last executing test programs: 11m10.366949495s ago: executing program 4 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}]}, 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000", @ANYBLOB="00022bbd70000c2cb78a8df41b70cdd2d5061a44fbdbdf", @ANYRES32=0x0, @ANYBLOB="0c009900000000000d00000005002001080000001400550021bba577b4c77c88055d48e8825cc36514005500ad8369a94b218f60ca9c1ba033cdbd801400fe0036f16d91c999934da49acdac61fe0b570600fd0008000000050020012a00000005002001100000000600fd000800000005"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='global_dirty_state\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f0000000040)=ANY=[@ANYRES16=r4]) setpgid(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 11m9.960775009s ago: executing program 4 (id=100): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x0, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0x10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe3, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, 0x0, 0xc040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x10, 0x2, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)) io_uring_enter(r4, 0x24f0, 0x5f82, 0x10, &(0x7f0000000140)={[0x2]}, 0xfffffffffffffcde) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000f00000000b0000000700000048c10000", @ANYRES32, @ANYBLOB="040057ff07718600000000000000000000000000000000e50000", @ANYRES32=0x0, @ANYBLOB="0500000000000000010000000a00000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1, 0xc}, 0x1c) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000cc0)=', ez\xe3\x91\xe5\xe8\xa3$:@^@,\x00^!\x95\xf0\x82\xdc-5\x10\xc3&\x8c\x87\xa5|t\x8a.\xe3\x8bH\xa5\x17m0\xb7L\x99A\x06\xeez1RA\xe8\xa4\"\x01T\xe9\x1a\xd6\x94)\xe5\xd7__\x11\x7f\x7f\xe6\xea\xd1\xa0<;\xff^\x9ap\xcf?\n\x85P\b/nqm/EA\xa3\x16\x82\x8e\x88\x1f\x93\x12\xe49\xf9\xc3^\xaf5\xca\xd3zh\x98\xd3\x11vM\xe2j\xbb\xc2L\xdd\x87uS\xeb\xce\xacl\xb4X\xf4\xc5\xbd\x81)I\xd4\xf0\xd8\x14\xe8\x8b2\x8d\xa0\xee\xd0\xc0\'\xb5\x99B==\xa1\x8e\x18\xac\xe7\xc3\xe9\xb7\x19\xa5\xc9rOX\xe7\xea\xc9\'\xf2\xf3\x1e4\xae\xf5s*\x9d\x80\xd2$\xf0b\x17\f(1`\xb6\xfc\xcf?\xe7\xf4\xba\xe7Q-\xbb\xa4i\xd8\xafy\x06\xfa\xaa\x8d`\xa1\xcae\xe1\xa3j\xa4\x8a\x81jf\xa5\x13\xaf8\xe7\\\xdfd\x15\t\x00\xa9Dw\xcew\x83\xdc\xd9\x81\x1f\tAyK\xf5;\xe0\x81\x83`\xf8\xb8\xe5\xe5j\x00\x98\xe6\xb1N\xff&\xd5\x8aO\xb0!\xe5z\x1e\xa3\xfe\x0e\xdc\x9cr\xe0\x16\xeaK\xd3U~1\xa1\x88NE\xc0\xf45\xa8\xc7\xef\xe6{#\xb4\xb5\xf2\xd9\x83 F\xdef\x11\xff\x93\xa6\xd4\x90\x1d\xb3\xca\x9b\xc2', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x92) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58}, 0x10) 11m8.933978452s ago: executing program 4 (id=101): socket$inet6(0xa, 0x3, 0x2c) io_setup(0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8080, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 11m8.768388932s ago: executing program 4 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe6, 0x35, 0x55, 0x40, 0x5ac, 0x290, 0xdc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x2}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, r2, 0x1, 0x0, 0x0, {{0x21, 0x0, 0x11}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x5c}}, 0x0) 11m7.322345401s ago: executing program 4 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}]}, 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="940000", @ANYBLOB="00022bbd70000c2cb78a8df41b70cdd2d5061a44fbdbdf", @ANYRES32=0x0, @ANYBLOB="0c009900000000000d00000005002001080000001400550021bba577b4c77c88055d48e8825cc36514005500ad8369a94b218f60ca9c1ba033cdbd801400fe0036f16d91c999934da49acdac61fe0b570600fd0008000000050020012a00000005002001100000000600fd000800000005"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='global_dirty_state\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f0000000040)=ANY=[@ANYRES16=r4]) setpgid(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 11m6.953096823s ago: executing program 4 (id=112): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000701000000000000000003000000040000000c0001"], 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x2c) io_setup(0x4, &(0x7f00000014c0)=0x0) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x800000, 0x0, 0x50323234, 0x7}}) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x2001048, 0x0) io_submit(r9, 0x3, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r8, &(0x7f00000000c0)="466ac39aa872fbe66cd0070cc509ffc975275bfa5845193570af66cb3b463015a82361693b859742e88e22d0e4e31a59738898f19a3605870308aa10780ba59f753c393612", 0x45, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xff, r7, &(0x7f0000000180)="91e8c57d20cd81fabec3feee71bba9cacf6b854e4ba7fe1488426c6f41b382ea1ce7ce892fdbcba10b04fd416ec13174801f5163b20ae31d0f544979b037e12e05241afe6c89742f415d5a80c7edb4e6184b3c787eec873ad792ee080310fb9667d31c82ca4f3a6def1d3e32859cd324f0cf1abfde7155bad5c2dfab1ee1ef9afa4f10bdffc4fa628ec284a56864244c59503e2368cadeede30c1a82086a1a738a7649c8f49e34ecb742e095ade9b4d483ab54141ef2bf890229c4b09dc981e1", 0xc0, 0x6b5f, 0x0, 0x0, r10}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x8001, r7, &(0x7f00000003c0)="95bce56a9a5b1ea4d23075cd35aa86cac165028996a46ffb3551cc2fd376af6499644b5f5b85cefc6c3fcce9782d99557b7cdda1d040752dfb8097c338f0c47031acb9b6693c892e236f48d02e3d0d185139a0c86732e49ec6f445bafd4edf153589117432d308777caaadbaf752ea44cee11f623c5f8cf3498d6d81db991ef07fb0c6f7d8ec83725c6152e826cf924dcc784805f73b12683de6c1973d57672ec700de994f6d94dd13a19ec1", 0xac, 0x8000000000000001, 0x0, 0x3, r7}]) 10m59.487390024s ago: executing program 3 (id=128): socket$inet6(0xa, 0x5, 0x10000) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000040)=""/179, 0xb3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff44, &(0x7f0000000300)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000680)=ANY=[@ANYBLOB="1201500202000040250540fb4000010203010902650001010c40090904007f0202060002052ef286d0cddc8284f12406080005240061b20d240f010500000006003018081524120002a317a88b045e4f01a607c0ffcb7e"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_usb_disconnect(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000600)={0x0, @reserved}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 10m56.159792075s ago: executing program 3 (id=138): socket$kcm(0x10, 0x3, 0x10) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @mcast2, 0x6}, {0xa, 0x4e24, 0xc7e, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0xffffffffffffffff, {[0x7, 0x6, 0x7ff, 0x1, 0x2, 0x8, 0xc0f, 0xfffffff4]}}, 0x5c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000001300"/16, @ANYRES32=0x0, @ANYBLOB="024205000000000008000c00040007003eff1a804800008014000700ff01000000000000000000000000000114000700fc01000000000000000000000000000014000700fe8000000000000000000000000000000500080065a20000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601046c00000000000000000000000500050000000000050001000600000005000400000000000900020073797a300000000014000300684173683a69702c706f72742c6970000c0007800800064000000000b21d5cde9af11f6a4f2a11c833336e9524a3ed66f0f826e080c13163008448c51b6989c24e19bdbfef206453a6fc57ff172eb55569b4315ae3e2084285cea8f925e69fe79fa1ab044cd1c3e7"], 0x58}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127c, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000001c0)=0xfffffffc, 0x4) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x0, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000a40)={0xa, @pix_mp}) 10m55.066349213s ago: executing program 3 (id=141): syz_emit_ethernet(0x235, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x1ff, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x9, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, '\x00\x00\x00\x00\x00\x00'}, {0x0, 0x13, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a775"}, {0x0, 0x1c, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d"}, {}, {0x21, 0x2, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x3}}]}, 0x38}}, 0x0) 10m54.83382917s ago: executing program 3 (id=142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x38, 0x6, 0x1, @remote, @local, {[], {{0x8d, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b13d86ef0a5df937dfd47f3b4321bacb"}, @eol, @window={0x3, 0x3, 0x3d}, @fastopen={0x22, 0xb, "1a3aab0ae87154f65c"}]}}}}}}}}, 0x0) 10m54.669008488s ago: executing program 3 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}]}, 