000e03fa15614439ee191dee8acf6a6bd4de467fbb616aca8afca56f7d55f332d6e02dc6ea145df5e47a44fd42f3c1916a22c5bc8ae28786fc01ea1d38bfc8b6990fec2f7f5096fb3cf1ba193cfd16aa5e4a28c1e2695e29bdcad565a22707a29d0e3396600e850ddd490978c558b83b360f56436bad7e877eb9cbec722d5869af046690555c536ab62c8defa8e78168aeb54e5c05115fbd155902af7a5329969a987a660ce402d6530b801b5ba2d3353705934b8ed027df61829dd848fc6075efb8ca8d8232ccc11e560c65e2e8d7e88ccd5690a37712a7d198e5537595c6235", @ANYRES16=r6, @ANYBLOB="0101000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780080003003d060000"], 0x38}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b0306004f04020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 6.133428039s ago: executing program 1 (id=1302): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) 6.082457993s ago: executing program 0 (id=1303): r0 = socket(0xa, 0x3, 0x3a) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000240)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b57"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000180)={0x1, 0xffffffff, 0x0, 0x0, 0xd}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2508c1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd(0x0) r10 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000020582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) dup(0xffffffffffffffff) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r11 = eventfd(0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000280)={r9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r11, 0x9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r11, 0x9, 0x3}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.836246526s ago: executing program 1 (id=1304): socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000600000000ddffff0500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000830800008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x100002, 0x0, 0x0, 0x0, 0x19}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000006110590000000000950000000000000000000000000000000000e3ff00000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xc, 0x0, 0x1000}, 0x10}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x38}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x20f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x4, 0x1f, 0x1, {0x22, 0x5de}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x7f, 0x63}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0x3, 0xc}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0xb6, 0x26, 0xf1, 0x40, 0x40}, 0x4d, &(0x7f0000000080)={0x5, 0xf, 0x4d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x9, 0xb0}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "0a1b71d2ade6592b92f48b95ba21e007"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x1, 0xf00f, 0x2, [0x3f00, 0x0, 0xff00c0, 0xc000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x92, 0x4}]}, 0x4, [{0xb7, &(0x7f0000000100)=@string={0xb7, 0x3, "09726b2afbdbecf2523cefd659ae2b30522d81030cb8df60d718bfd86cf8273cb7e6b75d7953eed75f2c188d37a972e7ec1b8c493517b47d9cb70e8b1aa16998eb2d476270d9f7de3b3fab9f557474df48750a9f77e903777827554073425b77617f87ff891a4febdccfcc1babd8d5b4df612dca305940923bbfab447ce0a2687b162bb1f2f6e7e78d8d5baa7a18221b441cbf9223570b46879012028cc3f78448effaea8d1849057b50dea4941e835dd1e18f4474"}}, {0xc4, &(0x7f00000001c0)=ANY=[@ANYBLOB="c4036d6bfd467c849e34080000000000009ef60ce49a47e5979c2258d1225d2e96d39c914705b5840749e30dbfff88c568dec843c8a9c3a56618f659b910efc14c2bc516b1b1dc583fb5add3eccf633f6b0c53d3aa50667faee181b39114a7dbe9e2bbdbdfa05c07d17e22d6a2babdf2d5f0615a7183d26ce390d22aab5792b17398cf361dcc93db27495104de9f92f14b5226da9892c46ee5c66db762a7ccaece8accba26e86c257caf3c36a1866aeb4f9f021481fac48c9edd6866d73b6c08ab966756"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x35, &(0x7f0000001040)=ANY=[@ANYBLOB="3503230c6545d79a8aa93db58deedb85fb2d224f7f7f4a814264ccca733f44e029ce1e19d15978584cbf430aa89d274d41854ae3dfc4d222a904d946dfdcdc04f1a19cbf1745ac63d9fc22c7ca8ac22d2e341898f1a94106797bd86725e18e03225270704a5e346309291f5435d8575293959b5aa4db7c89c3703ac5d3b11e7d19fe05b600465ee911f45fcc22d7a71e83"]}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000063019b0000000000950000000000000071a8d592b2874e8c1d0dff5409307d894d30bbdc92517f18890400000066dece220917c3e29dbc09764747e14957158d3dbadcdef22f3fd78f6d8339811026218d0a7677f9568e7189e444766a55ce43bb745aa696bc09bbaa1fa079b7ee50358c6950cf155860b8b76003fe561428d5aaccfe51b4e86b5520e51a621ef15b7e7459cdc659"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001580)=[0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000001600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001640), &(0x7f0000001680), 0x8, 0x9, 0x8, 0x8, &(0x7f00000016c0)}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="97149f1f169a700e38073287f3bbb8bc8615b9d0d59aecbd7dacbba46dfb7b732e1cdcff12f07231afbf05fac209d516e0fa1594fd4adf37725a480bd3a4e62d8007485e0c2b0907b900bc712695f70357e73aa1b3d3bc445f3b20fe4c9d56801b8acf248dc0293093939f7da96536aede5a6e2fa55c2bd47ecca6c8badf9f017f9e21725b0f4e72bea3d04a8a863bb7180b39c4e766f373d787093afb59bad25143868817c15493061a9e3807a4d54877c6a560c1a4ade675374cdc75737f4e84a4da1830c8b867d0f9a4b5bfb13e08a64b3b787b28c08ee9deb47f5331393c936c89db4c1999c7627c", 0xea}, {&(0x7f0000000500)="e5f2a7fb4f24884d4fd5dc903dd4667c03fb0fee9f961640f1d012366eab514b775d38f3c692ee0141a0d26f80629bca48afeecd9061900510c557c109de70b3113e91da90a3e90429eb1893da284a49bb4e7ca7ef631b8d862ff9896ea472a866ab85517d7ebe6778d25eab740a130e6ce88dac5f81fe498968092b4c86654605ee58c34bc82d38bf3adbcc31400aba4cffbb335421af217541b44aeb843a88b19bd11dfab6b6c848f1dd0dd192d16c4d075498a06a52d95537013172c7c3769025002063052f360d0c3f171eeb38eb0f2bb265", 0xd4}], 0x2, &(0x7f0000000180)=[@ip_tos_int={{0x14}}], 0x18}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000600)="e96ec1cc10b6de6a5dfbf05fc026ef0536aa4d922c883434a9ce6eaccb771efa2898d420b06aaf47619e665bbe4ea7fc4e51fd6e8e790a7e29ce61f5e65100f8d41d8110c6c1532a48e62380c57eabc0b133aad70e901a82d01f9b640a5a4e41e317e651b0700cef2c33ac86583d50eae6557f48233debbe3fe92fd0ceb6507afd751af946514399f09d9458d8870b66ddfbfecec6296fa2653056993647e6b5e7f0f460c1791d74a04ada1daaf1e99bd22c02138f", 0xb5}, {&(0x7f00000006c0)="48e81efa01adb40f93f658df6fde1cd86559c2e1d24fabddca42b86664515f3bd3421e26969a973d51701460cd11408bf08893ef603e9fd3b79b959e21be0a0cd34565779fc884fa4583bd4f3cf4657f9c4b3c5f3723be178633f94707c7cee9a422e2575234fd770e70a5a64dffda78bb32e62f005f7d3999619f78f6f9e276edc1600a09a4c3de482bc771eedcfdaf5841ff29ae4d22f99d89dd324fcf679e66c1624b40536789743187db114a23860bab6cb5fd", 0xb5}, {&(0x7f0000000780)="fa95eccc43576b5c13b481fb5c34ce8ebe4dd28244322c8b55552a20a1e1ecbe254ec091567e440a2bde9fd6f9abf68bc878c5477eb4f60004f635675e8d08f09357a4059f5353ad18894f0308c384c4c31c75be620c0acf196376a52afa3622b4069fbf8af42f995724c13ab431fa1fe8dd50254ff1febebdd18ca88e9fc5e3c3b6b71a4f25d58b531dc053293b0ad114c255e29ddcf25e2e8267dbb95413707f7f0c6eea0d1160365213845014318fa9579f474e5b5f6e54f7fc388e53656f3fd1e636cc4e203e7eea", 0xca}, {&(0x7f0000000280)="40779b24d14dafa4a85ef8360835551037437ee1b8c8b957cf57d58fa82ab02921030b685e55ede82e3ac59a5620227230589e33c1c4b364467fcd55", 0x3c}, {&(0x7f0000000880)="2c1ccbe663ceb69d37f29eccfb7a0f404904301de0bcbb60fb4fb05659b64b1172a1d9c1dca75f8752aaa98df04e5f6454a46ba8be7350d4", 0x38}], 0x5, &(0x7f0000000940)}}, {{&(0x7f0000000980)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f00000009c0)="ac427fe1c410a74159ad6b19436499fb4dcb49b84834455b7a753497ceffe511ce8d2037ec7c99c2bf97d81ae6ab174ebf9463ee146bc2ef7454add4b81779946d9976d62e3b6b4413d7dcfd16d6e5457d923b464d7c68886d63a667d85f7b4d06e677b9f934e5d4fcf2fbd261be0498ad9732b173", 0x75}, {&(0x7f0000000a40)="2591b6e05332b4470cda10c612d9c832db142f36ba706e6eaeb4313e9c80d41d953288029e0804adbc4ff420cb0761d3e838893f61a65db5b618dfe87dad72576fa7670ed96812b33fbe3b003ca95997aa5564480247ac9619698b8e5c8419e40ce27848a72da93cf9fe099859e0f95e949b774abad9ae57ba490f4e529aa0b7bc2edfda464f621ffb1f43738c5558117f77c981f547ecabe008563462bf6ddb0fe86cb8ebc5a8cc28d8209fe368d52648399b83585f566355d8b9ffd6c27644b84b6051e02d29cc44c0995a247cc950f864", 0xd2}, {&(0x7f0000000b40)="bdb6cce71bb2ff2531432ec9d79af873d539f14f4dab9fbdf2a763bf9017ac0697e9707ca03d9b7a33e817ce1bdad823860ef5966c55043d1cac319809556d986e82d91d982d2d876503043cac28f28c9c0d4b600ce3b4a5773a283005b2080e0cf312bf1c8647345058760478e1e1dea8f4b914256dd6e4b5", 0x79}, {&(0x7f0000003240)="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"/4178, 0x1052}, {&(0x7f0000000bc0)="f7f6e07457e568852f4d5cc15d2ec2cfd4fe579eb5919b44180fe1149f31998b9d321f466688af07b09c78426a25f8577551a0d49718defe2423468548732d2b52e7b769", 0x44}, {&(0x7f0000000c40)="4669e3eba1bdad9c8af5134882fc51a2d856f9d3bbef6bb1f151455c9e1ab4153da2e6e85dc058c56124281cc719550c21f2f674743b050cd4e28fc91787de3474e207b359686f34cb2b44b1b9a0ecb7e12c0e2f21136aeea8092ec581065602f5b413cf8e638a01343c84a92a79f7d579103753c41a4122bcdecdebac780e51bdf90e853af9d809182eb6c6e2e8210cc2b9752f400dbec701b6765e86c18e", 0x9f}, {&(0x7f0000000d00)="093e090a669dd3816df3e88acc170928763d9f0e3826be400e51a35438fb9f4c93dcace51014791ef2937918d2f892a9143b501ca604f80c172d874ef0d17787b433f2403e676595b0579a36bfea5a9224656d6b1e96018f99dceffae2907423980c493af5ec", 0x66}, {&(0x7f0000000d80)="ebaf9b3149474e6b377be2ce1642d9d77a064ef584802f", 0x17}, {&(0x7f0000000dc0)="d14d131f6f7fd497ab4b19cd695ae1cd7fcc567bec", 0x15}], 0x9, &(0x7f0000001d80)=[@ip_retopts={{0x84, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x18, 0xc9, 0x0, 0x3, [0x422, 0x7ff, 0x7, 0xfffffff7, 0x6]}, @ssrr={0x89, 0x13, 0xd8, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @cipso={0x86, 0xf, 0x1, [{0x7, 0x2}, {0x0, 0x7, "bd83c443c8"}]}, @timestamp={0x44, 0x14, 0xf, 0x0, 0x2, [0x100, 0x93, 0x0, 0x4]}, @timestamp={0x44, 0x24, 0x19, 0x0, 0x0, [0x9247, 0x6, 0x8, 0x1, 0x6, 0x6, 0xffffffff, 0x7f]}]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xba, 0x0, 0x1, [0x6, 0x76, 0x2]}, @end, @timestamp_addr={0x44, 0x34, 0x12, 0x1, 0xc, [{@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x8ea5}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x41}, 0xf}, {@loopback, 0x401}]}, @timestamp_prespec={0x44, 0x1c, 0xc0, 0x3, 0x1, [{@private=0xa010101, 0xe53}, {@local, 0x5}, {@private=0xa010101, 0x1}]}, @cipso={0x86, 0x35, 0x3, [{0x6, 0xf, "e8d20956622e10f24ef0887a04"}, {0x1, 0x11, "0f310676b2367cb6eeb6a93c2d6c53"}, {0x7, 0xf, "3ee2a63d2dc2ca616b3f93c7b6"}]}, @rr={0x7, 0xb, 0x1c, [@local, @rand_addr=0x64010100]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x66, [@multicast1, @multicast2, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2]}, @rr={0x7, 0x17, 0x6c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @private=0xa010102, @multicast2, @empty]}]}}}], 0x188}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="59d60061a4158d96618dcffb493bae9daa026eb9c4206960c152c3033ed0aed06d61aa2afdf90ab6e5eed050086b8979b365a97be656dcf2822cce657e4e90a988961b5c10f46318a60721dad4daca6687e9383eb5e264d2d7c2c7646c300fcfb58ee0762b4aaf99d7a5908ad089b47bb261d6559c675a9b6e698900d4638a6ea68eb81e08725ba05c23585c", 0x8c}, {&(0x7f0000000f80)="9d3ed57808b43e4e2aad06224b0d85c43c35175f97a5e65205025f504dd94394e336d32c7797b4e64426bb3e", 0x2c}], 0x2, &(0x7f0000001240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400000}}], 0x78}}, {{&(0x7f00000012c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001300)="e13d34b1805c2bcbb625c4bda617dda51576e307cd955f2fe2eea2eac83851e5ac87f5007c71f3818b29fc28e74ec7021ca4a2ab", 0x34}, {&(0x7f0000001340)="3cb7fa2c33cc67ca13b982432e3fa1535c7585c9edf90d7e3e3d71020df10fb2c39188741670225ff114abdcad5134", 0x2f}, {&(0x7f0000001380)="78b4a7b85e68d69f1c0262e9bf59abd808bf2245541a97869d7903ba42dd7d48ad7f483e4c4aa11bc6ee5d8bade2a408e4099f53027b38dac9f78abb1664100dff3e5b763c65e806e728fffda10547bdcad34914965e2e71549cb4bfb10eabd909dedd58cf3262954d91bcf6894df6d255da", 0x72}, {&(0x7f0000001400)="cc29474fa8f5e9757722ce38cd92de11282d3c5aad4617e9002ce639730a691b989cd9d68ed2cf67ccecb9f7ab9ea0f01324e2bf666d233a9d5802b2ecd8189e6d6c9f4d1416880e1984c37576b3d499d962d6d0cfccc212aa5baed7758fe4331b0b021204a5178a13f6b6147e33f3e439630f90a0e018b4e2098dfc35d9bc050cd7a6361de14b16d2c6747fab0c697d4c7df2321722b7167122893fffdd5425ecfd2959a97620cc6f5114a13c8367d30a4a4806c161e5f1b932a17d0e491a2bf12b3034b26c9fbbb0136f9bf370fe", 0xcf}], 0x4, &(0x7f0000001840)=[@ip_retopts={{0x60, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0x75, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@broadcast, 0x7f45}, {@private=0xa010102, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x7}, {@multicast1, 0x1c000000}, {@broadcast, 0x2}, {@remote, 0x5}, {@rand_addr=0x64010102, 0x9}, {@broadcast}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xe0}}, {{&(0x7f0000001940)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001980)="03e03da652643bba94d807a98467b873fc75ab89db71ce091b2f3f0a05dd", 0x1e}, {&(0x7f00000019c0)="e1aa47fe5428b42485dd428796830b96e56ac3092767bfced0af5bf270f87012801b3a29ddb5bcb9a9c9ddc11aa2", 0x2e}, {&(0x7f0000001a00)="a1c132621a65b78f1b3f86fc8b9164503ba8a91f0ee73e16aec5b644224845570fe78422c7ca45df9dfa8cfe4f8760aa8e47a8289a66958ae14f6b472ac1d44523b521d63dc37ab2475d07c76732484561783a06a5f37dd4e0f8f4d5af1768d5f3341cc8144be94c971d752e41f9ee31f9c8e32b7e931d14", 0x78}, {&(0x7f0000001a80)="f3f4f3abfedb350e3c1c196e9a9785015fdf3becc304def5fd0b170b2c84edde6436e114585763213e78b4f80873f197b3d0408492e820c874f1c380a277972488943b0adbf8db13be0488cfab6116c3082b2e", 0x53}, {&(0x7f0000001b00)="44623d479fd9e8f152b4618c4bb5bdc5de620a573bb9c99d67557e4c9789cad94efc6d36f760aee9633efbfdf4a5eb3c20460184ebda9bf5dfaf888f21d328e21e0db0554d7cda4632", 0x49}], 0x5}}], 0x6, 0x4) 4.749899868s ago: executing program 3 (id=1306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000019840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x2c, 0xee, 0x0, 0x0, [0x72a35bda, 0x1, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0x9, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {@multicast2}, {}, {@broadcast}, {@multicast2}]}, @noop, @cipso={0x86, 0x2c, 0x0, [{0x0, 0x7, "7f9ba46964"}, {0x0, 0x7, "a8e578de1c"}, {0x1, 0x3, "d4"}, {0x7, 0x5, "c78ba2"}, {0x6, 0xb, "e039ff8328170f6051"}, {0x0, 0x2}, {0x0, 0x3, "13"}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x1911, &(0x7f0000000080)={0x0, 0x570b, 0x200, 0x0, 0x1, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = epoll_create1(0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2f996b239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824d3a86d33d649ba393dc2987eff03845eadc51457e4445c"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 4.08345431s ago: executing program 4 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x0, 0x5, 0x0, @dev, 0x0, "20f0ddf9a66a"}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB='.'], 0x20}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r8, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/219, 0xdb}], 0x1, 0x59, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0xea60}}, &(0x7f0000000240)) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES8=r8, @ANYRES32=r7, @ANYRES8=r4], 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x24044844) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001400010400000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000100fe"], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r9 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$SNDCTL_SEQ_PANIC(r8, 0x5111) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r13}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r14, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r14, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r9, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.871213875s ago: executing program 4 (id=1310): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000300)="a451f091f012eb2f06559ff1a9c0b3b9f683b31d80922d374e4f72869bd4848c972365c7e705d688a7dbe85cd8ca3bb28e71d324cd8a827345145331da94c3c6da5f2f9707", 0x45}, {&(0x7f0000000280)="b3f64dbe90d71d8edd0e5d9d66f9747316", 0x11}, {&(0x7f00000006c0)="5b6f06389bc43aca763248fe90f25d69fecf758cd55cba3e3afac0528c5f56dc6ed9d211dd89347170de392f1b061366f3d9a5b8487dc179c4fe0d65c22486f7081bfb03debab20d77364ef993f5fee32a0f7824375b8275658739aaaf6f558d95b2e4c9dc849fa3810fa41591d859af4a4af7d61081d7f8bdac34140ec5024ce5b520198c88d4d5a39af8d09b740b19ebc65637279c9b31", 0x98}, {&(0x7f0000000400)="ef10f4746fb6e6fab243b06e", 0xc}, {&(0x7f0000000440)="b5b03f8c4ac82553f239b9168666e1c434879824ed9307759c549033cb7eac993024c5e437d7e1a9aa227bcad5d4edbb5193a986634f6d05ad43af74f2f67e3f4437f82963b7a088fd6b38d09a4515a465453a357e2215421499c271e48e326c8e9969a9c337cc1899725f66675a5f5f53e9ed968372289b6fa2929942c325051c34139ac205a1a5abe80af317412f4749f47d837cf06f8314a1ffd70106e7a112c46bc2e116bc5cccaebcaa54fa6acdc475c85fcff57be8573b67f91b21d4a401f592f043f3b122e3a76d1092e130c79c7c7ed682bec02f6de11d5b60ed9a44b3d2108880fe8f1f7b16208eaed210ef600f", 0xf2}, {&(0x7f0000000880)="6d84920713b678051000de93c4e19a67ad8f9e19187f3a", 0x17}, {&(0x7f0000000980)='=', 0x1}], 0x7) 3.724872799s ago: executing program 1 (id=1311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3ed9, &(0x7f0000000080)={0x0, 0x5705, 0x200, 0x0, 0x0, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2fc099239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500800000802111922010802110000000802110000000000000000000064000100000602e473020202010882848b960c121824000000"], 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000019640)=ANY=[], 0x1e) nanosleep(0x0, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000200)={0x20000006}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x0, 0x91ab, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040601020000000400000000000000000500010007000000"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) 3.666521448s ago: executing program 4 (id=1312): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000480)='./file1\x00', 0xc000, 0x1) truncate(&(0x7f00000004c0)='./file1\x00', 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000181000/0xf000)=nil, 0xf000}, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0x10, &(0x7f0000000440)={0x0, 0x80}}, 0x0) bpf$BPF_BTF_LOAD(0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000000000000007edab354b419f8000000080000000061001e2e006100"], 0x0, 0x20, 0x0, 0x1, 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, &(0x7f0000000440)=""/177, &(0x7f0000000e40), 0x0, 0x7f, r4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f00000004c0)=""/150, 0x96, 0x0, &(0x7f0000000580)=""/207, 0xcf}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000ffff0000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00f1ffffff000000b70500000800000085000000a50000005484fc0c11000000850000000a000000180100cbc500696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008e8ece1cf36000000b70300c976812bfe4120", @ANYRES32=r3, @ANYBLOB="00000000014d00009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x9, 0xb2, &(0x7f0000000840)=""/178, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xd, 0x3, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000980)=[0x1, r4, r4], &(0x7f00000009c0)=[{0x0, 0x3}, {0x2, 0x2000000, 0xe, 0x4}, {0x0, 0x3, 0x0, 0xd}, {0x4, 0x1, 0x5}], 0x10, 0xfffffffe}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x90, &(0x7f00000001c0)=""/144, 0x40f00, 0x10, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xf, 0x4, 0x4}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff8}, 0x90) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000100)=0x20000002, 0x4) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r7, 0x3309) 3.48170604s ago: executing program 0 (id=1314): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000001540)=ANY=[@ANYBLOB="208588e01455", @ANYRES16, @ANYBLOB="25f2d726406828138c670160a1f75b02487d0a553fe3ee7194e4305d8cbc07a17ad04fad394b92b3108be94951d5"], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x2200, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab59fc179fd1f80600000000000000c6a4b4e00d9683dda1af1ea89df2bb0000000300000000000000000000fdec00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.312734477s ago: executing program 0 (id=1315): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000019840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x28, 