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022bbd70000c2cb78a8df41b70cdd2d5061a44fbdbdf", @ANYRES32=0x0, @ANYBLOB="0c009900000000000d00000005002001080000001400550021bba577b4c77c88055d48e8825cc36514005500ad8369a94b218f60ca9c1ba033cdbd801400fe0036f16d91c999934da49acdac61fe0b570600fd0008000000050020012a00000005002001100000000600fd000800000005"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='global_dirty_state\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f0000000040)=ANY=[@ANYRES16=r4]) setpgid(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 10m54.225111302s ago: executing program 3 (id=144): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000701000000000000000003000000040000000c0001"], 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x2c) io_setup(0x4, &(0x7f00000014c0)=0x0) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x800000, 0x0, 0x50323234, 0x7}}) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x2001048, 0x0) io_submit(r9, 0x3, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffff, r8, &(0x7f00000000c0)="466ac39aa872fbe66cd0070cc509ffc975275bfa5845193570af66cb3b463015a82361693b859742e88e22d0e4e31a59738898f19a3605870308aa10780ba59f753c393612", 0x45, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0xff, r7, &(0x7f0000000180)="91e8c57d20cd81fabec3feee71bba9cacf6b854e4ba7fe1488426c6f41b382ea1ce7ce892fdbcba10b04fd416ec13174801f5163b20ae31d0f544979b037e12e05241afe6c89742f415d5a80c7edb4e6184b3c787eec873ad792ee080310fb9667d31c82ca4f3a6def1d3e32859cd324f0cf1abfde7155bad5c2dfab1ee1ef9afa4f10bdffc4fa628ec284a56864244c59503e2368cadeede30c1a82086a1a738a7649c8f49e34ecb742e095ade9b4d483ab54141ef2bf890229c4b09dc981e1", 0xc0, 0x6b5f, 0x0, 0x0, r10}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x8001, r7, &(0x7f00000003c0)="95bce56a9a5b1ea4d23075cd35aa86cac165028996a46ffb3551cc2fd376af6499644b5f5b85cefc6c3fcce9782d99557b7cdda1d040752dfb8097c338f0c47031acb9b6693c892e236f48d02e3d0d185139a0c86732e49ec6f445bafd4edf153589117432d308777caaadbaf752ea44cee11f623c5f8cf3498d6d81db991ef07fb0c6f7d8ec83725c6152e826cf924dcc784805f73b12683de6c1973d57672ec700de994f6d94dd13a19ec1", 0xac, 0x8000000000000001, 0x0, 0x3, r7}]) 14.068294722s ago: executing program 2 (id=1098): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf0000000f0a00000000000004000000400000000500000000000000ff03000000000000000000000000000000000000000000000000000000e60000070000000500000000000000000000003c15000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/318]) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) keyctl$dh_compute(0xc9, 0x0, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="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", 0x10e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a", 0x43}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258", 0x60}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB='u'], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffc}) 11.00395015s ago: executing program 2 (id=1106): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x18, 0x2, 0x0, "b43d70dde500c67f000000100000000000000000004000"}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000140)={@any, 0x20}) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYRES16=r5, @ANYRES16=r4], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/136, 0x88, 0x103, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f00000011c0)=""/4071, 0xfe7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000002340)=""/31, 0x1f}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/113, 0x71}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000340)=""/77, 0x4d}], 0xc}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 7.887422833s ago: executing program 2 (id=1112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) rename(&(0x7f0000000300)='./control/file0\x00', &(0x7f0000000340)='./file1\x00') ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0}) (fail_nth: 3) 7.189137894s ago: executing program 2 (id=1114): pipe(&(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\f'], 0x28}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x84) syz_io_uring_setup(0x73f8, &(0x7f0000000200)={0x0, 0xfeef, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x4110, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x1}) creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000140)='./file0\x00', 0x97, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000001a80)={0x2020}, 0x2020) 6.970806545s ago: executing program 1 (id=1115): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.511925891s ago: executing program 0 (id=1116): r0 = socket(0x3, 0x4, 0x100fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) socket$netlink(0x10, 0x3, 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x341480, 0x0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40}, 0x4040804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000010101014000000000000000020000000c00198008000200020d0000300002802c0001"], 0x50}}, 0x0) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 5.422349099s ago: executing program 1 (id=1117): write$hidraw(0xffffffffffffffff, &(0x7f0000000ec0), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d", 0x80}, {&(0x7f0000000f00)="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", 0x184}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="a48ddda58f0c3202e4331de15e27c2f6b69ccda5c86d79ec8171a6447231bbf9a1a064d718209a1013baec29196d3ae2707e8d813dc1c962f5edc8a102000000684ba48796800608d791fcd2b838e7735cf89f00ed2121ae7146135b1d4f15bc73c405", 0x63}], 0x1}}], 0x2, 0x0) 4.522732484s ago: executing program 0 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfdc, &(0x7f0000000400)={[{}, {0xfb8, 0x4e00, "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"}, {0x16, 0x4e00, "9c091a75d7b842297c27a565caea68b6aff9503a57ca"}]}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x40000000}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) 4.469162693s ago: executing program 1 (id=1119): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000356000), 0x4) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x20000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00\x00\f\x00', "030100", "e859ad13", ["8bada940edff000a00", "f460734b0000008000", "000000ff0000000000000020", "0000000000000000000100"]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="91e5b8fec8115a372cc540a830", 0xd}, {&(0x7f0000000340)='\f', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000640)="d5345033e80d7ff02c718ac9f3a41106ebcb60fb407954da9f6076fc50cacb0e4e26c2a67200186552", 0x29}, {&(0x7f0000000540)="14f4b7f928ddec8eef19a645cbd1ca1c44f58174a7ce1f84169305564a7a3edd839d5bf8c69d582bdb", 0x29}, {&(0x7f0000001740)="1f127ffe2d7ca16aed89ab90f1d41b27469e22823dddfb5b31", 0x19}, {&(0x7f00000017c0)="46db3e19ce1a26b491cd83b959551e3e325c41657b62ef800a36f3fa8db2fcb2a887", 0x22}], 0x4}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001c40)="aa1b895acae9510937460c4cea988e493bf436e400be4374bbe63e4116f8d3f6f5ec", 0x22}, {&(0x7f0000001c80)="d5bef22d20e418c1f7f7cd0010709b9e47303ff0fe6c5b8994fbb6d6ff8790d8fb5db6", 0xfffffdac}], 0x2}}], 0x3, 0x8010) (async) sendmmsg$unix(r2, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="91e5b8fec8115a372cc540a830", 0xd}, {&(0x7f0000000340)='\f', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000640)="d5345033e80d7ff02c718ac9f3a41106ebcb60fb407954da9f6076fc50cacb0e4e26c2a67200186552", 0x29}, {&(0x7f0000000540)="14f4b7f928ddec8eef19a645cbd1ca1c44f58174a7ce1f84169305564a7a3edd839d5bf8c69d582bdb", 0x29}, {&(0x7f0000001740)="1f127ffe2d7ca16aed89ab90f1d41b27469e22823dddfb5b31", 0x19}, {&(0x7f00000017c0)="46db3e19ce1a26b491cd83b959551e3e325c41657b62ef800a36f3fa8db2fcb2a887", 0x22}], 0x4}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001c40)="aa1b895acae9510937460c4cea988e493bf436e400be4374bbe63e4116f8d3f6f5ec", 0x22}, {&(0x7f0000001c80)="d5bef22d20e418c1f7f7cd0010709b9e47303ff0fe6c5b8994fbb6d6ff8790d8fb5db6", 0xfffffdac}], 0x2}}], 0x3, 0x8010) 4.406708191s ago: executing program 1 (id=1120): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r1 = syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x6) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x3, &(0x7f0000000100)={0x0, "fd5a44512b7e1b3c20ec2a3ba53b31dd77000000000400"}}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "759f101b"}, @main=@item_4={0x3, 0x0, 0x9, "6ba1aff6"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) 4.16006446s ago: executing program 2 (id=1121): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="d4570847b1937948b7111dd96d83d8a4", 0x10}], 0x6}}], 0x4, 0x0) 3.893173002s ago: executing program 2 (id=1122): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x24, 0xa3, {0xa3, 0x21, "aeab260b9d380cb9b7eafe5c732d60ef217f0e0718d18f0e9a29a81c823d6b9203daaf7991b83d4c3d3f18078c301e526c630b6f646aa61df0559e5534314e98076ea2fe7f47fe9a16f0746490c44cb897c336c67dcb2e543479a04a1a27c6544ab9546d17caf92761b4386b5c42f87305e794e928508db264552beb64a497775c5d1fa93534b5392c932290864abe9c5e6a7e87251aa1360d29a8214ec18cad64"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000100)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x3, 0x9}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x7feffff, 0xff0f, 0x0, [0xff0000, 0x3fc0, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xdb, 0x9, 0xbb53, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x8, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x1, 0x2, 0x8d, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x6, 0x0, 0x831, 0x7}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1, 0x2, 0x5, "3bfaa387", "f15b4b6f"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x8, 0xcc, 0x40, 0x2, 0x400, 0xe596}}}, &(0x7f0000000880)={0x84, &(0x7f0000000500)={0x20, 0x17, 0xaa, "558097dc0801512b8a9237a42e4fb9327c5f35fefea1712ef5a7b081de6bb89e04d4387e1f3f03d87f367c84327668a0ad460aec3cc10a2105df16445d266c25e3e9befeb9dbca8748dc90811fd43fdc65fe4eec315c20b7d6cc06e0e508bdaf107b9f8fd73d0109213e447819160cb4d0c53e3b0e71e569a16c54926a839d0bb31a2e51e2513904cf8d2b663ff1ce292f1d4a3aaa1037ee407c882c5fae4226a3f5b9d881b332c2273e"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x140, 0x2, [0xf00f]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0xb, 0x2, "95ae"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @random="8fb04b90503e"}, &(0x7f0000000700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "a5c0"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x2639}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0xfc}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.549646127s ago: executing program 0 (id=1124): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="d4570847b1937948b7111dd96d83d8a455529f10", 0x14}], 0x6}}], 0x4, 0x0) 1.462602941s ago: executing program 0 (id=1125): pipe2(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100010000000c000200540a", @ANYRES32], 0x58}, 0x1, 0xba01}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x64c002) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000100)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000000c0)=0x80000000) 1.129127269s ago: executing program 1 (id=1126): r0 = socket(0x3, 0x4, 0x100fff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) socket$netlink(0x10, 0x3, 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x341480, 0x0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24ff2463dcb262f0dbc01edb04ff0400000000496af776cfe522de546fd210c0bb94b1cc578410c81153ebe87ac25e305bfb1f6418075e4201817fda4e9faf82bc0d20090076d7303444cac5ae3527e5137e1a377bf23672b763edb9feadff2adb23dee0e70600000000000000949fbfc1bf5fd6981e20189b"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40}, 0x4040804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000010101014000000000000000020000000c00198008000200020d0000300002802c0001"], 0x50}}, 0x0) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 198.649242ms ago: executing program 0 (id=1127): pipe2(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100010000000c000200540a", @ANYRES32], 0x58}, 0x1, 0xba01}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x64c002) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000100)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000000c0)=0x80000000) 130.481943ms ago: executing program 1 (id=1128): timer_create(0x7, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000", @ANYRES32, @ANYBLOB="08000400ffffffff080002"], 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=1129): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000480)={0x1, @raw_data="5e7026164e86c97d7307c4977b94fcee381eeb5e620d79eed4698b753ce7d5d8a4ebc5aa63c561a4a1fc002ede7827d4d492a8907022e2561053d7acca8f3ffafc06b486232a1ef3fd926370a0695699ef628909d4a13452e9fac9a3882702026e67bb182facb05b6f59e3abe537c1169dfd8956cc5fdaac36c5bb3c128ecb13b48ade6b38c9d32b3ec9d7ec8ff423ae31eedab6e13e383a2b83f12c0a39412b35414dcadffbf55e8e529af9de75ddafb4f34cddc216d15d624331a457a14d12378dd94cc9870956"}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x4300, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"bd02a6be95eab5700900a190c6d8cb00fc18137f1caf3e48118b251f7320a0e8"}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x800, 0x10001) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x0, &(0x7f0000004540)) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @raw_data="cd1bbe24cb522ca0942e7ae5897d147ce7f33897ef4f01481515e876dca85ca2f3c88930ec01da484f3a405da0fd93a65c2d08b14c8754b61863062895dd48f7c3766b4f623c36cc95b915e98996a44a6814be7f16e3ff687235845a1bd50703a4367c5c0e5f700404e5dd36f1a53c0c2de2de2f15ad991d333be811f16e54844e04bab7387615c5c03bdcda8640615529d87cdfb667ecacc24553f785af8899f26178c125bd07d22779316052f4150cbbb31a6f01420153738d759d2eca7818c5908933b18401eb"}}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04040a00f5080ac7ae9500b46a070000920000"], 0xd) syz_open_dev$sg(0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4}}], 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x80, 0x3c, 0x3d, 0x8, 0xe96, 0xc001, 0x623f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x55, 0x0, 0x0, 0x35, 0xbb, 0xe2}}, {{0x9, 0x4, 0x59, 0x0, 0x0, 0xd5, 0x6e, 0xb7}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES8=r3, @ANYRESHEX=r6, @ANYRESOCT=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): to avoid problems! [ 681.806311][T12754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.882559][T13036] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.891597][T13036] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.900402][T13036] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.909665][T13036] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.965591][T12139] usb 2-1: Using ep0 maxpacket: 8 [ 681.972492][T12139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 681.993128][T12139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 682.004289][T12754] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.004326][T12754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.004352][T12754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.004379][T12754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.074176][T12139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.095529][T12139] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.105227][T12139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 682.116869][T12139] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 682.130761][T12139] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 682.141747][T12139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.167865][T12139] usb 2-1: config 0 descriptor?? [ 682.173661][T13026] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 682.191162][T10887] Bluetooth: hci6: urb ffff88803360c100 submission failed (90) [ 682.210832][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.219399][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.232003][T12920] bridge_slave_0: entered allmulticast mode [ 682.240893][T12920] bridge_slave_0: entered promiscuous mode [ 682.282225][T12920] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.290577][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.308295][T12920] bridge_slave_1: entered allmulticast mode [ 682.322927][T12920] bridge_slave_1: entered promiscuous mode [ 682.437662][ T5286] usb 2-1: USB disconnect, device number 13 [ 682.518753][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.553085][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.596399][T12758] veth0_macvtap: entered promiscuous mode [ 682.705764][T10887] Bluetooth: hci4: command tx timeout [ 682.713326][T12758] veth1_macvtap: entered promiscuous mode [ 682.744882][T12920] team0: Port device