0xee, 0x0, 0x0, [0x72a35bda, 0x1, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0x9, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {@multicast2}, {}, {@broadcast}, {@multicast2}]}, @noop, @cipso={0x86, 0x2c, 0x0, [{0x0, 0x7, "7f9ba46964"}, {0x0, 0x7, "a8e578de1c"}, {0x1, 0x3, "d4"}, {0x7, 0x5, "c78ba2"}, {0x6, 0xb, "e039ff8328170f6051"}, {0x0, 0x2}, {0x0, 0x3, "13"}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x1911, &(0x7f0000000080)={0x0, 0x570b, 0x200, 0x0, 0x1, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = epoll_create1(0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2f996b239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824d3a86d33d649ba393dc2987eff03845eadc51457e4445c"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 3.129334405s ago: executing program 3 (id=1316): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af26, &(0x7f00000003c0)) write$binfmt_script(r1, &(0x7f0000000e00), 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x8010, r1, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000140)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="18ce00006a00039b45492d531a161cc96ab200000000000050c7cd320008ffffff81cdfd21fcb59574dc3183c077b45b30558666e0c1afaa0077f2f1cfd3989e6bc819f457"], 0x18}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000003c0)={@host}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@host}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100e8ffffff00000000180000002000018008000100", @ANYRES32=r8, @ANYBLOB="14000200776731"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x36e, 0x41f7ac6e, 0x3, 0x1402, r1, 0x81ed, '\x00', r8, r1, 0x0, 0x4, 0x1, 0xf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x17, {0x17, 0x0, "570b0259339f9fa5039beafe0a5ed5717a72556717"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000000)={&(0x7f0000000580)=[0x10, 0xccdb, 0x2, 0x7, 0xe, 0x7, 0x8, 0x2, 0x7ff, 0x5, 0x9, 0x8001, 0x8, 0x7, 0x5, 0x31d4, 0xffff, 0x4, 0xf, 0x10000, 0x200, 0x1, 0x40, 0x7, 0x7, 0xffff, 0x80000000, 0x4, 0x7fffffff, 0xe7f6, 0x9, 0xff, 0x1, 0x9, 0x8, 0x5, 0x7b, 0x6, 0x4, 0x10000, 0x8, 0x9, 0x4, 0x8, 0xff, 0xe, 0x7ff, 0x1, 0x81, 0x0, 0x4, 0x9, 0x101, 0x1, 0xb, 0x8, 0xff, 0x3, 0x6, 0xffff, 0x2, 0x5, 0x7, 0x3, 0x4, 0x1, 0x2000000, 0x6, 0xffffff7f, 0x50d8, 0x59ad, 0x81, 0x0, 0xff, 0x4, 0xfffffffd, 0x1, 0xffff, 0x6, 0x80000000, 0x5d, 0x4, 0x3, 0x9, 0x3, 0x800, 0x4, 0x5, 0xffffffff, 0x6, 0xc, 0x2, 0x5, 0x6, 0x7fff, 0x9, 0x8, 0x8, 0x101, 0x81, 0x7, 0x2, 0x3e, 0x9, 0x5, 0xb, 0x1, 0x3, 0xc, 0x8, 0x0, 0x10000, 0x0, 0x2, 0x9e, 0x5, 0x4042, 0x101, 0x5, 0x3, 0xb246, 0x0, 0x7fff, 0x2, 0x6, 0x5, 0x9, 0x101, 0x4, 0x5, 0x0, 0x0, 0x97b2, 0x4, 0x6, 0x0, 0xbf, 0xf8000000, 0x946, 0x4, 0x8, 0x4, 0x96, 0xa, 0x1, 0x5, 0x80, 0x7ff, 0xa, 0xc, 0x5, 0x2, 0x3, 0x783, 0x7fffffff, 0x76ef, 0x9, 0x5, 0x3, 0x1, 0x9, 0x2, 0x37d, 0x8, 0x50000, 0x1, 0xc, 0x4, 0x4, 0x7, 0x400, 0x6, 0xff, 0x6c000000, 0x101, 0xa, 0x4, 0x1, 0x4, 0x4, 0x5, 0x7ff, 0x9, 0xfff, 0x0, 0x80000001, 0x4, 0xa8, 0x4, 0x9, 0xbd, 0x10000, 0xfffffff8, 0x3, 0x7, 0x3, 0x4, 0x6, 0x5, 0x5, 0xd, 0x8, 0x5, 0x9, 0x3, 0x7, 0x9, 0x5, 0xca1e, 0x1, 0x1000, 0xfffff4e7, 0x1, 0x101, 0x81, 0x8, 0x5, 0xfff, 0x6, 0x1f, 0x41a2, 0x6, 0x100, 0x3, 0x464, 0x0, 0xe0, 0x8000, 0x4, 0xc0, 0x1, 0x7fffffff, 0x528, 0x5, 0x3, 0x4, 0x52, 0xfffffffb, 0x20000, 0x1000, 0x2, 0x1, 0x7ec7, 0x5, 0x1, 0x8, 0x7fff, 0x80000001, 0xe144, 0xd, 0x18, 0x3, 0x2d, 0xd, 0xb6, 0x7fffffff, 0x176, 0xb044, 0x8, 0x1, 0x2, 0xffffffff, 0x375a, 0x8, 0x8, 0xf, 0x9, 0x8, 0x8000, 0x9, 0x4, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x1, 0xa, 0x0, 0x7, 0xf053, 0x5, 0x5, 0x7fff, 0x5, 0x7, 0x6, 0x9, 0xb97, 0xfd76, 0x0, 0x5, 0x0, 0x3, 0x54, 0x6, 0x8000, 0x1, 0x2, 0x9, 0x8, 0x0, 0x1, 0x10000000, 0xf100, 0x2, 0x6, 0x9, 0x0, 0x60000, 0x4, 0x7, 0x8, 0x4, 0x4, 0xd665, 0x5, 0x8000, 0x8001, 0x525, 0xda1, 0x6, 0x6, 0xd278, 0x7, 0x4, 0x8, 0x7ea, 0xcac2, 0x8, 0x0, 0x5, 0x1, 0x4, 0x1, 0x5, 0x7fffffff, 0x1ff, 0x17cc, 0x9, 0x3, 0x8, 0xbc04, 0x0, 0x1, 0x5, 0xb, 0x8, 0x9, 0x3, 0x3, 0x0, 0x9, 0xb94, 0x6, 0x0, 0x1, 0x1000, 0xfffffffc, 0x80000000, 0xff, 0x454e1332, 0x2, 0x3, 0xfff, 0xd06, 0x100, 0x6, 0x7, 0x4, 0x1, 0xa73, 0x10000, 0xfffeffff, 0x1, 0x7f, 0x5, 0xb, 0x8, 0x4, 0x0, 0x0, 0xf42, 0xfffffff0, 0x6e8e, 0x6, 0x5, 0x3, 0x8, 0x4, 0x2, 0xffff, 0x4, 0xfffffffc, 0x8000, 0x7fffffff, 0x6, 0x0, 0xb, 0xb, 0xfffffffa, 0x81, 0x101, 0xfffffffe, 0x9, 0x1, 0x8, 0x63b2, 0xc, 0xf, 0x6, 0x7, 0x6, 0x10, 0x1000, 0x246cbc17, 0x1, 0x3, 0x80000000, 0x800, 0x10000, 0x0, 0x16a, 0x1, 0xb, 0x1, 0x9, 0xb501, 0x7, 0x7f, 0x3, 0x8, 0xcee7, 0x1, 0x10001, 0x81, 0x0, 0x100, 0x0, 0x5, 0x7fff, 0x5, 0xc361, 0x100, 0xe, 0x4, 0x2, 0x7ff, 0x4, 0x1ff, 0x0, 0x0, 0x7, 0x0, 0xb, 0x7cd, 0x881, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x80000001, 0x1000, 0x8, 0x9, 0x0, 0x200, 0xfffffffc, 0xffff, 0x0, 0x6, 0x0, 0x3, 0x1, 0x81, 0x3, 0x2298a5ac, 0x3, 0x401, 0x6, 0x6, 0x9, 0x846e, 0x101, 0x0, 0x8, 0x9, 0x800, 0x9, 0x10, 0xfffffe00, 0x0, 0x0, 0x10, 0x9, 0x4, 0x1, 0x0, 0x0, 0x7, 0x401, 0x0, 0x4, 0x3, 0x0, 0x10, 0x4a, 0x6, 0x100, 0x10001, 0x3, 0x80, 0x2, 0x10000, 0xffff8961, 0x7fffffff, 0x9, 0x0, 0xbe4f, 0x8000, 0x5a21, 0x1, 0x0, 0x4, 0x6, 0xb094, 0x2, 0x3, 0x0, 0x1, 0x7fff, 0x40c, 0x3, 0xfffffff8, 0x9, 0x0, 0x4, 0x630, 0xd, 0x1, 0x0, 0x0, 0xfffffff8, 0x4, 0xff, 0x8000, 0x3, 0xa5, 0x7, 0x5, 0x4, 0xd, 0x2e9e1699, 0x3, 0x3, 0x0, 0x80000001, 0x10000, 0x6, 0x3, 0x0, 0x88, 0x1, 0x1, 0xfff, 0x5, 0x1, 0x6, 0x5, 0xfffffff7, 0x3, 0xffffffff, 0xfffffff3, 0x3, 0xfffffffc, 0x10001, 0x6, 0xe, 0x4, 0xcfd7, 0x2f62, 0x0, 0x88b, 0x0, 0x9, 0x0, 0x0, 0xb6, 0x5, 0xe, 0x0, 0x9, 0x0, 0x3456, 0x1, 0x0, 0x4400, 0x8, 0x8, 0x0, 0x2, 0x0, 0x0, 0xcc0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x4, 0x0, 0x9, 0x6, 0x9, 0x0, 0x7073, 0xffffffff, 0x5, 0x0, 0xffffffff, 0x8, 0x4, 0x317, 0x1, 0x0, 0x6, 0x101, 0x7fffffff, 0x7, 0x2, 0x611, 0xaf4, 0x7fff, 0x2, 0x4, 0x5e04, 0x8b, 0xfffffff9, 0x8d, 0x1000, 0x3, 0x9, 0x1, 0x8, 0x0, 0x40, 0x3, 0x1ff, 0x8000, 0x4, 0xfffffffe, 0xffff, 0x0, 0x1, 0x0, 0xc, 0x0, 0x5, 0x3, 0x0, 0x270c, 0x1, 0x80000000, 0x0, 0x7f, 0x1000, 0x0, 0x3, 0x54f80000, 0x9, 0x8, 0x1, 0xffffffff, 0x9, 0x8, 0x0, 0x65c, 0x7, 0x100, 0x7fff, 0x1, 0xd, 0x4, 0x4, 0x5, 0x2f1c, 0x7, 0x3, 0x9, 0x800, 0x0, 0x4, 0x569189cf, 0x6, 0x7e, 0x2, 0x4f, 0xb2, 0x140, 0x7, 0x0, 0x2, 0x2, 0x8, 0x0, 0x2, 0x7, 0x7, 0xfffffffe, 0x80000001, 0x0, 0x401, 0x40, 0x0, 0x0, 0xe00, 0xa0000, 0x6, 0x9, 0x80, 0x6, 0x7, 0x3, 0x0, 0x60000000, 0xc, 0x4, 0x2, 0xffffff80, 0xffffffff, 0x7, 0x7, 0x0, 0x56e3, 0x2, 0x8, 0x7fffffff, 0x1, 0x3, 0x10001, 0x1, 0x81, 0x7fffffff, 0x6e1c, 0x2, 0x5, 0x0, 0x6, 0x1, 0x6, 0x10, 0x5, 0x5, 0x0, 0x3, 0x2905, 0x0, 0x0, 0x8001, 0x9, 0x5, 0x8, 0x6a, 0x0, 0x0, 0xb, 0x0, 0x7, 0x8, 0xa, 0xffffff91, 0x0, 0xfffff2cc, 0x9, 0x5, 0x1, 0x3, 0x6, 0x0, 0x906, 0x0, 0x204, 0x8000005, 0xfffffff9, 0x3ff, 0x10, 0x4, 0xa, 0x2, 0x4, 0xff, 0x8, 0x9, 0x82, 0x15, 0x10001, 0x8, 0xda, 0x9, 0x1000, 0x5, 0x2, 0x6, 0x0, 0x7ff, 0x4, 0x3, 0x80, 0xaf5e, 0x2, 0x3, 0x7, 0x0, 0x7, 0x2, 0x10001, 0x5, 0x8000, 0x4, 0x3, 0x0, 0x8, 0x1, 0x5, 0x6, 0xfffffff9, 0x1, 0x4, 0x8, 0x3, 0xfffff322, 0x7, 0x4, 0x5, 0x8, 0xf1f1, 0x10, 0x400, 0x101, 0x10, 0x6, 0x1, 0x45, 0x3, 0x17, 0x8, 0x1, 0x7e7b, 0x8000, 0x8, 0x68, 0x7, 0x1, 0x5, 0x631a8c26, 0x7, 0x632, 0x722, 0x3, 0x7, 0x8, 0x0, 0x1, 0x1, 0xfffffff9, 0x0, 0x2, 0x2, 0x9, 0x401, 0x83, 0x220, 0xfffffff3, 0x1ff, 0x3, 0x6, 0x10, 0x9, 0x3, 0xa, 0x6, 0x4229, 0x3, 0x7fffffff, 0x4693dcf4, 0x6, 0x6, 0x10, 0x5, 0x4, 0xff, 0x9b8, 0xfffffffa, 0x6, 0x3, 0x3b5, 0x2, 0x10000, 0x8, 0x3, 0x401, 0xff, 0xf, 0x401, 0x5, 0x200, 0x4, 0x4, 0x8, 0xd3, 0x7, 0xffff, 0x2, 0xfffff296, 0x1, 0x5aa0, 0xf8, 0x5, 0x1, 0x3, 0x2000000, 0x3, 0x6, 0x9, 0x7ff, 0x4a, 0x5, 0xfffffff8, 0x3, 0x8, 0xc46, 0x3, 0x3, 0x4, 0x7, 0x7, 0x400, 0xffffffff, 0x0, 0x30000000, 0x1, 0x8, 0x10000000, 0x9, 0x8001, 0xd, 0x6, 0x10001, 0x3800, 0x4, 0xf91, 0xcf, 0x9, 0x5, 0x6, 0x40, 0x9, 0xfffff7b2, 0x81, 0x541, 0xfffffffd, 0x2, 0xb, 0x7, 0x8, 0x0, 0x98, 0xa, 0x9, 0x6, 0x8, 0x0, 0x7, 0x7b, 0x0, 0x800000, 0x4, 0x0, 0xd0, 0x1, 0x9, 0x1, 0x6, 0x4, 0xf266, 0x8, 0x3, 0x9, 0xff, 0x6, 0x0, 0xfffffff8, 0xe1, 0x7, 0x0, 0x1, 0xcc04, 0x9, 0x4, 0x8, 0x0, 0x9, 0x7, 0x7ff, 0x25b9, 0xf, 0x1, 0x9, 0x100, 0x0, 0xbd, 0x0, 0x0, 0xe, 0x9, 0x7, 0x3, 0x1b2], 0x6, 0x400, 0xfffffff4}) 2.924673393s ago: executing program 1 (id=1317): openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000002c0)={0x0, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) socket(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x1a8, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0xe, 0xd3, 0x29, 0x40, 0x6cd, 0x114, 0xc45f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x196, 0x3, 0x4, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x91, 0x67, 0x8, 0x5d, 0xd7, 0x12, 0x1, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x6, 0x10, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0xfa, 0x0, 0xb5}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x6, 0x80, 0x8}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, [@generic={0x63, 0xd, "78aaa2a0eb7dfd2f8f2c4d5c881109cfc55310efebc37781a7b1d8349b11d290f2c1f7c77e1837e295006fd9a286d0e52e843e787c9bd9dfaf738b36c66b7ba9dfb9a960da6f8728aaf9183f784169a5b8cf55446a2ee3aa53b2d502e1f8e68fc4"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0xf9, 0x5, 0x5}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0xe, 0x37, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x4, 0x8000}, @generic={0x31, 0x4, "a45bfc58fdf34ae0e8563ddf5e753b4c095811b36c41d2b5d2baa232a7ab2b80eef187f3dab36e8850ec209ed60e8c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x49, 0x3c, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x5, 0xe, 0x0, [@generic={0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x5b}]}}]}}, {{0x9, 0x4, 0xc5, 0x0, 0x1, 0x9c, 0x2b, 0xf7, 0x0, [@hid_hid={0x9, 0x21, 0x5, 0x53}], [{{0x9, 0x5, 0xe86f2ffacae8afc, 0x2, 0x200, 0x0, 0xfd, 0x5, [@generic={0x56, 0xb, "ecfc13010880443e54fd2f9edb2040a81cd8a18e8c4de6e263dcf4849c12056d07cce6300b248510d6503ec6cd7f0387a93ca792dee8dbc87890a84a39b7ebee71684498f94f6fe8c133a2d188de3dc33eb11338"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x98}]}}]}}, {{0x9, 0x4, 0xe4, 0x7f, 0x1, 0x19, 0x52, 0xe7, 0x0, [], [{{0x9, 0x5, 0x6, 0x4, 0x200, 0x1, 0x81, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x5, 0x8, 0x0, 0x10, 0x6}, 0x8f, &(0x7f0000000300)={0x5, 0xf, 0x8f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "2282f9aabe8a525b86d2b81876d2b6c7"}, @generic={0x5a, 0x10, 0x3, "af5577787175ee24898c274d1311a4a52c4b57915a81f3ed6c58e5419adb0e9b68a5743cacb57e110029ff9efc2c4b81821db0e939bedddb6314adcf0f642c5422e8aad84654384a22cb1f9b410c1f267ec3fb40c85441"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0xf000, 0x0, [0x3e80, 0x0, 0xff00cf, 0xc0a0]}]}, 0x6, [{0x2, &(0x7f0000000540)=@string={0x2}}, {0x15, &(0x7f00000007c0)=@string={0x15, 0x3, "a4e77154b104293bfdaf483ab15d96ea5fcd6f"}}, {0x0, 0x0}, {0xf2, &(0x7f00000009c0)=@string={0xf2, 0x3, "ac22800b513c9a1cc2dfe3d5c1064f8619fe413cc46ee047e775ea2b0e1f607eedf629991e4c72f0797e0494bf3b49fa210fcdb176cfd553d0b09c5b684226238a41e28d55a6c9bb854e0853cb2a147619582bb7ac07b13bf3ea79909703e9e47743b9050aee4c793350bf44fc0dfe751af1c81838c0141d5e6f34d383f6464b4c04b83a6b9e4828a2e6ee466f77e0e05000250f0b5451cb9e19e7d5ba956ea52e47727de1b8c99ea5c057dd2569a12311d957ca04f05eaf0094f157b49a33ecdc63c7fada965cb00aa69da6351c044e2138a49ac53800753782378f687616ae63e152d8231ab7f37af61cecb2e02719"}}, {0xf, &(0x7f00000006c0)=ANY=[]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4}}]}) get_mempolicy(0x0, &(0x7f0000000040), 0xffe0000000000000, &(0x7f00004f1000/0x4000)=nil, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000ffffffffffffff9600000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x2}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000040)={{{@in=@empty, @in6=@dev}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x40, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003f000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="450f01c30f01d848b8dc540000000000000f23d80f21f835400000b00f23f866bad004b000ee3667660fc4c200c74424004c000000c744240298000000ff1c2466430f7056549ddd8a90000000440f20c03504000000440f22c066baf80cb895a0998fef66bafc0cec", 0x69}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) 2.617068179s ago: executing program 4 (id=1318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00{\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaba8c, 0x0) fsync(0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 2.565276619s ago: executing program 2 (id=1319): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) epoll_create1(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002100110000000000000600000a1400"/36], 0x30}}, 0x0) 1.883822263s ago: executing program 2 (id=1320): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x9d) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfd, {}, {}, @raw32={[0x2600]}}], 0xffc8) madvise(&(0x7f0000072000/0x1000)=nil, 0x1000, 0x0) 1.781806482s ago: executing program 0 (id=1321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) (fail_nth: 16) 1.244670962s ago: executing program 2 (id=1322): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000300)="a451f091f012eb2f06559ff1a9c0b3b9f683b31d80922d374e4f72869bd4848c972365c7e705d688a7dbe85cd8ca3bb28e71d324cd8a827345145331da94c3c6da5f2f9707", 0x45}, {&(0x7f0000000280)="b3f64dbe90d71d8edd0e5d9d66f9747316", 0x11}, {&(0x7f00000006c0)="5b6f06389bc43aca763248fe90f25d69fecf758cd55cba3e3afac0528c5f56dc6ed9d211dd89347170de392f1b061366f3d9a5b8487dc179c4fe0d65c22486f7081bfb03debab20d77364ef993f5fee32a0f7824375b8275658739aaaf6f558d95b2e4c9dc849fa3810fa41591d859af4a4af7d61081d7f8bdac34140ec5024ce5b520198c88d4d5a39af8d09b740b19ebc65637279c9b31", 0x98}, {&(0x7f0000000400)="ef10f4746fb6e6fab243b06e", 0xc}, {&(0x7f0000000440)="b5b03f8c4ac82553f239b9168666e1c434879824ed9307759c549033cb7eac993024c5e437d7e1a9aa227bcad5d4edbb5193a986634f6d05ad43af74f2f67e3f4437f82963b7a088fd6b38d09a4515a465453a357e2215421499c271e48e326c8e9969a9c337cc1899725f66675a5f5f53e9ed968372289b6fa2929942c325051c34139ac205a1a5abe80af317412f4749f47d837cf06f8314a1ffd70106e7a112c46bc2e116bc5cccaebcaa54fa6acdc475c85fcff57be8573b67f91b21d4a401f592f043f3b122e3a76d1092e130c79c7c7ed682bec02f6de11d5b60ed9a44b3d2108880fe8f1f7b16208eaed210ef600f", 0xf2}, {&(0x7f0000000880)="6d8492", 0x3}, {&(0x7f0000000980)='=', 0x1}], 0x7) 1.244307642s ago: executing program 0 (id=1323): socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = userfaultfd(0x1) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x3, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES16], 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00004e7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81fd) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x7fffffffffffffff}) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40281, 0x0) read$midi(r3, 0x0, 0x49) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100) 1.15649466s ago: executing program 2 (id=1324): syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) capset(0x0, 0x0) semget$private(0x0, 0x0, 0x0) close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000002c0)={0x2, {}, {0x0, 0x0, 0x0, 0xffe7}}) 1.055177199s ago: executing program 2 (id=1325): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc283586ed68c90b12e61f56b8fca5bea17ef38a60aa7b0efbf449c5f171c189c3f7c05aac28a8d0e4f3df3f755069"], 0x11) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x86c43, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10500) r2 = syz_io_uring_setup(0x1e2a, &(0x7f0000000200)={0x0, 0x0, 0x20}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x3ad6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x27, &(0x7f0000000140)=[{0x0, 0xf7, 0x8, 0x8}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff052000"], 0x7) unshare(0x2c020400) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r8, 0x0) ftruncate(r8, 0xc17a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r9, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 272.3572ms ago: executing program 4 (id=1326): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000019840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x2c, 0xee, 0x0, 0x0, [0x72a35bda, 0x1, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0x9, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {@multicast2}, {}, {@broadcast}, {@multicast2}]}, @noop, @cipso={0x86, 0x2c, 0x0, [{0x0, 0x7, "7f9ba46964"}, {0x0, 0x7, "a8e578de1c"}, {0x1, 0x3, "d4"}, {0x7, 0x5, "c78ba2"}, {0x6, 0xb, "e039ff8328170f6051"}, {0x0, 0x2}, {0x0, 0x3, "13"}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x1911, &(0x7f0000000080)={0x0, 0x570b, 0x200, 0x0, 0x1, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000300)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = epoll_create1(0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2f996b239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824d3a86d33d649ba393dc2987eff03845eadc51457e4445c"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 167.376659ms ago: executing program 0 (id=1327): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3ed9, &(0x7f0000000080)={0x0, 0x5705, 0x200, 0x0, 0x0, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2fc099239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500800000802111922010802110000000802110000000000000000000064000100000602e473020202010882848b960c121824000000"], 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000019640)=ANY=[], 0x1e) nanosleep(0x0, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000200)={0x20000006}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x0, 0x91ab, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040601020000000400000000000000000500010007000000"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) 56.372639ms ago: executing program 2 (id=1328): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mount_setattr(r3, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x7000, 0x1e0000, {r1}}, 0x20) 1.292253ms ago: executing program 4 (id=1329): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x3, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x7800, 0x700, 0x9, 0xd7b5}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'sit0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0xd, 0x10, 0x2f, 0x0, @local, @multicast1}}}}) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x23, 0x1}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 32) r4 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x2705, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000001440)) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x22, 0x4007, @fd=r4, 0x4, &(0x7f0000000300)=""/252, 0xfc}) (async, rerun: 32) socket$packet(0x11, 0x0, 0x300) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) (async, rerun: 32) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=r5], 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x0) (async, rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="0849ae43", 0x4) (async) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) (async, rerun: 64) io_uring_enter(r7, 0x4982, 0xcdf1, 0x1a, &(0x7f0000000000)={[0x3]}, 0x8) (async, rerun: 64) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x8, 0x34c0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x48) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x30, r9, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xffffffff, 0x0, 0x1}}}}, 0x30}}, 0x0) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) 0s ago: executing program 3 (id=1330): mknod(0x0, 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r2}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3}, 0x20) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x801c581f, 0x0) write$FUSE_LK(r0, &(0x7f00000021c0)={0x28, 0x0, r4, {{0x0, 0x0, 0x1}}}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x82) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x58}}, 