team_slave_0 added [ 682.802614][T12920] team0: Port device team_slave_1 added [ 682.862263][T12920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.869884][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.900136][T12920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.942486][T12920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.956604][T12920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.985653][T12920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.039714][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.065541][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.078932][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.091663][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.103768][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.122404][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.135000][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.157317][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.193613][T12758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.222236][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.244314][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.281321][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.294724][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.305381][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.317784][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.328933][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.341258][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.352122][T12758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.362826][T12758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.376752][T12758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.417549][T12758] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.425782][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 683.429526][T12758] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.452258][T12758] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.462474][T12758] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.501363][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.514015][T12920] hsr_slave_0: entered promiscuous mode [ 683.514377][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.535818][T12920] hsr_slave_1: entered promiscuous mode [ 683.555553][T12920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.563281][T12920] Cannot create hsr debugfs directory [ 683.568944][ T5317] usb 1-1: USB disconnect, device number 8 [ 683.626281][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 683.645613][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 683.686605][ T9] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 683.703514][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.720164][ T9] usb 2-1: Product: syz [ 683.724613][ T9] usb 2-1: Manufacturer: syz [ 683.729806][ T9] usb 2-1: SerialNumber: syz [ 683.736908][ T9] usb 2-1: config 0 descriptor?? [ 683.927009][T13057] fuse: Unknown parameter '0xffffffffffffffff' [ 683.952980][ T9] usb 2-1: USB disconnect, device number 14 [ 683.996873][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.034482][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.098002][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.109017][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.535612][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 684.740449][T12920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 684.760860][T12920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 684.785754][T10887] Bluetooth: hci4: command tx timeout [ 684.791233][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 684.803510][T12920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 684.819484][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 684.842251][ T9] usb 2-1: string descriptor 0 read error: -22 [ 684.848927][ T9] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 684.869409][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.885958][ T944] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 684.900975][ T9] usb 2-1: config 0 descriptor?? [ 684.961518][T12920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 685.085737][ T944] usb 3-1: Using ep0 maxpacket: 8 [ 685.102309][ T944] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 685.146397][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.165131][ T944] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.188304][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.209672][ T944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 685.235208][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.248142][ T5300] usb 2-1: USB disconnect, device number 15 [ 685.302059][ T944] usbtmc 3-1:16.0: bulk endpoints not found [ 685.324565][T12920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.369131][T12920] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.412176][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.419315][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.483352][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.490516][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.583338][T13098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.948'. [ 685.607399][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 685.637685][T13098] tipc: Started in network mode [ 685.655732][T13098] tipc: Node identity 1, cluster identity 4711 [ 685.676998][T13098] tipc: Node number set to 1 [ 685.948704][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.033618][T13103] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.042655][T13103] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.051673][T13103] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.060676][T13103] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.192140][T12920] veth0_vlan: entered promiscuous mode [ 686.214176][T12920] veth1_vlan: entered promiscuous mode [ 686.236091][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.242436][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.259146][T12920] veth0_macvtap: entered promiscuous mode [ 686.288506][T12920] veth1_macvtap: entered promiscuous mode [ 686.353090][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.366514][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.378326][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.394401][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.404943][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.429874][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.445603][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.464548][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.476112][ T5229] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 686.484244][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.504772][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.535072][T12920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.562182][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.573812][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.584092][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.599097][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.619111][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.631599][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.647710][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.659322][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.679534][T12920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.690274][ T5229] usb 2-1: Using ep0 maxpacket: 8 [ 686.696724][T12920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.714314][ T5229] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 686.723906][ T5229] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 686.750797][T12920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.765541][ T5229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 686.795557][ T5229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.808940][T12920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.848379][ T5229] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.876882][T12920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.889519][ T5229] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 686.897034][T13115] nftables ruleset with unbound chain [ 