0x4044) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002200)={&(0x7f0000229000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008a8000/0x2000)=nil, &(0x7f00009da000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000694000/0x1000)=nil, &(0x7f00001d2000/0x3000)=nil, &(0x7f00006d1000/0x4000)=nil, &(0x7f000020f000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="7485b1fdff0d8b71b6b00659e423932ce726802ddf73f5c7546bdc537cb9", 0x1e, r5}, 0x68) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000240)='./file0\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) gettid() ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000001c0)=0xb0000) timer_create(0x3, 0x0, &(0x7f0000000340)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): 4.082547][T10708] bridge_slave_1: entered promiscuous mode [ 364.113976][T10565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.298804][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.582819][T10708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.656450][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.665645][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.687296][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.704224][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.712491][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 364.728149][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.740073][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.839197][T10708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.980617][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.058914][T10708] team0: Port device team_slave_0 added [ 365.169296][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.190647][T10708] team0: Port device team_slave_1 added [ 365.291067][T10708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.302853][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.337472][T10708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.404264][T10708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.420641][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.451576][T10708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.560628][T10565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.733165][T10708] hsr_slave_0: entered promiscuous mode [ 365.745082][T10708] hsr_slave_1: entered promiscuous mode [ 365.755006][T10708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.770894][T10708] Cannot create hsr debugfs directory [ 365.780464][T10597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.876877][ T5225] Bluetooth: hci2: command tx timeout [ 365.886750][T10597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.905842][T10597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.948122][ T52] bridge_slave_1: left allmulticast mode [ 365.953814][ T52] bridge_slave_1: left promiscuous mode [ 365.978201][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.014777][ T52] bridge_slave_0: left allmulticast mode [ 366.026247][ T52] bridge_slave_0: left promiscuous mode [ 366.032017][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.315753][ T5275] usb 4-1: USB disconnect, device number 43 [ 366.327410][ T5275] ftdi_sio 4-1:0.0: device disconnected [ 366.836239][ T5225] Bluetooth: hci6: command tx timeout [ 366.877028][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.893660][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.918707][ T52] bond0 (unregistering): Released all slaves [ 366.968052][T10565] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.067861][T10597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.204315][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.211495][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.321671][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.328886][ T5230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.438923][T10773] chnl_net:caif_netlink_parms(): no params data found [ 367.517970][ T52] hsr_slave_0: left promiscuous mode [ 367.530161][ T52] hsr_slave_1: left promiscuous mode [ 367.536663][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.544092][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.577004][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.584508][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.624078][ T52] veth1_macvtap: left promiscuous mode [ 367.630557][ T52] veth0_macvtap: left promiscuous mode [ 367.641101][ T52] veth1_vlan: left promiscuous mode [ 367.651431][ T52] veth0_vlan: left promiscuous mode [ 367.964190][ T5225] Bluetooth: hci2: command tx timeout [ 368.207928][ T5278] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 368.316369][ T52] team0 (unregistering): Port device team_slave_1 removed [ 368.352022][ T52] team0 (unregistering): Port device team_slave_0 removed [ 368.425370][ T5278] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 368.434798][ T5278] usb 4-1: config 0 has an invalid interface number: 145 but max is 2 [ 368.449908][ T5278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.461150][ T5278] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 368.470449][ T5278] usb 4-1: config 0 has no interface number 1 [ 368.476692][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 368.491248][ T5278] usb 4-1: config 0 interface 145 has no altsetting 0 [ 368.504445][ T5278] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.514573][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.524219][ T5278] usb 4-1: Product: syz [ 368.528851][ T5278] usb 4-1: Manufacturer: syz [ 368.533470][ T5278] usb 4-1: SerialNumber: syz [ 368.542460][ T5278] usb 4-1: config 0 descriptor?? [ 368.916972][ T5225] Bluetooth: hci6: command tx timeout [ 369.345657][T10565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.415513][T10565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.464518][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.487738][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.499553][T10773] bridge_slave_0: entered allmulticast mode [ 369.523547][T10773] bridge_slave_0: entered promiscuous mode [ 369.603733][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.617813][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.642056][T10773] bridge_slave_1: entered allmulticast mode [ 369.653863][T10773] bridge_slave_1: entered promiscuous mode [ 369.827561][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.848160][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.985400][T10773] team0: Port device team_slave_0 added [ 370.003982][T10773] team0: Port device team_slave_1 added [ 370.023874][T10597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.048127][T10565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.108300][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.123124][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.159820][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.205736][T10597] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.252604][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.268329][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.304046][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.360464][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.367741][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.420003][T10708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.458545][T10708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.492450][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.499633][ T6815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.543503][T10708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.602551][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.622919][T10708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.643978][T10773] hsr_slave_0: entered promiscuous mode [ 370.654066][T10773] hsr_slave_1: entered promiscuous mode [ 370.661129][T10773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.673911][T10773] Cannot create hsr debugfs directory [ 370.715134][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.780517][T10565] veth0_vlan: entered promiscuous mode [ 370.823028][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.882561][T10565] veth1_vlan: entered promiscuous mode [ 370.964276][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.996924][ T5225] Bluetooth: hci6: command tx timeout [ 371.051224][ T5278] usb 4-1: 0:2 : does not exist [ 371.073628][ T5278] usb 4-1: USB disconnect, device number 44 [ 371.143871][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 371.143889][ T29] audit: type=1326 audit(1722215451.488:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 371.173423][ T29] audit: type=1326 audit(1722215451.488:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 371.197602][ T29] audit: type=1326 audit(1722215451.508:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 371.231467][ T29] audit: type=1326 audit(1722215451.508:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 371.256231][ T29] audit: type=1326 audit(1722215451.508:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 371.280376][ T29] audit: type=1326 audit(1722215451.508:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65a1b790b7 code=0x7ffc0000 [ 371.303584][ T29] audit: type=1326 audit(1722215451.508:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f65a1b7902c code=0x7ffc0000 [ 371.335578][ T29] audit: type=1326 audit(1722215451.508:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f65a1b78f64 code=0x7ffc0000 [ 371.357071][T10708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.365044][ T29] audit: type=1326 audit(1722215451.508:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f65a1b78f64 code=0x7ffc0000 [ 371.387529][ T29] audit: type=1326 audit(1722215451.508:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f65a1b75fca code=0x7ffc0000 [ 371.464097][ T52] bridge_slave_1: left allmulticast mode [ 371.471687][ T52] bridge_slave_1: left promiscuous mode [ 371.478641][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.488295][ T52] bridge_slave_0: left allmulticast mode [ 371.494420][ T52] bridge_slave_0: left promiscuous mode [ 371.501107][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.577721][ T5278] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 371.789123][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.790684][ T5278] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 371.813432][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.816579][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.832479][ T5278] usb 4-1: config 0 descriptor?? [ 371.840123][ T52] bond0 (unregistering): Released all slaves [ 371.841235][ T5278] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 371.855237][ T5278] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 371.863583][T10565] veth0_macvtap: entered promiscuous mode [ 371.873372][ T5223] udevd[5223]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.895441][T10597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.002621][T10565] veth1_macvtap: entered promiscuous mode [ 372.018153][T10708] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.111963][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.119149][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.147170][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.158239][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.172859][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.183631][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.195490][T10565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.247667][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.254826][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.270611][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.294650][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.307560][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.323418][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.338150][T10565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.432800][T10565] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.463752][T10565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.475131][T10565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.493228][T10565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.525915][ T52] hsr_slave_0: left promiscuous mode [ 372.540359][ T52] hsr_slave_1: left promiscuous mode [ 372.558790][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.572220][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.587147][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.594666][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.638669][ T52] nlmon0: left allmulticast mode [ 372.643916][ T52] nlmon0: left promiscuous mode [ 372.654190][ T52] veth1_macvtap: left promiscuous mode [ 372.662254][ T52] veth0_macvtap: left promiscuous mode [ 372.672828][ T52] veth1_vlan: left promiscuous mode [ 372.681925][ T52] veth0_vlan: left promiscuous mode [ 373.077430][ T5225] Bluetooth: hci6: command tx timeout [ 373.312223][ T52] team0 (unregistering): Port device veth1_to_hsr removed [ 373.462675][ T52] team0 (unregistering): Port device team_slave_1 removed [ 373.511601][ T52] team0 (unregistering): Port device team_slave_0 removed [ 373.514819][ T5273] usb 4-1: USB disconnect, device number 45 [ 373.529913][ T5273] ftdi_sio 4-1:0.0: device disconnected [ 374.112885][T10597] veth0_vlan: entered promiscuous mode [ 374.218262][ T5282] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 374.243913][T10597] veth1_vlan: entered promiscuous mode [ 374.355058][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.386637][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.417906][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 374.432513][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.467356][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.480437][ T5282] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 374.480794][T10708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.490174][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.518519][ T5282] usb 4-1: config 0 descriptor?? [ 374.548210][T10597] veth0_macvtap: entered promiscuous mode [ 374.566704][T10773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.588761][T10773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.610311][ T7281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.617823][T10773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.635992][T10773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.643110][ T7281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.694344][T10597] veth1_macvtap: entered promiscuous mode [ 374.819644][T10708] veth0_vlan: entered promiscuous mode [ 374.830401][T10931] netlink: 68 bytes leftover after parsing attributes in process `syz.2.999'. [ 374.845262][T10708] veth1_vlan: entered promiscuous mode [ 374.878290][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.895608][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.911666][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.932119][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.943229][T10917] netlink: 149664 bytes leftover after parsing attributes in process `syz.3.1052'. [ 374.944027][T10597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.966142][T10917] openvswitch: netlink: Duplicate key (type 0). [ 375.001392][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.013573][ T5282] wacom 0003:056A:030A.000F: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.3-1/input0 [ 375.024574][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.036931][T10597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.047659][T10597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.063456][T10597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.091883][T10597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.101666][T10597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.111251][T10597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.120080][T10597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.193679][ T5272] usb 4-1: USB disconnect, device number 46 [ 375.240312][T10708] veth0_macvtap: entered promiscuous mode [ 375.266431][ T5320] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 375.278480][T10773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.294785][T10708] veth1_macvtap: entered promiscuous mode [ 375.327681][ T7279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.335505][ T7279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.358843][T10773] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.384602][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.391776][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.411151][ T7279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.414847][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.430184][ T7279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.442116][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.452243][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.463216][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.473216][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.484084][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.488112][ T5320] usb 3-1: config 7 has an invalid interface number: 180 but max is 0 [ 375.502475][ T5320] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 375.507276][T10708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.512714][ T5320] usb 3-1: config 7 has no interface number 0 [ 375.526985][ T5320] usb 3-1: config 7 interface 180 altsetting 144 has an invalid descriptor for endpoint zero, skipping [ 375.539365][ T5320] usb 3-1: config 7 interface 180 altsetting 144 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 375.540313][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.567356][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.573762][ T5320] usb 3-1: config 7 interface 180 altsetting 144 has an invalid descriptor for endpoint zero, skipping [ 375.577375][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.589053][ T5320] usb 3-1: config 7 interface 180 altsetting 144 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 375.589088][ T5320] usb 3-1: config 7 interface 180 altsetting 144 endpoint 0x2 has an invalid bInterval 82, changing to 7 [ 375.589117][ T5320] usb 3-1: config 7 interface 180 altsetting 144 bulk endpoint 0x1 has invalid maxpacket 16 [ 375.589142][ T5320] usb 3-1: config 7 interface 180 altsetting 144 has an invalid descriptor for endpoint zero, skipping [ 375.589164][ T5320] usb 3-1: config 7 interface 180 altsetting 144 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 375.606432][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.611741][ T5320] usb 3-1: config 7 interface 180 has no altsetting 0 [ 375.628252][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.635583][ T5320] usb 3-1: New USB device found, idVendor=055f, idProduct=c430, bcdDevice=48.a1 [ 375.648651][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.657053][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.673198][T10708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.684483][ T5320] usb 3-1: Product: syz [ 375.738351][ T5320] usb 3-1: Manufacturer: syz [ 375.739389][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.742963][ T5320] usb 3-1: SerialNumber: syz [ 375.750093][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.758373][T10934] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 375.792026][T10934] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 375.806735][T10934] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 375.855999][T10708] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.871930][T10708] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.883175][T10708] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.891992][T10708] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.049502][ T5320] gspca_main: sunplus-2.14.0 probing 055f:c430 [ 376.085519][ T5320] gspca_sunplus: reg_r err -71 [ 376.097344][ T5320] sunplus 3-1:7.180: probe with driver sunplus failed with error -71 [ 376.149632][T10773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.183245][ T5320] usb 3-1: USB disconnect, device number 32 [ 376.254973][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.288979][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.379961][T10773] veth0_vlan: entered promiscuous mode [ 376.385521][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 376.385536][ T29] audit: type=1326 audit(1722215456.728:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37ef77299 code=0x7ffc0000 [ 376.386289][ T7281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.395246][ T29] audit: type=1326 audit(1722215456.748:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37ef77299 code=0x7ffc0000 [ 376.438634][T10773] veth1_vlan: entered promiscuous mode [ 376.457936][ T7281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.475057][ T29] audit: type=1326 audit(1722215456.798:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb37ef77299 code=0x7ffc0000 [ 376.502567][T10773] veth0_macvtap: entered promiscuous mode [ 376.529953][T10773] veth1_macvtap: entered promiscuous mode [ 376.534527][ T29] audit: type=1326 audit(1722215456.798:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37ef77299 code=0x7ffc0000 [ 376.550293][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.586687][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.604508][ T29] audit: type=1326 audit(1722215456.798:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37ef77299 code=0x7ffc0000 [ 376.623843][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.642679][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.646151][ T29] audit: type=1326 audit(1722215456.798:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb37ef790b7 code=0x7ffc0000 [ 376.653220][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.687019][ T29] audit: type=1326 audit(1722215456.798:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb37ef7902c code=0x7ffc0000 [ 376.691677][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.712431][ T29] audit: type=1326 audit(1722215456.798:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb37ef78f64 code=0x7ffc0000 [ 376.735380][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.746203][ T5277] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 376.762472][ T29] audit: type=1326 audit(1722215456.798:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb37ef78f64 code=0x7ffc0000 [ 376.786209][ T5320] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 376.793834][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.797119][ T29] audit: type=1326 audit(1722215456.798:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10951 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb37ef75fca code=0x7ffc0000 [ 376.805840][T10773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.841730][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 376.859336][T10957] vlan2: entered promiscuous mode [ 376.874285][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.884883][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.904269][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.915029][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.927881][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.940837][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.951942][T10773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.962578][T10773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.973629][T10773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.976476][ T58] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 376.988845][T10773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.000991][T10773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.010229][T10773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.023278][ T5277] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 377.035908][T10773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.036167][ T5320] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 377.054928][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.073176][ T5277] usb 5-1: config 0 descriptor?? [ 377.080277][ T5320] usb 3-1: config 0 has an invalid interface number: 145 but max is 2 [ 377.095791][ T5320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.112513][ T5277] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 377.122138][ T5320] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 377.134204][ T5277] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 377.140689][ T58] usb 4-1: device descriptor read/64, error -71 [ 377.147233][ T5320] usb 3-1: config 0 has no interface number 1 [ 377.153361][ T5320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 377.206188][ T5320] usb 3-1: config 0 interface 145 has no altsetting 0 [ 377.219249][ T5320] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.249611][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.280994][ T5320] usb 3-1: Product: syz [ 377.292911][ T5320] usb 3-1: Manufacturer: syz [ 377.298947][ T5320] usb 3-1: SerialNumber: syz [ 377.317498][ T5320] usb 3-1: config 0 descriptor?? [ 377.322402][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.341887][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.381637][ T7291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.392690][ T7291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.451233][ T58] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 377.616711][ T58] usb 4-1: device descriptor read/64, error -71 [ 377.718133][ T5278] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 377.746754][ T58] usb usb4-port1: attempt power cycle [ 377.896303][ T5272] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 377.926283][ T5278] usb 1-1: Using ep0 maxpacket: 8 [ 377.947144][ T5278] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 377.989281][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.004953][ T5278] usb 1-1: config 0 descriptor?? [ 378.130825][ T5272] usb 2-1: config 0 interface 0 has no altsetting 0 [ 378.159427][ T5272] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 378.197169][ T58] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 378.209882][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.247162][ T58] usb 4-1: device descriptor read/8, error -71 [ 378.270010][ T5272] usb 2-1: config 0 descriptor?? [ 378.556243][ T58] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 378.617686][ T58] usb 4-1: device descriptor read/8, error -71 [ 378.747742][ T58] usb usb4-port1: unable to enumerate USB device [ 378.842677][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.849560][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.856628][ T5272] (null): keene_cmd_main failed (-110) [ 378.889999][ T5272] video4linux radio32: keene_cmd_main failed (-32) [ 378.940968][ T5272] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 379.645624][ T46] usb 5-1: USB disconnect, device number 48 [ 379.693398][ T5278] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 379.703904][ T46] ftdi_sio 5-1:0.0: device disconnected [ 379.721627][ T5278] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 379.755708][ T5278] asix 1-1:0.0: probe with driver asix failed with error -71 [ 379.831934][ T5278] usb 1-1: USB disconnect, device number 60 [ 380.497783][ T5320] usb 3-1: 0:2 : does not exist [ 380.592069][ T5320] usb 3-1: USB disconnect, device number 33 [ 380.654874][T10989] netlink: 'syz.2.1068': attribute type 3 has an invalid length. [ 380.662932][ T5272] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 380.692927][T10989] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1068'. [ 380.703862][T10994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.758483][T10994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.821357][T10992] fuse: Unknown parameter 'fd0x000000000000000b' [ 380.891358][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 380.908351][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 380.946250][ T5277] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 380.947472][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.979144][ T9169] udevd[9169]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.010416][ T5272] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.049459][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.101897][ T5272] usb 5-1: config 0 descriptor?? [ 381.132212][T10983] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 381.178556][ T5277] usb 1-1: device descriptor read/64, error -71 [ 381.478821][ T5277] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 381.557834][ T5320] usb 2-1: USB disconnect, device number 45 [ 381.596716][ T5272] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 381.650392][ T5272] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 381.717924][ T5272] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 381.908129][ T5272] usb 5-1: USB disconnect, device number 49 [ 381.942512][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 381.983196][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 382.025080][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 382.096368][ T5320] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 382.124508][T11016] FAULT_INJECTION: forcing a failure. [ 382.124508][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 382.146675][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.3.1076 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 382.157117][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 382.167271][T11016] Call Trace: [ 382.170619][T11016] [ 382.173537][T11016] dump_stack_lvl+0x241/0x360 [ 382.178206][T11016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.183391][T11016] ? __pfx__printk+0x10/0x10 [ 382.187968][T11016] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 382.193422][T11016] ? __pfx___might_resched+0x10/0x10 [ 382.198699][T11016] should_fail_ex+0x3b0/0x4e0 [ 382.203369][T11016] should_failslab+0xac/0x100 [ 382.208151][T11016] ? nfnetlink_rcv+0x11b8/0x2a90 [ 382.213077][T11016] __kmalloc_cache_noprof+0x6c/0x2c0 [ 382.218392][T11016] nfnetlink_rcv+0x11b8/0x2a90 [ 382.223172][T11016] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 382.228301][T11016] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.233485][T11016] ? skb_clone+0x240/0x390 [ 382.237888][T11016] ? __pfx_lock_release+0x10/0x10 [ 382.243082][T11016] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.248272][T11016] netlink_unicast+0x7f0/0x990 [ 382.253028][T11016] ? __pfx_netlink_unicast+0x10/0x10 [ 382.258296][T11016] ? __virt_addr_valid+0x183/0x530 [ 382.263389][T11016] ? __check_object_size+0x49c/0x900 [ 382.268669][T11016] ? bpf_lsm_netlink_send+0x9/0x10 [ 382.273766][T11016] netlink_sendmsg+0x8e4/0xcb0 [ 382.278526][T11016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.283795][T11016] ? __import_iovec+0x536/0x820 [ 382.288634][T11016] ? aa_sock_msg_perm+0x91/0x160 [ 382.293552][T11016] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 382.298832][T11016] ? security_socket_sendmsg+0x87/0xb0 [ 382.304277][T11016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.309545][T11016] __sock_sendmsg+0x221/0x270 [ 382.314210][T11016] ____sys_sendmsg+0x525/0x7d0 [ 382.318963][T11016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.324238][T11016] __sys_sendmsg+0x2b0/0x3a0 [ 382.328813][T11016] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.333989][T11016] ? vfs_write+0x7c4/0xc90 [ 382.338421][T11016] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.344731][T11016] ? do_syscall_64+0x100/0x230 [ 382.349485][T11016] ? do_syscall_64+0xb6/0x230 [ 382.354150][T11016] do_syscall_64+0xf3/0x230 [ 382.358728][T11016] ? clear_bhb_loop+0x35/0x90 [ 382.363387][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.369269][T11016] RIP: 0033:0x7f65a1b77299 [ 382.373754][T11016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.393382][T11016] RSP: 002b:00007f65a15ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.401785][T11016] RAX: ffffffffffffffda RBX: 00007f65a1d05f80 RCX: 00007f65a1b77299 [ 382.409914][T11016] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 382.417869][T11016] RBP: 00007f65a15ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.425824][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.433779][T11016] R13: 000000000000000b R14: 00007f65a1d05f80 R15: 00007f65a1e2fa38 [ 382.441750][T11016] [ 382.570092][ T5320] usb 2-1: Using ep0 maxpacket: 16 [ 382.592362][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.636390][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.648086][ T5320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.663046][ T5320] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 382.683867][ T5320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.692135][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 382.719773][ T5320] usb 2-1: config 0 descriptor?? [ 382.741254][ T5320] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 382.771624][ T4661] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 382.824624][ T4661] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 382.866344][ T5272] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 382.881549][ T4661] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 382.936782][ T4661] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 383.027334][ T5223] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 383.046383][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 383.057556][ T5272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 383.072117][ T4661] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 383.072841][ T5272] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 383.098105][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.114596][T11039] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1072'. [ 383.126748][ T5272] usb 4-1: Product: syz [ 383.127096][ T4661] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 383.131008][ T5272] usb 4-1: Manufacturer: syz [ 383.131027][ T5272] usb 4-1: SerialNumber: syz [ 383.132169][T11039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1072'. [ 383.160019][ T5272] usb 4-1: config 0 descriptor?? [ 383.182391][ T5272] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 383.210986][ T4661] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 383.226368][ T5278] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 383.248418][T11042] xt_TPROXY: Can be used only with -p tcp or -p udp [ 383.298484][T11039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.322735][T11039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.415244][T11022] nlmon0: entered promiscuous mode [ 383.427683][T11022] vlan2: entered promiscuous mode [ 383.435593][T11022] vlan2: entered allmulticast mode [ 383.446214][T11022] nlmon0: entered allmulticast mode [ 383.481241][ T5278] usb 5-1: config 0 interface 0 has no altsetting 0 [ 383.514620][ T5278] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 383.548835][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.562554][ T5278] usb 5-1: config 0 descriptor?? [ 383.726862][ T5272] gspca_ov534_9: reg_w failed -110 [ 384.127502][T11057] Cannot find del_set index 0 as target [ 384.161715][ T5278] (null): keene_cmd_main failed (-110) [ 384.189017][ T5278] video4linux radio32: keene_cmd_main failed (-32) [ 384.211814][ T5278] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 384.326563][ T5272] gspca_ov534_9: Unknown sensor 0000 [ 384.326657][ T5272] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 384.377710][ T5272] usb 4-1: USB disconnect, device number 51 [ 384.826596][T11066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 384.832327][T11068] Invalid logical block size (3585) [ 384.975555][ T5272] usb 2-1: USB disconnect, device number 46 [ 385.009251][T11071] netlink: 'syz.2.1093': attribute type 10 has an invalid length. [ 385.139342][T11071] team0: Failed to send options change via netlink (err -105) [ 385.149465][T11071] team0: Port device netdevsim0 added [ 385.177195][T11076] netlink: 'syz.2.1093': attribute type 10 has an invalid length. [ 385.191510][T11078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1096'. [ 385.260451][T11076] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 385.322732][T11076] team0: Failed to send options change via netlink (err -105) [ 385.349577][T11076] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 385.368805][ T5278] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 385.375460][T11076] team0: Port device netdevsim0 removed [ 385.601249][ T5278] usb 1-1: unable to get BOS descriptor or descriptor too short [ 385.627787][ T5278] usb 1-1: config 5 has an invalid interface number: 214 but max is 3 [ 385.667053][ T5278] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 385.691532][ T5278] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 385.722158][ T5278] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 385.740768][ T5278] usb 1-1: config 5 has no interface number 0 [ 385.757192][ T5278] usb 1-1: config 5 interface 214 altsetting 17 endpoint 0xB has invalid maxpacket 33806, setting to 1024 [ 385.793982][ T5278] usb 1-1: config 5 interface 214 altsetting 17 bulk endpoint 0xB has invalid maxpacket 1024 [ 385.829640][ T5278] usb 1-1: config 5 interface 214 altsetting 17 endpoint 0x6 has invalid maxpacket 1792, setting to 64 [ 385.854293][ T5278] usb 1-1: config 5 interface 214 altsetting 17 has an invalid descriptor for endpoint zero, skipping [ 385.881410][ T5278] usb 1-1: config 5 interface 214 altsetting 17 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 385.906790][ T5278] usb 1-1: config 5 interface 214 has no altsetting 0 [ 385.918930][ T5278] usb 1-1: New USB device found, idVendor=12d1, idProduct=66ae, bcdDevice=11.94 [ 385.940565][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.950127][T11081] fuse: Bad value for 'fd' [ 385.983582][ T5278] usb 1-1: Product: ࠒ [ 386.011878][ T5278] usb 1-1: Manufacturer: ࡡ [ 386.040155][ T5278] usb 1-1: SerialNumber: Љ [ 386.062818][T11075] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.285111][T11075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.315200][T11075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.346913][ T5278] option 1-1:5.214: GSM modem (1-port) converter detected [ 386.397321][ T5278] usb 1-1: USB disconnect, device number 63 [ 386.428832][ T5278] option 1-1:5.214: device disconnected [ 386.438555][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 386.476715][ T5320] usb 5-1: USB disconnect, device number 50 [ 386.595226][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 386.595245][ T29] audit: type=1326 audit(1722215466.938:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11099 comm="syz.2.1103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc676577299 code=0x0 [ 387.169094][ T5228] Bluetooth: hci0: command tx timeout [ 387.246596][ T5272] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 387.459466][ T5272] usb 1-1: Using ep0 maxpacket: 32 [ 387.488482][ T5272] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 3 [ 387.525766][ T5272] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 387.559134][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 387.581768][ T5272] usb 1-1: Product: syz [ 387.585928][ T5272] usb 1-1: Manufacturer: syz [ 387.592638][ T5272] usb 1-1: SerialNumber: syz [ 387.614221][ T5272] usb 1-1: config 0 descriptor?? [ 387.624528][T11111] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 387.686124][T11121] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1109'. [ 388.208867][T11137] Invalid logical block size (4608) [ 388.667283][T11127] fuse: Invalid rootmode [ 388.672087][T11147] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 388.680573][ T5282] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 388.886338][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 388.915004][ T5282] usb 4-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=47.b7 [ 388.925942][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 388.935316][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.983806][ T5282] usb 4-1: config 0 descriptor?? [ 389.006395][ T5282] usb 4-1: selecting invalid altsetting 1 [ 389.024736][ T5282] snd-usb-caiaq 4-1:0.0: can't set alt interface. [ 389.041106][ T5282] usb 4-1: unable to init card! (ret=-5) [ 389.057641][ T5282] snd-usb-caiaq 4-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 389.250622][T11139] tipc: Started in network mode [ 389.258982][T11139] tipc: Node identity fc, cluster identity 4711 [ 389.273057][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 389.296321][ T5320] usb 4-1: USB disconnect, device number 52 [ 389.507955][ T5282] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 389.706305][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 389.741409][ T5282] usb 2-1: no configurations [ 389.757252][ T5282] usb 2-1: can't read configurations, error -22 [ 389.906201][ T5282] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 389.953323][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 390.126200][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 390.152417][ T5282] usb 2-1: no configurations [ 390.162811][ T5282] usb 2-1: can't read configurations, error -22 [ 390.182825][ T5282] usb usb2-port1: attempt power cycle [ 390.228045][ T5320] usb 1-1: USB disconnect, device number 64 [ 390.450996][T11174] mmap: syz.0.1129 (11174): VmData 37593088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 390.546852][ T46] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 390.626335][ T5282] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 390.667680][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 390.677440][ T5282] usb 2-1: no configurations [ 390.683170][ T5282] usb 2-1: can't read configurations, error -22 [ 390.751620][T11184] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 390.783529][ T46] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 390.794426][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.811178][ T46] usb 4-1: config 0 descriptor?? [ 390.824290][ T46] gspca_main: spca508-2.14.0 probing 8086:0110 [ 390.835478][T11178] fuse: Invalid rootmode [ 390.846492][ T5320] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 390.858487][ T5282] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 390.920522][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 390.931862][ T5282] usb 2-1: no configurations [ 390.946270][ T5282] usb 2-1: can't read configurations, error -22 [ 390.953827][ T5282] usb usb2-port1: unable to enumerate USB device [ 391.068155][ T5320] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 391.086419][ T46] gspca_spca508: reg_read err -32 [ 391.092016][ T5320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.128463][ T5320] usb 3-1: config 0 descriptor?? [ 391.150347][ T5320] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 391.171770][ T5320] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 391.354515][ T5320] usb 3-1: USB disconnect, device number 34 [ 391.375175][ T5320] ftdi_sio 3-1:0.0: device disconnected [ 391.501809][T11171] netlink: 'syz.3.1127': attribute type 3 has an invalid length. [ 391.526264][ T46] gspca_spca508: reg_read err -71 [ 391.536413][ T46] gspca_spca508: reg_read err -71 [ 391.546828][ T46] gspca_spca508: reg write: error -71 [ 391.556430][ T46] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 391.580173][ T46] usb 4-1: USB disconnect, device number 53 [ 392.056578][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1138'. [ 392.099507][T11210] netlink: 'syz.2.1142': attribute type 30 has an invalid length. [ 392.313021][T11217] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1144'. [ 392.453640][ T7277] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.470846][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 392.661546][ T46] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 392.760679][ T7277] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.776230][ T5278] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 392.868052][ T46] usb 4-1: device descriptor read/64, error -71 [ 393.019570][ T7277] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.020137][ T5278] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.081384][ T5278] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 393.124428][ T5278] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.156070][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.183384][T11225] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 393.190812][ T46] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 393.216396][ T5272] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 393.234566][ T5278] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.263803][ T7277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.268913][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.311653][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.322460][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.333539][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.341886][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.350935][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.396347][ T46] usb 4-1: device descriptor read/64, error -71 [ 393.402677][ T5272] usb 2-1: device descriptor read/64, error -71 [ 393.527290][ T46] usb usb4-port1: attempt power cycle [ 393.566210][ T5282] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 393.677601][ T5272] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 393.768910][ T5282] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 393.786382][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.836801][ T7277] bridge_slave_1: left allmulticast mode [ 393.845134][ T7277] bridge_slave_1: left promiscuous mode [ 393.845677][ T5282] usb 3-1: config 0 descriptor?? [ 393.851378][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.877837][ T5272] usb 2-1: device descriptor read/64, error -71 [ 393.883273][ T5282] gspca_main: spca508-2.14.0 probing 8086:0110 [ 393.891959][ T7277] bridge_slave_0: left allmulticast mode [ 393.899271][ T7277] bridge_slave_0: left promiscuous mode [ 393.906368][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.946728][ T46] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 393.998073][ T46] usb 4-1: device descriptor read/8, error -71 [ 394.004352][ T5272] usb usb2-port1: attempt power cycle [ 394.184589][ T5282] gspca_spca508: reg_read err -32 [ 394.296395][ T46] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 394.347427][ T46] usb 4-1: device descriptor read/8, error -71 [ 394.447062][ T5272] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 394.496855][ T46] usb usb4-port1: unable to enumerate USB device [ 394.506562][ T5272] usb 2-1: device descriptor read/8, error -71 [ 394.612518][T11234] netlink: 'syz.2.1153': attribute type 3 has an invalid length. [ 394.649782][ T7277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.665927][ T7277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.681798][ T5282] gspca_spca508: reg_read err -71 [ 394.694082][ T7277] bond0 (unregistering): Released all slaves [ 394.709248][ T5282] gspca_spca508: reg_read err -71 [ 394.725328][ T5282] gspca_spca508: reg write: error -71 [ 394.751100][ T5282] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 394.798934][ T5272] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 394.799214][ T5282] usb 3-1: USB disconnect, device number 35 [ 394.861353][ T5272] usb 2-1: device descriptor read/8, error -71 [ 394.951854][T11236] chnl_net:caif_netlink_parms(): no params data found [ 395.006670][ T5272] usb usb2-port1: unable to enumerate USB device [ 395.145327][ T7277] hsr_slave_0: left promiscuous mode [ 395.162149][ T7277] hsr_slave_1: left promiscuous mode [ 395.169756][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.180059][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.210177][ T7277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.225339][ T7277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.267867][ T7277] veth1_macvtap: left promiscuous mode [ 395.274479][ T7277] veth0_macvtap: left promiscuous mode [ 395.280742][ T7277] veth1_vlan: left promiscuous mode [ 395.287360][ T7277] veth0_vlan: left promiscuous mode [ 395.396442][ T5225] Bluetooth: hci1: command tx timeout [ 395.517627][ T5282] usb 1-1: USB disconnect, device number 65 [ 395.987033][ T29] audit: type=1326 audit(1722215476.338:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11267 comm="syz.1.1157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f259e577299 code=0x0 [ 396.306430][ T5272] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 396.527945][ T5272] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.542076][ T5272] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 396.554770][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.578804][ T5272] usb 3-1: config 0 descriptor?? [ 396.641735][ T7277] team0 (unregistering): Port device team_slave_1 removed [ 396.724394][ T7277] team0 (unregistering): Port device team_slave_0 removed [ 397.156911][ T5272] (null): keene_cmd_main failed (-110) [ 397.166407][ T5272] video4linux radio32: keene_cmd_main failed (-32) [ 397.189204][ T5272] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 397.479514][ T5225] Bluetooth: hci1: command tx timeout [ 397.646307][T11254] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 397.671659][T11254] team0: Device hsr_slave_1 failed to register rx_handler [ 397.702762][T11261] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.1155'. [ 397.726194][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1155'. [ 397.996614][T11236] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.026434][T11236] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.033669][T11236] bridge_slave_0: entered allmulticast mode [ 398.067511][T11236] bridge_slave_0: entered promiscuous mode [ 398.099338][T11236] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.144873][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.167398][T11236] bridge_slave_1: entered allmulticast mode [ 398.178372][T11236] bridge_slave_1: entered promiscuous mode [ 398.220581][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 398.343454][T11236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.414654][T11236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.526412][ T46] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 398.543832][ T5225] Bluetooth: latency 2018 > 499 [ 398.657418][T11236] team0: Port device team_slave_0 added [ 398.697252][T11236] team0: Port device team_slave_1 added [ 398.747990][ T46] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.787883][ T46] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 398.840263][ T46] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.881497][T11236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.896646][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.925054][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.978006][T11295] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 399.004089][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.029338][T11236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.091789][T11236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.105193][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.193315][T11236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.420526][ T46] usb 3-1: USB disconnect, device number 36 [ 399.556553][ T5225] Bluetooth: hci1: command tx timeout [ 399.649446][T11236] hsr_slave_0: entered promiscuous mode [ 399.672072][T11236] hsr_slave_1: entered promiscuous mode [ 399.849230][ T5272] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 400.079497][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.104019][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.134383][ T5272] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 400.160839][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.181390][ T5272] usb 2-1: config 0 descriptor?? [ 400.599589][ T5225] Bluetooth: hci6: command tx timeout [ 400.603683][ T5272] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 400.699847][ T5272] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 400.814842][ T5272] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 400.840202][T11236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.903113][T11236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.944159][T11236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.989339][T11236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.244607][T11236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.255360][ T46] usb 1-1: USB disconnect, device number 66 [ 401.297660][T11236] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.324452][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.331673][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.368558][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.375784][ T5320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.450456][ T5272] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 401.507031][ T5272] usb 2-1: USB disconnect, device number 55 [ 401.636860][ T5225] Bluetooth: hci1: command tx timeout [ 401.681396][T11236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.815652][T11363] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1175'. [ 401.842779][T11236] veth0_vlan: entered promiscuous mode [ 401.902866][T11236] veth1_vlan: entered promiscuous mode [ 402.118592][ C0] eth0: bad gso: type: 1, size: 1408 [ 402.200122][T11236] veth0_macvtap: entered promiscuous mode [ 402.226822][T11236] veth1_macvtap: entered promiscuous mode [ 402.309513][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.320306][T11379] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 402.344655][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.376541][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.413180][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.440098][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.446387][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 402.451038][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.478435][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.494711][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.573704][T11236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.777647][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.786153][ T5278] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 402.812599][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.841027][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.855578][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.867940][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.881361][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.896140][T11236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.909243][T11236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.947026][T11236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.960445][T11236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.982549][T11236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.013816][ T5278] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 403.033293][T11236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.057750][ T5278] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 403.066103][T11236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.107587][ T5278] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 403.150738][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.213069][T11391] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.245449][ T5278] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 403.449707][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.780742][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.949988][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 403.964337][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 403.976434][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 403.993509][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.001336][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 404.008945][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.053128][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.210652][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.430456][ T7270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.491310][ T7270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.685894][ T52] bridge_slave_1: left allmulticast mode [ 404.700631][ T52] bridge_slave_1: left promiscuous mode [ 404.709288][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.734557][ T52] bridge_slave_0: left allmulticast mode [ 404.741397][ T52] bridge_slave_0: left promiscuous mode [ 404.749373][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.774686][ T5278] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 404.964888][ T5272] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 404.979440][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.995167][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.012962][ T5278] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 405.022370][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.034998][ T5278] usb 3-1: config 0 descriptor?? [ 405.176365][ T5272] usb 2-1: device descriptor read/64, error -71 [ 405.326115][ T5320] usb 4-1: USB disconnect, device number 58 [ 405.362030][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.374918][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.409257][ T52] bond0 (unregistering): Released all slaves [ 405.461544][ T5278] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 405.473316][ T5278] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 405.487893][ T5272] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 405.522097][ T7270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.548511][ T7270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.659554][ T5278] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 405.667913][ T5272] usb 2-1: device descriptor read/64, error -71 [ 405.786207][ T5320] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 405.799871][ T5272] usb usb2-port1: attempt power cycle [ 405.830470][T11414] chnl_net:caif_netlink_parms(): no params data found [ 405.893556][ T52] hsr_slave_0: left promiscuous mode [ 405.912266][ T52] hsr_slave_1: left promiscuous mode [ 405.928431][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.940164][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.958920][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.977512][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.989564][ T5320] usb 4-1: config 5 has an invalid interface number: 122 but max is 0 [ 406.012199][ T5320] usb 4-1: config 5 has no interface number 0 [ 406.025617][ T5320] usb 4-1: config 5 interface 122 has no altsetting 0 [ 406.047336][ T5320] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 406.056325][ T52] veth1_macvtap: left promiscuous mode [ 406.072567][ T5320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.077884][ T52] veth0_macvtap: left promiscuous mode [ 406.090968][ T5320] usb 4-1: Product: syz [ 406.095802][ T52] veth1_vlan: left promiscuous mode [ 406.102245][ T5320] usb 4-1: Manufacturer: syz [ 406.111684][ T52] veth0_vlan: left promiscuous mode [ 406.117624][ T5228] Bluetooth: hci2: command tx timeout [ 406.118360][ T5320] usb 4-1: SerialNumber: syz [ 406.256417][ T5272] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 406.267647][ T5278] cp2112 0003:10C4:EA90.0012: error reading lock byte: -71 [ 406.285397][ T5278] usb 3-1: USB disconnect, device number 37 [ 406.309218][ T5272] usb 2-1: device descriptor read/8, error -71 [ 406.597083][ T5272] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 406.663642][ T5272] usb 2-1: device descriptor read/8, error -71 [ 406.829394][ T5272] usb usb2-port1: unable to enumerate USB device [ 406.950897][T11459] xt_cgroup: invalid path, errno=-2 [ 407.069426][ T52] team0 (unregistering): Port device team_slave_1 removed [ 407.103479][ T5277] usb 4-1: USB disconnect, device number 59 [ 407.124593][ T5277] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 407.231312][ T52] team0 (unregistering): Port device team_slave_0 removed [ 407.244708][ C0] eth0: bad gso: type: 1, size: 1408 [ 407.666181][ T5277] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 407.829697][T11455] netlink: 'syz.4.1191': attribute type 21 has an invalid length. [ 407.841053][T11455] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1191'. [ 407.872663][ T5277] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.891075][ T5277] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.904382][ T5277] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.966450][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 407.980029][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.010356][ C0] eth0: bad gso: type: 1, size: 1408 [ 408.054504][T11467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 408.074893][ T5277] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.207829][ T5228] Bluetooth: hci2: command tx timeout [ 408.444846][T11414] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.489325][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.523522][T11414] bridge_slave_0: entered allmulticast mode [ 408.557904][T11414] bridge_slave_0: entered promiscuous mode [ 408.596978][T11414] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.612659][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.631926][T11414] bridge_slave_1: entered allmulticast mode [ 408.649532][T11414] bridge_slave_1: entered promiscuous mode [ 408.674155][T11467] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1195'. [ 408.849528][ T5277] usb 4-1: USB disconnect, device number 60 [ 409.069388][T11414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.099135][T11414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.191741][T11414] team0: Port device team_slave_0 added [ 409.285319][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.320714][T11414] team0: Port device team_slave_1 added [ 409.347145][ T46] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 409.540804][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.564851][T11414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.573865][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.599929][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.626789][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.637424][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.657635][ T46] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 409.662493][T11414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.667854][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.702310][ T46] usb 2-1: SerialNumber: syz [ 409.712107][T11414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.736332][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.762385][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.773496][T11414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.785728][T11512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1205'. [ 409.837317][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.848948][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.857776][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.860801][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.866558][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.884298][ T5225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 409.894089][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.956809][ T46] usb 2-1: 0:2 : does not exist [ 409.977254][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.005304][ T46] usb 2-1: USB disconnect, device number 60 [ 410.203488][T11414] hsr_slave_0: entered promiscuous mode [ 410.221634][T11414] hsr_slave_1: entered promiscuous mode [ 410.239872][T11414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.249095][T11414] Cannot create hsr debugfs directory [ 410.249822][ T9169] udevd[9169]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.278005][ T5225] Bluetooth: hci2: command tx timeout [ 410.295004][T11522] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 410.339077][T11522] team0: Failed to send options change via netlink (err -105) [ 410.347848][T11522] team0: Port device netdevsim0 added [ 410.422653][T11525] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 410.432528][T11525] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 410.463893][T11525] team0: Failed to send options change via netlink (err -105) [ 410.485084][T11525] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 410.515896][T11525] team0: Port device netdevsim0 removed [ 410.521850][ T5278] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 410.696358][ T5278] usb 4-1: device descriptor read/64, error -71 [ 410.895774][ T52] bridge_slave_1: left allmulticast mode [ 410.906955][ T52] bridge_slave_1: left promiscuous mode [ 410.925656][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.953342][ T52] bridge_slave_0: left allmulticast mode [ 410.961475][ T52] bridge_slave_0: left promiscuous mode [ 410.971895][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.000197][ T5278] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 411.168512][ T5278] usb 4-1: device descriptor read/64, error -71 [ 411.306624][ T5278] usb usb4-port1: attempt power cycle [ 411.722142][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.733462][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.745466][ T52] bond0 (unregistering): Released all slaves [ 411.751927][ T5278] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 411.790641][ T5278] usb 4-1: device descriptor read/8, error -71 [ 411.956300][ T5228] Bluetooth: hci0: command tx timeout [ 412.033490][T11517] chnl_net:caif_netlink_parms(): no params data found [ 412.086216][ T5278] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 412.140047][ T5278] usb 4-1: device descriptor read/8, error -71 [ 412.251737][T11564] netlink: 'syz.4.1214': attribute type 27 has an invalid length. [ 412.266884][ T5278] usb usb4-port1: unable to enumerate USB device [ 412.356818][ T5228] Bluetooth: hci2: command tx timeout [ 412.424858][ T52] hsr_slave_0: left promiscuous mode [ 412.436437][ T5228] Bluetooth: hci1: command tx timeout [ 412.444075][ T52] hsr_slave_1: left promiscuous mode [ 412.458121][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.471062][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.480815][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.494485][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.541909][ T52] veth1_macvtap: left promiscuous mode [ 412.553374][ T52] veth0_macvtap: left promiscuous mode [ 412.560201][ T52] veth1_vlan: left promiscuous mode [ 412.572108][ T52] veth0_vlan: left promiscuous mode [ 413.160763][ T52] team0 (unregistering): Port device team_slave_1 removed [ 413.305988][ T52] team0 (unregistering): Port device team_slave_0 removed [ 413.767687][T11593] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 413.814864][T11593] team0: Failed to send options change via netlink (err -105) [ 413.823242][T11593] team0: Port device netdevsim0 added [ 413.830135][T11598] netlink: 'syz.1.1218': attribute type 10 has an invalid length. [ 413.842528][T11598] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 413.865439][T11598] team0: Failed to send options change via netlink (err -105) [ 413.911627][T11598] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 413.931594][T11598] team0: Port device netdevsim0 removed [ 414.035305][T11517] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.046295][ T5228] Bluetooth: hci0: command tx timeout [ 414.065594][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.094218][T11517] bridge_slave_0: entered allmulticast mode [ 414.101718][T11517] bridge_slave_0: entered promiscuous mode [ 414.115953][T11517] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.123415][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.130819][T11517] bridge_slave_1: entered allmulticast mode [ 414.138100][T11517] bridge_slave_1: entered promiscuous mode [ 414.161834][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 414.240860][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.297242][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.404690][T11517] team0: Port device team_slave_0 added [ 414.423760][T11517] team0: Port device team_slave_1 added [ 414.522106][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.533205][T11623] x_tables: ip_tables: osf match: only valid for protocol 6 [ 414.556193][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.655782][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.689454][T11414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.726865][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.772942][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.866247][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.918745][T11414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.995101][T11414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 415.024948][T11414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 415.036272][ T5282] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 415.138972][T11517] hsr_slave_0: entered promiscuous mode [ 415.145174][T11517] hsr_slave_1: entered promiscuous mode [ 415.164773][T11517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.178833][T11517] Cannot create hsr debugfs directory [ 415.219096][ T5282] usb 2-1: device descriptor read/64, error -71 [ 415.486252][ T5228] Bluetooth: hci6: command tx timeout [ 415.499941][ T5282] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 415.689371][ T5282] usb 2-1: device descriptor read/64, error -71 [ 415.819340][T11414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.832554][ T5282] usb usb2-port1: attempt power cycle [ 415.936725][T11414] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.997549][T11640] xt_recent: Unsupported userspace flags (00000064) [ 416.052233][ T5228] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 416.069517][T11654] netlink: 'syz.3.1231': attribute type 10 has an invalid length. [ 416.112498][T11654] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 416.127728][ T5228] Bluetooth: hci0: command tx timeout [ 416.140108][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.147340][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.221274][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.228487][ T5320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.267805][ T5282] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 416.309260][ T5282] usb 2-1: device descriptor read/8, error -71 [ 416.342205][T11662] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1233'. [ 416.356251][ T5228] Bluetooth: hci1: command tx timeout [ 416.370963][ T29] audit: type=1326 audit(1722215496.698:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.398693][ T29] audit: type=1326 audit(1722215496.698:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.421258][ T29] audit: type=1326 audit(1722215496.698:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.451281][T11414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.469514][ T29] audit: type=1326 audit(1722215496.698:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.496118][ T29] audit: type=1326 audit(1722215496.698:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.530658][ T29] audit: type=1326 audit(1722215496.698:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.567690][ T29] audit: type=1326 audit(1722215496.698:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.594458][T11414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.603224][ T5282] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 416.644259][ T29] audit: type=1326 audit(1722215496.698:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.668959][ T29] audit: type=1326 audit(1722215496.698:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.692354][ T29] audit: type=1326 audit(1722215496.718:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f65a1b77299 code=0x7ffc0000 [ 416.692447][ T5282] usb 2-1: device descriptor read/8, error -71 [ 416.722967][T11663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.769883][T11517] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.800602][T11517] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.828924][T11517] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.846558][ T5282] usb usb2-port1: unable to enumerate USB device [ 416.887321][T11517] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.010503][T11414] veth0_vlan: entered promiscuous mode [ 417.080346][T11414] veth1_vlan: entered promiscuous mode [ 417.233605][T11414] veth0_macvtap: entered promiscuous mode [ 417.274161][T11414] veth1_macvtap: entered promiscuous mode [ 417.362372][T11517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.402359][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.424897][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.435485][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.449546][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.466185][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.478879][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.536854][T11414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.585478][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.624064][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.653978][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.685748][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.699070][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.710396][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.760212][T11414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.794215][T11517] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.844615][T11414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.898750][T11414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.916183][T11414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.935245][T11414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.974760][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.981993][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.023592][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.030810][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.086189][ T5278] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 418.116728][ T5225] Bluetooth: hci5: command tx timeout [ 418.196213][ T5225] Bluetooth: hci0: command tx timeout [ 418.287410][ T7270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.294491][T11517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.295797][ T7270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.305743][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 418.325202][ T5278] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 418.360681][ T5278] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 418.379758][ T5278] usb 2-1: can't read configurations, error -61 [ 418.442470][T11517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.455649][ T7281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.470335][ T7281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.547237][ T5278] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 418.581392][T11517] veth0_vlan: entered promiscuous mode [ 418.639371][T11517] veth1_vlan: entered promiscuous mode [ 418.727808][T11726] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 418.733164][T11517] veth0_macvtap: entered promiscuous mode [ 418.764086][T11517] veth1_macvtap: entered promiscuous mode [ 418.771178][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 418.780887][ T5278] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 418.792110][ T5278] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 418.804428][ T5278] usb 2-1: can't read configurations, error -61 [ 418.838789][ T5278] usb usb2-port1: attempt power cycle [ 418.862289][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.909265][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.939111][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.980508][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.002935][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.044823][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.064112][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.090807][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.102567][T11736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.119423][T11517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.157037][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.170436][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.199684][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.241685][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.269152][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.306226][ T5278] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 419.309393][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.347140][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 419.354991][T11517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.355014][ T5278] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 419.371206][T11517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.425129][T11517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.446487][ T5278] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 419.471326][T11517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.475009][ T5278] usb 2-1: can't read configurations, error -61 [ 419.515954][T11517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.576229][T11517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.628933][T11517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.666651][ T5278] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 419.738802][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 419.754824][ T5278] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 419.765761][ T5278] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 419.794432][ T5278] usb 2-1: can't read configurations, error -61 [ 419.801083][ T5228] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 419.827996][ T5278] usb usb2-port1: unable to enumerate USB device [ 420.000688][ T7270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.042138][ T7270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.126304][ T5282] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 420.155791][ T7291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.186475][ T7291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.193084][T11762] loop0: detected capacity change from 0 to 7 [ 420.200579][ T5228] Bluetooth: hci5: command 0x206a tx timeout [ 420.203886][T11762] Dev loop0: unable to read RDB block 7 [ 420.222073][T11762] loop0: unable to read partition table [ 420.235523][T11762] loop0: partition table beyond EOD, truncated [ 420.271624][T11762] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 420.271624][T11762] ) failed (rc=-5) [ 420.316401][ T5282] usb 5-1: device descriptor read/64, error -71 [ 420.586293][ T5282] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 420.776226][ T5282] usb 5-1: device descriptor read/64, error -71 [ 420.866289][ T5272] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 420.922268][ T5282] usb usb5-port1: attempt power cycle [ 421.047280][ T5272] usb 4-1: device descriptor read/64, error -71 [ 421.246152][ T5277] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 421.346123][ T5282] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 421.346757][ T5272] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 421.386712][ T5282] usb 5-1: device descriptor read/8, error -71 [ 421.440256][ T5277] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 421.456072][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.489126][ T5277] usb 2-1: config 0 descriptor?? [ 421.551844][ T5272] usb 4-1: device descriptor read/64, error -71 [ 421.646233][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 421.666143][ T5282] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 421.687641][ T5272] usb usb4-port1: attempt power cycle [ 421.725425][ T5282] usb 5-1: device descriptor read/8, error -71 [ 421.856770][ T5282] usb usb5-port1: unable to enumerate USB device [ 421.866619][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 421.889231][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 421.919039][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 421.943014][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 421.973435][ T5277] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.995702][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.011851][ T5277] asix 2-1:0.0: probe with driver asix failed with error -71 [ 422.022634][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.037343][ T46] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 422.053172][ T5277] usb 2-1: USB disconnect, device number 69 [ 422.059386][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.084110][ T8] usb 3-1: Product: syz [ 422.103566][ T8] usb 3-1: Manufacturer: syz [ 422.111992][ T8] usb 3-1: SerialNumber: syz [ 422.127539][ T5272] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 422.181224][ T5272] usb 4-1: device descriptor read/8, error -71 [ 422.247209][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 422.260049][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 422.271144][ T46] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 422.289448][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.299866][ T46] usb 1-1: Product: syz [ 422.304143][ T46] usb 1-1: Manufacturer: syz [ 422.311325][ T46] usb 1-1: SerialNumber: syz [ 422.331146][ T46] usb 1-1: config 0 descriptor?? [ 422.336389][T11800] loop0: detected capacity change from 0 to 7 [ 422.348751][ T46] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 422.352610][T11800] Dev loop0: unable to read RDB block 7 [ 422.365132][T11800] loop0: AHDI p4 [ 422.372554][T11800] loop0: partition table partially beyond EOD, truncated [ 422.438949][ T8] usb 3-1: USB disconnect, device number 38 [ 422.456278][ T5272] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 422.500440][ T5272] usb 4-1: device descriptor read/8, error -71 [ 422.556946][T11813] nlmon0: entered promiscuous mode [ 422.562270][T11813] vlan2: entered promiscuous mode [ 422.568739][T11813] vlan2: entered allmulticast mode [ 422.573899][T11813] nlmon0: entered allmulticast mode [ 422.588118][ T46] gspca_ov534_9: reg_w failed -71 [ 422.626469][ T5272] usb usb4-port1: unable to enumerate USB device [ 422.657715][ T9169] udevd[9169]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.136088][ T46] gspca_ov534_9: Unknown sensor 0000 [ 423.136178][ T46] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 423.193196][ T46] usb 1-1: USB disconnect, device number 67 [ 423.239549][T11849] loop0: detected capacity change from 0 to 7 [ 423.253855][T11849] Dev loop0: unable to read RDB block 7 [ 423.261966][T11848] netlink: 'syz.1.1260': attribute type 10 has an invalid length. [ 423.285934][T11848] team0: Device hsr_slave_1 failed to register rx_handler [ 423.296319][T11849] loop0: unable to read partition table [ 423.315527][T11849] loop0: partition table beyond EOD, truncated [ 423.337664][T11849] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 423.337664][T11849] ) failed (rc=-5) [ 423.859643][T11865] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1269'. [ 423.889095][T11865] blktrace: Concurrent blktraces are not allowed on loop3 [ 424.046860][ T46] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 424.206548][ T46] usb 2-1: device descriptor read/64, error -71 [ 424.487325][ T46] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 424.537285][T11887] netlink: 'syz.2.1274': attribute type 9 has an invalid length. [ 424.676317][ T46] usb 2-1: device descriptor read/64, error -71 [ 424.736245][ T8] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 424.797955][ T46] usb usb2-port1: attempt power cycle [ 425.226494][ T46] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 425.277016][ T46] usb 2-1: device descriptor read/8, error -71 [ 425.546142][ T6815] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 425.566163][ T46] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 425.636824][ T46] usb 2-1: device descriptor read/8, error -71 [ 425.748361][ T6815] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.764605][ T6815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.765854][T11919] Cannot find add_set index 0 as target [ 425.782042][ T46] usb usb2-port1: unable to enumerate USB device [ 425.782749][ T6815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 425.805126][ T6815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 425.820686][ T6815] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.830513][ T6815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.846826][ T6815] usb 5-1: config 0 descriptor?? [ 426.016401][ T5274] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 426.226459][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 426.233766][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.245447][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 426.275258][ T5274] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 426.301939][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.309057][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.325696][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.334937][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.342735][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.350963][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.352002][ T5274] usb 4-1: config 0 descriptor?? [ 426.393405][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.421463][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.462778][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.473659][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.487440][ T6815] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 426.501898][ T6815] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 426.531106][ T6815] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 426.601256][T11929] Invalid logical block size (4608) [ 426.670153][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.693525][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.903161][ T6815] usb 5-1: USB disconnect, device number 55 [ 427.117140][ T5274] usbhid 4-1:0.0: can't add hid device: -71 [ 427.118282][ T5274] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 427.131143][ T5274] usb 4-1: USB disconnect, device number 69 [ 427.218691][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 427.456314][T11946] netlink: 'syz.2.1291': attribute type 9 has an invalid length. [ 427.935835][T11954] netlink: 'syz.0.1294': attribute type 10 has an invalid length. [ 428.050237][T11954] team0: Failed to send options change via netlink (err -105) [ 428.075740][T11954] team0: Port device netdevsim0 added [ 428.108685][T11955] netlink: 'syz.0.1294': attribute type 10 has an invalid length. [ 428.153079][T11955] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 428.222276][T11955] team0: Failed to send options change via netlink (err -105) [ 428.235555][T11955] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 428.264981][T11955] team0: Port device netdevsim0 removed [ 428.366358][ T5274] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 428.576099][ T46] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 428.616194][ T5274] usb 2-1: Using ep0 maxpacket: 16 [ 428.625636][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.666880][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.714197][ T5274] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 428.742793][ T5274] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 428.783504][ T5274] usb 2-1: Product: syz [ 428.794000][ T5274] usb 2-1: Manufacturer: syz [ 428.800601][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.826464][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.839364][ T5274] usb 2-1: config 0 descriptor?? [ 428.863156][ T46] usb 4-1: config 1 interface 1 has no altsetting 0 [ 428.885147][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.905185][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.923476][ T46] usb 4-1: Product: syz [ 428.942283][ T46] usb 4-1: Manufacturer: syz [ 428.950141][ T46] usb 4-1: SerialNumber: syz [ 428.997861][ T46] usb 4-1: selecting invalid altsetting 1 [ 429.027682][ T46] usb 4-1: selecting invalid altsetting 0 [ 429.033496][ T46] usb 4-1: selecting invalid altsetting 0 [ 429.061557][ T46] cdc_ncm 4-1:1.0: bind() failure [ 429.106378][ T46] usb 4-1: selecting invalid altsetting 0 [ 429.112195][ T46] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -22 [ 429.156858][ T46] usb 4-1: selecting invalid altsetting 0 [ 429.179675][ T46] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -22 [ 429.221831][ T46] usb 4-1: selecting invalid altsetting 0 [ 429.253260][ T46] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 429.262278][ T5274] usbhid 2-1:0.0: can't add hid device: -32 [ 429.276885][ T5274] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 429.455979][ T46] usb 2-1: USB disconnect, device number 74 [ 429.767923][ T5274] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 429.998365][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 430.063441][ T5274] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 430.090248][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 430.113336][ T5274] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 430.122914][ T5228] Bluetooth: hci2: command tx timeout [ 430.132296][ T5274] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 430.144560][ T5274] usb 3-1: Product: syz [ 430.149214][ T5274] usb 3-1: Manufacturer: syz [ 430.153899][ T5274] usb 3-1: SerialNumber: syz [ 430.165045][ T5274] usb 3-1: config 0 descriptor?? [ 430.175571][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 430.175585][ T29] audit: type=1326 audit(1722215510.518:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.176437][ T5274] ldusb 3-1:0.0: Interrupt in endpoint not found [ 430.224907][ T29] audit: type=1326 audit(1722215510.558:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.249863][ T29] audit: type=1326 audit(1722215510.558:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.300607][ T29] audit: type=1326 audit(1722215510.558:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.358910][ T5228] Bluetooth: hci0: command 0x0406 tx timeout [ 430.422906][ T29] audit: type=1326 audit(1722215510.558:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.499249][ T29] audit: type=1326 audit(1722215510.568:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.584129][ T29] audit: type=1326 audit(1722215510.568:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.618983][T11989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.633302][ T29] audit: type=1326 audit(1722215510.568:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.700410][ T29] audit: type=1326 audit(1722215510.568:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.728169][ T29] audit: type=1326 audit(1722215510.568:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271af77299 code=0x7ffc0000 [ 430.737746][ T5277] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 430.760456][T11995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.936154][ T6815] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 430.978919][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.994013][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 431.022429][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 431.054956][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.081198][ T5277] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.092419][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.120460][ T5277] usb 1-1: config 0 descriptor?? [ 431.138785][ T6815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.175246][ T6815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.210322][ T6815] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 431.225979][ T6815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.266360][ T6815] usb 2-1: config 0 descriptor?? [ 431.284580][ T6815] hub 2-1:0.0: USB hub found [ 431.348565][ T5273] usb 4-1: USB disconnect, device number 70 [ 431.475034][ T6815] hub 2-1:0.0: 1 port detected [ 431.576161][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.594776][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.652431][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.662546][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.672354][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.694947][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.707390][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.734379][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.749946][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.763022][ T5277] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 431.797605][ T5277] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 431.849625][ T5277] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 431.891290][T11997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.934813][T11997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.044188][ T6815] usb 2-1: USB disconnect, device number 75 [ 432.058790][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.081931][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.104110][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.188652][T12014] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 432.200871][T12014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1307'. [ 432.263755][ T5277] usb 3-1: USB disconnect, device number 39 [ 432.300398][ T5273] usb 1-1: USB disconnect, device number 69 [ 432.561673][T12022] qrtr: Invalid version 164 [ 432.773356][T12024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.816500][T12024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.954415][T12031] Invalid logical block size (8704) [ 433.442934][T12039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.597050][ T6815] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 433.766166][ T6815] usb 4-1: device descriptor read/64, error -71 [ 433.887021][ T5277] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 434.057187][ T6815] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 434.066290][ T46] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 434.088288][ T5277] usb 2-1: Using ep0 maxpacket: 8 [ 434.104511][ T5277] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.120580][ T5277] usb 2-1: config 179 has no interface number 0 [ 434.149416][ T5277] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 434.180383][ T5277] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 434.195214][ T5277] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.208754][ T5277] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 434.222605][ T5277] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.239418][ T6815] usb 4-1: device descriptor read/64, error -71 [ 434.254018][ T5277] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 434.264568][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.276099][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 434.287732][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.298562][T12042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 434.326578][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.356910][ T6815] usb usb4-port1: attempt power cycle [ 434.358690][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.464900][ T46] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 434.479873][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.503886][ T46] usb 5-1: config 0 descriptor?? [ 434.637739][T12054] FAULT_INJECTION: forcing a failure. [ 434.637739][T12054] name failslab, interval 1, probability 0, space 0, times 0 [ 434.650899][T12054] CPU: 0 UID: 0 PID: 12054 Comm: syz.0.1321 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 434.661417][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 434.671495][T12054] Call Trace: [ 434.674791][T12054] [ 434.677734][T12054] dump_stack_lvl+0x241/0x360 [ 434.682442][T12054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.687749][T12054] ? __pfx__printk+0x10/0x10 [ 434.692362][T12054] ? __kmalloc_noprof+0xb0/0x400 [ 434.697318][T12054] ? __pfx___might_resched+0x10/0x10 [ 434.702623][T12054] should_fail_ex+0x3b0/0x4e0 [ 434.707339][T12054] ? nft_set_elem_expr_alloc+0x17a/0x560 [ 434.712998][T12054] should_failslab+0xac/0x100 [ 434.717687][T12054] ? nft_set_elem_expr_alloc+0x17a/0x560 [ 434.723357][T12054] __kmalloc_noprof+0xd8/0x400 [ 434.728152][T12054] nft_set_elem_expr_alloc+0x17a/0x560 [ 434.733621][T12054] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 434.739621][T12054] ? nla_strcmp+0xd5/0x110 [ 434.744056][T12054] ? __nla_parse+0x40/0x60 [ 434.748485][T12054] nf_tables_newsetelem+0x18eb/0x58c0 [ 434.753852][T12054] ? __kernel_text_address+0xd/0x40 [ 434.759059][T12054] ? unwind_get_return_address+0x91/0xc0 [ 434.764749][T12054] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 434.770466][T12054] ? nft_pernet+0x23/0x240 [ 434.774886][T12054] ? __pfx_lock_release+0x10/0x10 [ 434.779942][T12054] ? __nla_validate_parse+0x26ce/0x3090 [ 434.785487][T12054] ? __lock_acquire+0x137a/0x2040 [ 434.790530][T12054] ? __pfx_lock_acquire+0x10/0x10 [ 434.795556][T12054] ? nfnl_pernet+0x23/0x240 [ 434.800054][T12054] ? __pfx_lock_release+0x10/0x10 [ 434.805086][T12054] ? __nla_parse+0x40/0x60 [ 434.809509][T12054] nfnetlink_rcv+0x1427/0x2a90 [ 434.814327][T12054] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 434.819498][T12054] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.824708][T12054] ? skb_clone+0x240/0x390 [ 434.829126][T12054] ? __pfx_lock_release+0x10/0x10 [ 434.834167][T12054] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.839362][T12054] netlink_unicast+0x7f0/0x990 [ 434.844133][T12054] ? __pfx_netlink_unicast+0x10/0x10 [ 434.849411][T12054] ? __virt_addr_valid+0x183/0x530 [ 434.854522][T12054] ? __check_object_size+0x49c/0x900 [ 434.859802][T12054] ? bpf_lsm_netlink_send+0x9/0x10 [ 434.864917][T12054] netlink_sendmsg+0x8e4/0xcb0 [ 434.869690][T12054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.874983][T12054] ? __import_iovec+0x536/0x820 [ 434.879848][T12054] ? aa_sock_msg_perm+0x91/0x160 [ 434.884795][T12054] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 434.890109][T12054] ? security_socket_sendmsg+0x87/0xb0 [ 434.895576][T12054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.900859][T12054] __sock_sendmsg+0x221/0x270 [ 434.905542][T12054] ____sys_sendmsg+0x525/0x7d0 [ 434.910313][T12054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.915626][T12054] __sys_sendmsg+0x2b0/0x3a0 [ 434.920232][T12054] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.925360][T12054] ? vfs_write+0x7c4/0xc90 [ 434.929821][T12054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 434.936154][T12054] ? do_syscall_64+0x100/0x230 [ 434.940932][T12054] ? do_syscall_64+0xb6/0x230 [ 434.945622][T12054] do_syscall_64+0xf3/0x230 [ 434.950130][T12054] ? clear_bhb_loop+0x35/0x90 [ 434.954806][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.960699][T12054] RIP: 0033:0x7f367f977299 [ 434.965115][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.984737][T12054] RSP: 002b:00007f3680804048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.993498][T12054] RAX: ffffffffffffffda RBX: 00007f367fb05f80 RCX: 00007f367f977299 [ 435.001469][T12054] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 435.009433][T12054] RBP: 00007f36808040a0 R08: 0000000000000000 R09: 0000000000000000 [ 435.017396][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.025355][T12054] R13: 000000000000000b R14: 00007f367fb05f80 R15: 00007f367fc2fa38 [ 435.033334][T12054] [ 435.146247][ T6815] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 435.148019][T12057] qrtr: Invalid version 164 [ 435.177308][ T6815] usb 4-1: device descriptor read/8, error -71 [ 435.254579][ T46] creative-sb0540 0003:041E:3100.0015: unknown main item tag 0x0 [ 435.274140][ T46] creative-sb0540 0003:041E:3100.0015: unknown main item tag 0x0 [ 435.294141][ T46] creative-sb0540 0003:041E:3100.0015: unknown main item tag 0x0 [ 435.325365][ T46] creative-sb0540 0003:041E:3100.0015: unknown main item tag 0x0 [ 435.345634][ T46] creative-sb0540 0003:041E:3100.0015: unknown main item tag 0x0 [ 435.374995][ T46] creative-sb0540 0003:041E:3100.0015: No inputs registered, leaving [ 435.395276][ T46] creative-sb0540 0003:041E:3100.0015: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 