686.904387][T12920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.921200][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.931795][T12920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.125271][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.163842][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.251442][ T5229] usb 2-1: usb_control_msg returned -32 [ 687.284047][ T5229] usbtmc 2-1:16.0: can't read capabilities [ 687.293862][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.317800][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.340715][ T5229] usb 2-1: USB disconnect, device number 16 [ 687.523539][T12139] usb 3-1: USB disconnect, device number 109 [ 687.985794][T10887] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 687.994530][T10887] Bluetooth: hci1: Injecting HCI hardware error event [ 688.003184][T10887] Bluetooth: hci1: hardware error 0x00 [ 688.185819][ T5286] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 688.366790][ T5229] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 688.375549][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 688.396540][ T5286] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 688.427232][ T5286] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.445590][ T5286] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 688.470318][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.512151][ T5286] usbtmc 1-1:16.0: bulk endpoints not found [ 688.567080][ T5229] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 688.590049][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.611778][ T5229] usb 2-1: config 0 descriptor?? [ 688.812585][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'. [ 688.863180][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 688.873381][T13134] tipc: Started in network mode [ 688.879642][T13134] tipc: Node identity 1, cluster identity 4711 [ 688.886020][T13134] tipc: Node number set to 1 [ 689.114688][T13138] random: crng reseeded on system resumption [ 690.067843][T10887] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 690.075035][ T5229] pegasus 2-1:0.0: can't reset MAC [ 690.082685][ T5229] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 690.100622][T13142] random: crng reseeded on system resumption [ 690.285547][ T5323] usb 2-1: USB disconnect, device number 17 [ 690.925944][ T9] usb 1-1: USB disconnect, device number 9 [ 691.206774][ T5323] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 691.412568][ T5323] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 691.432109][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.467792][ T5323] usb 2-1: config 0 descriptor?? [ 691.500444][ T5323] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 691.624700][T13150] x_tables: duplicate underflow at hook 1 [ 692.504160][T13153] loop7: detected capacity change from 0 to 16384 [ 693.328806][ T5323] gspca_stv06xx: Photobit pb0100 sensor detected [ 693.644711][ T5323] input: STV06xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 693.696071][ T5323] usb 2-1: USB disconnect, device number 18 [ 693.755688][ T5229] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 693.980890][ T5229] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 693.990234][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.011831][ T5229] usb 3-1: config 0 descriptor?? [ 694.046835][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.971'. [ 694.061568][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 694.415545][ T5323] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 694.455618][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 694.595534][ T5323] usb 1-1: Using ep0 maxpacket: 8 [ 694.602211][ T5323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.613303][ T5323] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 694.622788][ T5323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.636624][ T5323] usb 1-1: config 0 descriptor?? [ 694.637167][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.654865][ T5323] cdc_acm 1-1:0.0: invalid descriptor buffer length [ 694.662085][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.675133][ T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 694.693070][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.704124][ T9] usb 2-1: config 0 descriptor?? [ 694.841440][ T5229] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 695.132503][ T9] uclogic 0003:5543:0005.0011: unknown main item tag 0x0 [ 695.150370][ T9] uclogic 0003:5543:0005.0011: unknown main item tag 0x0 [ 695.163591][ T9] uclogic 0003:5543:0005.0011: No inputs registered, leaving [ 695.176643][ T9] uclogic 0003:5543:0005.0011: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 695.341376][ T9] usb 2-1: USB disconnect, device number 19 [ 696.500450][ T5323] usb 3-1: USB disconnect, device number 110 [ 697.089523][ T5323] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 697.101475][ T5229] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 697.221972][ T5317] usb 1-1: USB disconnect, device number 10 [ 697.295779][ T5323] usb 3-1: Using ep0 maxpacket: 8 [ 697.300864][ T5229] usb 2-1: Using ep0 maxpacket: 8 [ 697.315151][ T5323] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 697.336107][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 697.357608][ T5323] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.363465][T13193] netlink: 120 bytes leftover after parsing attributes in process `syz.0.978'. [ 697.375889][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 697.391636][ T5323] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 697.407794][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 697.426055][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.434356][ T5229] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 697.446555][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 697.457166][ T5229] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 697.477989][ T5323] usbtmc 3-1:16.0: bulk endpoints not found [ 697.488604][ T5229] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 697.503206][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.532437][ T5229] usb 2-1: config 0 descriptor?? [ 697.544793][T13191] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 697.568773][T10887] Bluetooth: hci6: urb ffff88802e0fd800 submission failed (90) [ 697.826539][ T5323] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 697.832411][T12139] usb 2-1: USB disconnect, device number 20 [ 698.036589][ T5323] usb 1-1: Using ep0 maxpacket: 32 [ 698.045405][ T5323] usb 1-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 698.058700][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.067454][ T5323] usb 1-1: Product: syz [ 698.071813][ T5323] usb 1-1: Manufacturer: syz [ 698.076648][ T5323] usb 1-1: SerialNumber: syz [ 698.083920][ T5323] usb 1-1: config 0 descriptor?? [ 698.785637][T12139] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 698.989582][T12139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.990669][ T5323] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 699.000799][T12139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.026330][T12139] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 699.043680][T12139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.078058][T12139] usb 2-1: config 0 descriptor?? [ 699.261259][ T5323] usb 1-1: device firmware changed [ 699.280957][ T5323] usb 1-1: USB disconnect, device number 11 [ 699.446203][ T5323] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 699.635656][ T5323] usb 1-1: Using ep0 maxpacket: 32 [ 699.658109][ T5323] usb 1-1: config 21 has an invalid interface number: 178 but max is 0 [ 699.671735][ T5323] usb 1-1: config 21 has no interface number 0 [ 699.680494][ T5323] usb 1-1: config 21 interface 178 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 699.694916][ T5323] usb 1-1: config 21 interface 178 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 699.706617][ T5323] usb 1-1: config 21 interface 178 altsetting 2 has an endpoint descriptor with address 0x5E, changing to 0xE [ 699.720888][ T5323] usb 1-1: config 21 interface 178 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 699.733637][ T5323] usb 1-1: config 21 interface 178 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 699.746643][ T5323] usb 1-1: config 21 interface 178 altsetting 2 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 699.761171][ T5323] usb 1-1: config 21 interface 178 altsetting 2 has an endpoint descriptor with address 0x99, changing to 0x89 [ 699.775044][ T5323] usb 1-1: config 21 interface 178 altsetting 2 endpoint 0x89 has invalid maxpacket 20697, setting to 1024 [ 699.790461][ T5323] usb 1-1: config 21 interface 178 altsetting 2 bulk endpoint 0x89 has invalid maxpacket 1024 [ 699.790702][ T9] usb 3-1: USB disconnect, device number 111 [ 699.806003][ T5323] usb 1-1: config 21 interface 178 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 699.840093][ T5323] usb 1-1: config 21 interface 178 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 699.871161][ T5323] usb 1-1: config 21 interface 178 has no altsetting 0 [ 699.883931][ T5323] usb 1-1: New USB device found, idVendor=257a, idProduct=1608, bcdDevice= 3.77 [ 699.890346][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.981'. [ 699.903466][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.912374][ T5323] usb 1-1: Product: ї [ 699.917056][ T5323] usb 1-1: Manufacturer: ఄ [ 699.922885][ T5323] usb 1-1: SerialNumber: Р [ 699.942156][T13195] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 699.951917][T13195] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 699.982810][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 700.214455][ T5323] option 1-1:21.178: GSM modem (1-port) converter detected [ 700.288660][ T5323] usb 1-1: USB disconnect, device number 12 [ 700.304857][ T5323] option 1-1:21.178: device disconnected [ 701.068940][T13208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.346413][ T5323] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 701.378813][T13215] IPv6: Can't replace route, no match found [ 701.480637][T12139] usbhid 2-1:0.0: can't add hid device: -71 [ 701.502038][T12139] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 701.542519][T12139] usb 2-1: USB disconnect, device number 21 [ 701.545697][ T5323] usb 1-1: Using ep0 maxpacket: 8 [ 701.572991][ T5323] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 701.590689][ T5323] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 701.612048][ T5323] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.630367][ T5323] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 701.639373][ T5323] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 701.650658][ T5323] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.666076][ T5323] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 701.673704][ T5323] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 701.685517][ T5323] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.718621][ T5323] usb 1-1: string descriptor 0 read error: -22 [ 701.727126][ T5323] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 701.738829][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.762035][ T5323] adutux 1-1:168.0: interrupt endpoints not found [ 702.002004][ T5323] usb 1-1: USB disconnect, device number 13 [ 702.097483][T12139] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 702.311906][T12139] usb 2-1: Using ep0 maxpacket: 8 [ 702.329122][T12139] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 702.339620][T12139] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.355513][T12139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 702.365281][T12139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.393685][T13221] netlink: 120 bytes leftover after parsing attributes in process `syz.2.987'. [ 702.398877][T12139] usbtmc 2-1:16.0: bulk endpoints not found [ 702.509381][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 702.529735][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 702.851217][T13228] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004 [ 702.896137][ T5286] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 703.070805][T13229] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.079643][T13229] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.088393][T13229] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.097169][T13229] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.138202][ T5286] usb 1-1: too many configurations: 139, using maximum allowed: 8 [ 703.147912][ T5286] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 703.165070][ T5286] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 703.194343][ T5286] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 703.207195][ T5286] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 703.219739][ T5286] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 703.238406][ T5286] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 703.259920][ T5286] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 703.280882][ T5286] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 703.308496][ T5286] usb 1-1: string descriptor 0 read error: -71 [ 703.331806][ T5286] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 703.352180][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.379682][ T5286] usb 1-1: can't set config #1, error -71 [ 703.398368][ T5286] usb 1-1: USB disconnect, device number 14 [ 703.935845][ T5286] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 704.149081][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 704.160336][ T5286] usb 3-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 704.170790][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.180290][ T5286] usb 3-1: Product: syz [ 704.199670][ T5286] usb 3-1: Manufacturer: syz [ 704.214326][ T5286] usb 3-1: SerialNumber: syz [ 704.228640][ T5286] usb 3-1: config 0 descriptor?? [ 704.235648][T12139] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 704.455507][T12139] usb 1-1: Using ep0 maxpacket: 8 [ 704.477847][T12139] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 704.496995][T12139] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.525528][T12139] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 704.535114][T12139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.568920][T12139] usbtmc 1-1:16.0: bulk endpoints not found [ 704.634052][ T5229] usb 2-1: USB disconnect, device number 22 [ 705.115570][ T5286] usb 3-1: reset high-speed USB device number 112 using dummy_hcd [ 705.195857][ T5229] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 705.319838][ T5286] usb 3-1: device firmware changed [ 705.338609][ T5286] usb 3-1: USB disconnect, device number 112 [ 705.405617][ T5229] usb 2-1: Using ep0 maxpacket: 8 [ 705.415020][ T5229] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 705.422630][ T5229] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 705.437117][ T5229] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 705.451997][ T5229] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 705.460999][ T5229] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 705.472847][ T5229] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 705.490006][ T5229] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 705.497543][ T5229] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 705.509355][ T5229] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 705.516117][ T5286] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 705.524767][ T5229] usb 2-1: string descriptor 0 read error: -22 [ 705.538376][ T5229] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 705.552973][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.568862][ T5229] adutux 2-1:168.0: interrupt endpoints not found [ 705.726666][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 705.740313][ T5286] usb 3-1: config 21 has an invalid interface number: 178 but max is 0 [ 705.748838][ T5286] usb 3-1: config 21 has no interface number 0 [ 705.755365][ T5286] usb 3-1: config 21 interface 178 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 705.773335][ T5286] usb 3-1: config 21 interface 178 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 705.773825][ T5229] usb 2-1: USB disconnect, device number 23 [ 705.793241][ T5286] usb 3-1: config 21 interface 178 altsetting 2 has an endpoint descriptor with address 0x5E, changing to 0xE [ 705.828615][ T5286] usb 3-1: config 21 interface 178 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 705.852962][ T5286] usb 3-1: config 21 interface 178 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 