435.457650][ T6815] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 435.478674][ T5228] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 435.486527][ T46] usb 5-1: USB disconnect, device number 56 [ 435.550427][ T6815] usb 4-1: device descriptor read/8, error -71 [ 435.697075][ T6815] usb usb4-port1: unable to enumerate USB device [ 436.321473][T12067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.338455][T12067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.544439][ T7279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.577165][ T5273] usb 2-1: USB disconnect, device number 76 [ 436.577248][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 436.591734][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 436.600842][ C0] ================================================================== [ 436.608907][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x8d1/0x980 [ 436.617051][ C0] Read of size 1 at addr ffff88802f570891 by task ksoftirqd/0/16 [ 436.624743][ C0] [ 436.627048][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 436.637258][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 436.647286][ C0] Call Trace: [ 436.650542][ C0] [ 436.653369][ C0] dump_stack_lvl+0x241/0x360 [ 436.658028][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.663203][ C0] ? __pfx__printk+0x10/0x10 [ 436.667770][ C0] ? _printk+0xd5/0x120 [ 436.671902][ C0] ? __virt_addr_valid+0x183/0x530 [ 436.676990][ C0] ? __virt_addr_valid+0x183/0x530 [ 436.682161][ C0] print_report+0x169/0x550 [ 436.686646][ C0] ? __virt_addr_valid+0x183/0x530 [ 436.691732][ C0] ? __virt_addr_valid+0x183/0x530 [ 436.696813][ C0] ? __virt_addr_valid+0x45f/0x530 [ 436.701896][ C0] ? __phys_addr+0xba/0x170 [ 436.706374][ C0] ? register_lock_class+0x8d1/0x980 [ 436.711638][ C0] kasan_report+0x143/0x180 [ 436.716124][ C0] ? register_lock_class+0x8d1/0x980 [ 436.721388][ C0] register_lock_class+0x8d1/0x980 [ 436.726478][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 436.732114][ C0] ? __lock_acquire+0x137a/0x2040 [ 436.737114][ C0] __lock_acquire+0xf0/0x2040 [ 436.741945][ C0] ? mark_lock+0x9a/0x350 [ 436.746254][ C0] ? __lock_acquire+0x137a/0x2040 [ 436.751258][ C0] lock_acquire+0x1ed/0x550 [ 436.755738][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 436.761094][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 436.766103][ C0] ? kcov_remote_stop+0x70/0x6e0 [ 436.771019][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 436.776038][ C0] ? __pfx_lock_release+0x10/0x10 [ 436.781042][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 436.786303][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 436.791652][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 436.797519][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 436.802696][ C0] __wake_up_common_lock+0x25/0x1e0 [ 436.807873][ C0] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 436.813231][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 436.819108][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 436.824283][ C0] dummy_timer+0x830/0x45a0 [ 436.828763][ C0] ? __pfx_lock_release+0x10/0x10 [ 436.833774][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 436.840102][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 436.845450][ C0] ? __pfx_lock_release+0x10/0x10 [ 436.850454][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 436.855629][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 436.860544][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 436.865455][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 436.870627][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 436.876673][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 436.882368][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 436.888410][ C0] hrtimer_interrupt+0x396/0x990 [ 436.893327][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 436.899285][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 436.904896][ C0] [ 436.907804][ C0] [ 436.910711][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.916673][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 436.922808][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 [ 436.942494][ C0] RSP: 0018:ffffc90000157490 EFLAGS: 00000246 [ 436.948543][ C0] RAX: ffffffff81413ee9 RBX: ffffc900001579d0 RCX: ffff888017adda00 [ 436.956510][ C0] RDX: 0000000080000101 RSI: 0000000000000001 RDI: ffffc900001579d0 [ 436.964553][ C0] RBP: ffffc900001579d0 R08: ffffffff8141354b R09: ffffffff814120bf [ 436.972521][ C0] R10: 0000000000000003 R11: ffff888017adda00 R12: 1ffff9200002aebd [ 436.980476][ C0] R13: 1ffff9200002aebe R14: 1ffff9200002aebc R15: ffffc90000158000 [ 436.988434][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 436.993700][ C0] ? deref_stack_reg+0xab/0x260 [ 436.998529][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 437.003972][ C0] __read_once_word_nocheck+0x9/0x20 [ 437.009238][ C0] deref_stack_reg+0x1c7/0x260 [ 437.013980][ C0] unwind_next_frame+0x1ab8/0x2a00 [ 437.019071][ C0] ? poison_slab_object+0xe0/0x150 [ 437.024161][ C0] ? poison_slab_object+0xe0/0x150 [ 437.029250][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.035382][ C0] arch_stack_walk+0x151/0x1b0 [ 437.040127][ C0] ? rcu_core+0xafd/0x1830 [ 437.044518][ C0] ? __kasan_slab_free+0x37/0x60 [ 437.049431][ C0] stack_trace_save+0x118/0x1d0 [ 437.054257][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 437.059694][ C0] ? rcu_core+0xa86/0x1830 [ 437.064085][ C0] kasan_save_track+0x3f/0x80 [ 437.068737][ C0] ? kasan_save_track+0x3f/0x80 [ 437.073561][ C0] ? kasan_save_free_info+0x40/0x50 [ 437.078737][ C0] ? poison_slab_object+0xe0/0x150 [ 437.083838][ C0] ? __memcg_slab_free_hook+0xa7/0x310 [ 437.089275][ C0] ? rcu_core+0xafd/0x1830 [ 437.093669][ C0] kasan_save_free_info+0x40/0x50 [ 437.098755][ C0] poison_slab_object+0xe0/0x150 [ 437.103667][ C0] ? rcu_core+0xafd/0x1830 [ 437.108069][ C0] __kasan_slab_free+0x37/0x60 [ 437.112810][ C0] kmem_cache_free+0x145/0x350 [ 437.117547][ C0] ? rcu_core+0xa86/0x1830 [ 437.121938][ C0] ? __pfx_i_callback+0x10/0x10 [ 437.126773][ C0] rcu_core+0xafd/0x1830 [ 437.131001][ C0] ? __pfx_rcu_core+0x10/0x10 [ 437.135652][ C0] ? rcu_qs+0xf1/0x190 [ 437.139699][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 437.144176][ C0] ? sched_clock_cpu+0x76/0x490 [ 437.149002][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 437.154961][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 437.161263][ C0] ? __schedule+0x1808/0x4a60 [ 437.165931][ C0] handle_softirqs+0x2c4/0x970 [ 437.170674][ C0] ? run_ksoftirqd+0xca/0x130 [ 437.175327][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 437.180589][ C0] run_ksoftirqd+0xca/0x130 [ 437.185069][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 437.190155][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 437.195854][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 437.200944][ C0] smpboot_thread_fn+0x544/0xa30 [ 437.205861][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 437.210865][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 437.216303][ C0] kthread+0x2f0/0x390 [ 437.220346][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 437.225780][ C0] ? __pfx_kthread+0x10/0x10 [ 437.230349][ C0] ret_from_fork+0x4b/0x80 [ 437.234744][ C0] ? __pfx_kthread+0x10/0x10 [ 437.239308][ C0] ret_from_fork_asm+0x1a/0x30 [ 437.244052][ C0] [ 437.247046][ C0] [ 437.249345][ C0] Allocated by task 5277: [ 437.253642][ C0] kasan_save_track+0x3f/0x80 [ 437.258298][ C0] __kasan_kmalloc+0x98/0xb0 [ 437.262884][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 437.268232][ C0] xpad_probe+0x3c8/0x1b90 [ 437.272622][ C0] usb_probe_interface+0x645/0xbb0 [ 437.277709][ C0] really_probe+0x2b8/0xad0 [ 437.282185][ C0] __driver_probe_device+0x1a2/0x390 [ 437.287440][ C0] driver_probe_device+0x50/0x430 [ 437.292436][ C0] __device_attach_driver+0x2d6/0x530 [ 437.297779][ C0] bus_for_each_drv+0x24e/0x2e0 [ 437.302600][ C0] __device_attach+0x333/0x520 [ 437.307340][ C0] bus_probe_device+0x189/0x260 [ 437.312164][ C0] device_add+0x856/0xbf0 [ 437.316468][ C0] usb_set_configuration+0x1976/0x1fb0 [ 437.321902][ C0] usb_generic_driver_probe+0x88/0x140 [ 437.327330][ C0] usb_probe_device+0x1b8/0x380 [ 437.332153][ C0] really_probe+0x2b8/0xad0 [ 437.336627][ C0] __driver_probe_device+0x1a2/0x390 [ 437.341882][ C0] driver_probe_device+0x50/0x430 [ 437.346881][ C0] __device_attach_driver+0x2d6/0x530 [ 437.352224][ C0] bus_for_each_drv+0x24e/0x2e0 [ 437.357048][ C0] __device_attach+0x333/0x520 [ 437.361787][ C0] bus_probe_device+0x189/0x260 [ 437.366609][ C0] device_add+0x856/0xbf0 [ 437.370914][ C0] usb_new_device+0x104a/0x19a0 [ 437.375736][ C0] hub_event+0x2d6a/0x5150 [ 437.380128][ C0] process_scheduled_works+0xa2c/0x1830 [ 437.385649][ C0] worker_thread+0x86d/0xd40 [ 437.390214][ C0] kthread+0x2f0/0x390 [ 437.394253][ C0] ret_from_fork+0x4b/0x80 [ 437.398645][ C0] ret_from_fork_asm+0x1a/0x30 [ 437.403389][ C0] [ 437.405688][ C0] Freed by task 5273: [ 437.409638][ C0] kasan_save_track+0x3f/0x80 [ 437.414290][ C0] kasan_save_free_info+0x40/0x50 [ 437.419372][ C0] poison_slab_object+0xe0/0x150 [ 437.424284][ C0] __kasan_slab_free+0x37/0x60 [ 437.429030][ C0] kfree+0x149/0x360 [ 437.432897][ C0] xpad_disconnect+0x359/0x490 [ 437.437634][ C0] usb_unbind_interface+0x25e/0x940 [ 437.442819][ C0] device_release_driver_internal+0x503/0x7c0 [ 437.448862][ C0] bus_remove_device+0x34f/0x420 [ 437.453797][ C0] device_del+0x57a/0x9b0 [ 437.458104][ C0] usb_disable_device+0x3bf/0x850 [ 437.463112][ C0] usb_disconnect+0x340/0x950 [ 437.467760][ C0] hub_event+0x1eb9/0x5150 [ 437.472150][ C0] process_scheduled_works+0xa2c/0x1830 [ 437.477670][ C0] worker_thread+0x86d/0xd40 [ 437.482235][ C0] kthread+0x2f0/0x390 [ 437.486274][ C0] ret_from_fork+0x4b/0x80 [ 437.490668][ C0] ret_from_fork_asm+0x1a/0x30 [ 437.495409][ C0] [ 437.497708][ C0] The buggy address belongs to the object at ffff88802f570800 [ 437.497708][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 437.511730][ C0] The buggy address is located 145 bytes inside of [ 437.511730][ C0] freed 1024-byte region [ffff88802f570800, ffff88802f570c00) [ 437.525667][ C0] [ 437.527968][ C0] The buggy address belongs to the physical page: [ 437.534354][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f570 [ 437.543089][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 437.551558][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 437.559079][ C0] page_type: 0xfdffffff(slab) [ 437.563736][ C0] raw: 00fff00000000040 ffff888015841dc0 ffffea0001a5d200 dead000000000002 [ 437.572289][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 437.580847][ C0] head: 00fff00000000040 ffff888015841dc0 ffffea0001a5d200 dead000000000002 [ 437.589486][ C0] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 437.598126][ C0] head: 00fff00000000003 ffffea0000bd5c01 ffffffffffffffff 0000000000000000 [ 437.606855][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 437.615494][ C0] page dumped because: kasan: bad access detected [ 437.621888][ C0] page_owner tracks the page as allocated [ 437.627570][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1831, tgid 1831 (kworker/u8:6), ts 62232218758, free_ts 62205782399 [ 437.646811][ C0] post_alloc_hook+0x1f3/0x230 [ 437.651556][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 437.657176][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 437.662348][ C0] alloc_slab_page+0x5f/0x120 [ 437.666998][ C0] allocate_slab+0x5a/0x2f0 [ 437.671474][ C0] ___slab_alloc+0xcd1/0x14b0 [ 437.676124][ C0] __slab_alloc+0x58/0xa0 [ 437.680426][ C0] __kmalloc_noprof+0x25a/0x400 [ 437.685246][ C0] ___neigh_create+0x691/0x2470 [ 437.690070][ C0] ip6_finish_output2+0x1631/0x1680 [ 437.695242][ C0] ip6_finish_output+0x41e/0x810 [ 437.700149][ C0] ndisc_send_skb+0xab2/0x1380 [ 437.704887][ C0] addrconf_dad_completed+0x76c/0xcd0 [ 437.710233][ C0] addrconf_dad_work+0xdc2/0x16f0 [ 437.715233][ C0] process_scheduled_works+0xa2c/0x1830 [ 437.720752][ C0] worker_thread+0x86d/0xd40 [ 437.725318][ C0] page last free pid 5239 tgid 5239 stack trace: [ 437.731612][ C0] free_unref_page+0xd22/0xea0 [ 437.736354][ C0] __slab_free+0x31b/0x3d0 [ 437.740837][ C0] qlist_free_all+0x9e/0x140 [ 437.745402][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 437.750840][ C0] __kasan_slab_alloc+0x23/0x80 [ 437.755673][ C0] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 437.761461][ C0] __d_alloc+0x31/0x700 [ 437.765591][ C0] d_alloc_pseudo+0x1f/0xb0 [ 437.770068][ C0] alloc_file_pseudo+0x123/0x290 [ 437.774980][ C0] sock_alloc_file+0xb8/0x290 [ 437.779631][ C0] __sys_socket+0x1dd/0x3c0 [ 437.784108][ C0] __x64_sys_socket+0x7a/0x90 [ 437.788759][ C0] do_syscall_64+0xf3/0x230 [ 437.793240][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.799113][ C0] [ 437.801411][ C0] Memory state around the buggy address: [ 437.807012][ C0] ffff88802f570780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.815046][ C0] ffff88802f570800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.823080][ C0] >ffff88802f570880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.831114][ C0] ^ [ 437.835674][ C0] ffff88802f570900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.843706][ C0] ffff88802f570980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.851738][ C0] ================================================================== [ 437.859778][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 437.866966][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 437.877183][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 437.887212][ C0] Call Trace: [ 437.890472][ C0] [ 437.893381][ C0] dump_stack_lvl+0x241/0x360 [ 437.898039][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.903213][ C0] ? __pfx__printk+0x10/0x10 [ 437.907778][ C0] ? rcu_is_watching+0x15/0xb0 [ 437.912528][ C0] ? lock_release+0xbf/0xa30 [ 437.917101][ C0] ? vscnprintf+0x5d/0x90 [ 437.921412][ C0] panic+0x349/0x860 [ 437.925283][ C0] ? check_panic_on_warn+0x21/0xb0 [ 437.930378][ C0] ? __pfx_panic+0x10/0x10 [ 437.934799][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 437.939978][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 437.945846][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 437.952236][ C0] ? print_report+0x502/0x550 [ 437.956895][ C0] check_panic_on_warn+0x86/0xb0 [ 437.961813][ C0] ? register_lock_class+0x8d1/0x980 [ 437.967076][ C0] end_report+0x77/0x160 [ 437.971296][ C0] kasan_report+0x154/0x180 [ 437.975782][ C0] ? register_lock_class+0x8d1/0x980 [ 437.981049][ C0] register_lock_class+0x8d1/0x980 [ 437.986137][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 437.991747][ C0] ? __lock_acquire+0x137a/0x2040 [ 437.996751][ C0] __lock_acquire+0xf0/0x2040 [ 438.001404][ C0] ? mark_lock+0x9a/0x350 [ 438.005769][ C0] ? __lock_acquire+0x137a/0x2040 [ 438.010788][ C0] lock_acquire+0x1ed/0x550 [ 438.015281][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 438.020643][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 438.025660][ C0] ? kcov_remote_stop+0x70/0x6e0 [ 438.030578][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 438.035583][ C0] ? __pfx_lock_release+0x10/0x10 [ 438.040586][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 438.045849][ C0] ? __wake_up_common_lock+0x25/0x1e0 [ 438.051202][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 438.057072][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 438.062273][ C0] __wake_up_common_lock+0x25/0x1e0 [ 438.067455][ C0] __usb_hcd_giveback_urb+0x4ff/0x6e0 [ 438.072805][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 438.078691][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 438.083891][ C0] dummy_timer+0x830/0x45a0 [ 438.088380][ C0] ? __pfx_lock_release+0x10/0x10 [ 438.093391][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.099703][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 438.105056][ C0] ? __pfx_lock_release+0x10/0x10 [ 438.110060][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 438.115237][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 438.120155][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 438.125156][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 438.130332][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 438.136292][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 438.141989][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 438.148045][ C0] hrtimer_interrupt+0x396/0x990 [ 438.152964][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 438.158926][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 438.164534][ C0] [ 438.167442][ C0] [ 438.170350][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.176311][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 438.182441][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 [ 438.202020][ C0] RSP: 0018:ffffc90000157490 EFLAGS: 00000246 [ 438.208063][ C0] RAX: ffffffff81413ee9 RBX: ffffc900001579d0 RCX: ffff888017adda00 [ 438.216009][ C0] RDX: 0000000080000101 RSI: 0000000000000001 RDI: ffffc900001579d0 [ 438.223953][ C0] RBP: ffffc900001579d0 R08: ffffffff8141354b R09: ffffffff814120bf [ 438.231899][ C0] R10: 0000000000000003 R11: ffff888017adda00 R12: 1ffff9200002aebd [ 438.239844][ C0] R13: 1ffff9200002aebe R14: 1ffff9200002aebc R15: ffffc90000158000 [ 438.247789][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 438.253052][ C0] ? deref_stack_reg+0xab/0x260 [ 438.257878][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 438.263319][ C0] __read_once_word_nocheck+0x9/0x20 [ 438.268586][ C0] deref_stack_reg+0x1c7/0x260 [ 438.273330][ C0] unwind_next_frame+0x1ab8/0x2a00 [ 438.278420][ C0] ? poison_slab_object+0xe0/0x150 [ 438.283507][ C0] ? poison_slab_object+0xe0/0x150 [ 438.288600][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.294732][ C0] arch_stack_walk+0x151/0x1b0 [ 438.299470][ C0] ? rcu_core+0xafd/0x1830 [ 438.303862][ C0] ? __kasan_slab_free+0x37/0x60 [ 438.308780][ C0] stack_trace_save+0x118/0x1d0 [ 438.313608][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 438.318957][ C0] ? rcu_core+0xa86/0x1830 [ 438.323351][ C0] kasan_save_track+0x3f/0x80 [ 438.328003][ C0] ? kasan_save_track+0x3f/0x80 [ 438.332829][ C0] ? kasan_save_free_info+0x40/0x50 [ 438.338006][ C0] ? poison_slab_object+0xe0/0x150 [ 438.343102][ C0] ? __memcg_slab_free_hook+0xa7/0x310 [ 438.348540][ C0] ? rcu_core+0xafd/0x1830 [ 438.352930][ C0] kasan_save_free_info+0x40/0x50 [ 438.357928][ C0] poison_slab_object+0xe0/0x150 [ 438.362840][ C0] ? rcu_core+0xafd/0x1830 [ 438.367229][ C0] __kasan_slab_free+0x37/0x60 [ 438.371967][ C0] kmem_cache_free+0x145/0x350 [ 438.376735][ C0] ? rcu_core+0xa86/0x1830 [ 438.381146][ C0] ? __pfx_i_callback+0x10/0x10 [ 438.386000][ C0] rcu_core+0xafd/0x1830 [ 438.390273][ C0] ? __pfx_rcu_core+0x10/0x10 [ 438.394941][ C0] ? rcu_qs+0xf1/0x190 [ 438.399002][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 438.403483][ C0] ? sched_clock_cpu+0x76/0x490 [ 438.408323][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 438.414290][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.420689][ C0] ? __schedule+0x1808/0x4a60 [ 438.425350][ C0] handle_softirqs+0x2c4/0x970 [ 438.430104][ C0] ? run_ksoftirqd+0xca/0x130 [ 438.434769][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 438.440045][ C0] run_ksoftirqd+0xca/0x130 [ 438.444531][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 438.449617][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 438.455316][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 438.460401][ C0] smpboot_thread_fn+0x544/0xa30 [ 438.465317][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 438.470333][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 438.475769][ C0] kthread+0x2f0/0x390 [ 438.479811][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 438.485245][ C0] ? __pfx_kthread+0x10/0x10 [ 438.489807][ C0] ret_from_fork+0x4b/0x80 [ 438.494199][ C0] ? __pfx_kthread+0x10/0x10 [ 438.498760][ C0] ret_from_fork_asm+0x1a/0x30 [ 438.503503][ C0] [ 439.573332][ C0] Shutting down cpus with NMI [ 439.578256][ C0] Kernel Offset: disabled [ 439.582570][ C0] Rebooting in 86400 seconds..