705.865950][ T5286] usb 3-1: config 21 interface 178 altsetting 2 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 705.897369][ T5286] usb 3-1: config 21 interface 178 altsetting 2 has an endpoint descriptor with address 0x99, changing to 0x89 [ 705.911351][ T5286] usb 3-1: config 21 interface 178 altsetting 2 endpoint 0x89 has invalid maxpacket 20697, setting to 1024 [ 705.930220][ T5286] usb 3-1: config 21 interface 178 altsetting 2 bulk endpoint 0x89 has invalid maxpacket 1024 [ 705.942402][ T5286] usb 3-1: config 21 interface 178 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 705.957313][ T5286] usb 3-1: config 21 interface 178 altsetting 2 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 705.971213][ T5286] usb 3-1: config 21 interface 178 has no altsetting 0 [ 706.003952][ T5286] usb 3-1: New USB device found, idVendor=257a, idProduct=1608, bcdDevice= 3.77 [ 706.013192][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.022334][ T5286] usb 3-1: Product: ї [ 706.029293][ T5286] usb 3-1: Manufacturer: ఄ [ 706.034223][ T5286] usb 3-1: SerialNumber: Р [ 706.069129][T13231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 706.087539][T13231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 706.327809][ T5286] option 3-1:21.178: GSM modem (1-port) converter detected [ 706.355608][ T5286] usb 3-1: USB disconnect, device number 113 [ 706.383862][ T5286] option 3-1:21.178: device disconnected [ 706.969057][ T5286] usb 1-1: USB disconnect, device number 15 [ 707.696293][T13255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 707.976119][ T5286] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 708.185600][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 708.192969][ T5286] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 708.201390][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 708.212680][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.227506][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.240143][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.254916][ T5286] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 708.262368][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 708.273705][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.285471][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.296609][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.311154][ T5286] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 708.319665][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 708.330957][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.344188][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.356613][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.371121][ T5286] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 708.380504][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.388624][ T944] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 708.396510][ T5286] usb 2-1: Product: syz [ 708.400699][ T5286] usb 2-1: Manufacturer: syz [ 708.405273][ T5286] usb 2-1: SerialNumber: syz [ 708.596892][T12139] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 708.615634][ T944] usb 3-1: Using ep0 maxpacket: 16 [ 708.623996][ T944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 708.642252][ T944] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 708.654453][ T944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 708.666592][ T944] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 708.676758][ T5286] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 708.690708][ T5286] usb 2-1: USB disconnect, device number 24 [ 708.703286][ T944] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 708.713747][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 708.722091][ T944] usb 3-1: SerialNumber: syz [ 708.734704][ T944] usb-storage 3-1:1.0: USB Mass Storage device detected [ 708.754993][ T944] usb-storage 3-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 708.764692][T12139] usb 1-1: device descriptor read/64, error -71 [ 708.772582][ T944] scsi host1: usb-storage 3-1:1.0 [ 708.999160][ T5323] usb 3-1: USB disconnect, device number 114 [ 709.045579][T12139] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 709.205650][T12139] usb 1-1: device descriptor read/64, error -71 [ 709.336135][T12139] usb usb1-port1: attempt power cycle [ 709.465580][ T5300] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 709.634472][T13275] random: crng reseeded on system resumption [ 709.689581][ T5300] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 709.703768][ T5300] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 709.725528][ T5300] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 709.746854][ T5300] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.755943][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.765549][ T5300] usb 2-1: Product: syz [ 709.769735][ T5300] usb 2-1: Manufacturer: syz [ 709.773001][T12139] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 709.774320][ T5300] usb 2-1: SerialNumber: syz [ 709.806224][T12139] usb 1-1: device descriptor read/8, error -71 [ 709.812761][T13270] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 710.041233][T13270] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 710.098373][T12139] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 710.137449][T12139] usb 1-1: device descriptor read/8, error -71 [ 710.257685][T12139] usb usb1-port1: unable to enumerate USB device [ 710.862949][T13270] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 711.079500][ T5300] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 711.091021][ T5300] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 711.284547][ T5300] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 711.317354][ T5300] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 711.367663][ T5300] usb 2-1: USB disconnect, device number 25 [ 711.380412][ T5300] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 712.475744][ T5300] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 712.667438][ T5300] usb 2-1: config 0 has no interfaces? [ 712.677200][ T5300] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 712.693876][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.723735][ T5300] usb 2-1: config 0 descriptor?? [ 713.048558][T13281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1006'. [ 713.079758][T13281] usb usb7: usbfs: process 13281 (syz.1.1006) did not claim interface 0 before use [ 713.120071][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.137437][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.188393][ T944] usb 2-1: USB disconnect, device number 26 [ 714.040326][T13295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.335755][ T5300] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 714.537620][ T5300] usb 2-1: Using ep0 maxpacket: 8 [ 714.561205][ T5300] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 714.568726][ T5317] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 714.576741][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.590098][ T5300] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.607987][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.628494][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.644461][ T5300] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 714.652145][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.664601][ T5300] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.679235][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.710296][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.730159][ T5300] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 714.755538][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.767357][ T5317] usb 3-1: Using ep0 maxpacket: 8 [ 714.774705][ T5300] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.788843][ T5317] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 714.800479][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.814642][ T5317] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.827971][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.839503][ T5317] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 714.852641][ T5317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.864225][ T5300] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 714.880586][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.891443][ T5300] usb 2-1: Product: syz [ 714.897411][ T5317] usbtmc 3-1:16.0: bulk endpoints not found [ 714.909371][ T5300] usb 2-1: Manufacturer: syz [ 714.914119][ T5300] usb 2-1: SerialNumber: syz [ 715.194970][ T5300] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 715.234521][ T5300] usb 2-1: USB disconnect, device number 27 [ 716.136387][ T5300] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 716.158967][T12139] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 716.335626][ T5300] usb 1-1: Using ep0 maxpacket: 32 [ 716.351719][ T5300] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 716.375964][ T5300] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 716.393177][ T5300] usb 1-1: config 1 interface 0 has no altsetting 0 [ 716.410802][T12139] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 716.416558][ T5300] usb 1-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 716.437232][ T5300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.456075][T12139] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 716.464886][ T5300] usb 1-1: Product: 뷣꾟ﵫ䱟湔㸐롿풵혛⍤㶵鉔 ꉇ줿뽣昗㽛⯈喏꼨ꊚ댭귬粞蝽浙뎍쀨ᩉꟽ䀃독퐻孋샿뗙錜喝쩶憲䊂懟尦訴㤤翣쭑ᥨꊺጮ荱䤻籄莇⟦鄐騈ᕲ頜᭑먔诨瑝䘈潤ᇻ [ 716.509090][ T5300] usb 1-1: Manufacturer: ࠒ [ 716.511860][T12139] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 716.513739][ T5300] usb 1-1: SerialNumber: syz [ 716.556194][T12139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.586467][T13313] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 716.620919][T12139] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 716.955761][ T5300] usbhid 1-1:1.0: can't add hid device: -71 [ 716.995795][ T5300] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 717.020081][ T5300] usb 1-1: USB disconnect, device number 20 [ 717.279377][ T9] usb 3-1: USB disconnect, device number 115 [ 717.707294][T12139] usb 2-1: USB disconnect, device number 28 [ 717.785557][ T9] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 717.845607][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 717.969192][ T9] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 717.982153][ T9] usb 3-1: config 0 has no interface number 0 [ 717.988687][ T9] usb 3-1: config 0 interface 191 has no altsetting 0 [ 717.997524][ T9] usb 3-1: New USB device found, idVendor=0f4e, idProduct=0200, bcdDevice=7b.88 [ 718.006658][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.022496][ T9] usb 3-1: config 0 descriptor?? [ 718.025779][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 718.043657][ T25] usb 1-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 718.053436][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.063312][ T25] usb 1-1: Product: syz [ 718.067900][ T25] usb 1-1: Manufacturer: syz [ 718.072508][ T25] usb 1-1: SerialNumber: syz [ 718.083376][ T25] usb 1-1: config 0 descriptor?? [ 718.393423][T13324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1019'. [ 718.471063][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 718.480330][T13325] tipc: Started in network mode [ 718.485219][T13325] tipc: Node identity 1, cluster identity 4711 [ 718.494073][T13325] tipc: Node number set to 1 [ 718.975819][ T25] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 719.385646][T13322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.398672][T13322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.409179][ T5229] usb 1-1: USB disconnect, device number 21 [ 719.604316][T13331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1020'. [ 720.087223][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1022'. [ 720.097247][T13335] veth1_macvtap: left promiscuous mode [ 720.110463][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1022'. [ 720.318334][T13339] xt_cgroup: invalid path, errno=-2 [ 720.417073][T12139] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 720.448819][ T5286] usb 3-1: USB disconnect, device number 116 [ 720.629983][T12139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.648493][T12139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.658378][T12139] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.679591][T12139] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 720.691607][T12139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.709928][T12139] usb 1-1: config 0 descriptor?? [ 720.875643][ T5286] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 721.069696][ T5286] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 721.079095][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.108289][ T5286] usb 3-1: config 0 descriptor?? [ 721.124573][T12139] hid-alps 0003:044E:120B.0012: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 721.138738][ T5286] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 721.847359][ T5229] usb 1-1: USB disconnect, device number 22 [ 722.061468][T13362] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 722.532848][ T5229] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 722.768735][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 722.780547][ T5229] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 722.794807][ T5229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.808588][ T5229] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 722.817749][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.835235][ T5229] usb 2-1: config 0 descriptor?? [ 722.870948][ T5229] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 722.878251][ T5229] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 723.010378][ T5286] gspca_stv06xx: Photobit pb0100 sensor detected [ 723.109140][ T5317] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 723.311608][ T5286] input: STV06xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 723.333198][ T5317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.371247][ T5317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.386403][ T5317] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 723.398965][ T5317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.414103][ T5286] usb 3-1: USB disconnect, device number 117 [ 723.416532][ T5317] usb 1-1: config 0 descriptor?? [ 724.151519][T10887] Bluetooth: hci0: command 0x0406 tx timeout [ 724.245660][ T5300] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 724.445812][ T5300] usb 3-1: Using ep0 maxpacket: 8 [ 724.457322][ T5300] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 724.468537][ T5300] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.482868][ T5300] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 724.491995][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.510757][ T5300] usbtmc 3-1:16.0: bulk endpoints not found [ 725.243294][ T9] usb 2-1: USB disconnect, device number 29 [ 725.361141][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.481760][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.583566][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.672961][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.794333][ T5317] usbhid 1-1:0.0: can't add hid device: -71 [ 725.845511][ T5317] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 725.902650][ T5317] usb 1-1: USB disconnect, device number 23 [ 726.043634][ T78] bridge_slave_1: left allmulticast mode [ 726.085626][ T78] bridge_slave_1: left promiscuous mode [ 726.120080][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.194070][ T78] bridge_slave_0: left allmulticast mode [ 726.225379][ T78] bridge_slave_0: left promiscuous mode [ 726.251126][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.443928][T10887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 726.468707][T10887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 726.478682][T10887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 726.487940][T10887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 726.495769][T10887] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 726.503518][T10887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 726.811944][T13399] FAULT_INJECTION: forcing a failure. [ 726.811944][T13399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.846727][T13399] CPU: 1 UID: 0 PID: 13399 Comm: syz.1.1037 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 726.857552][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 726.867688][T13399] Call Trace: [ 726.870978][T13399] [ 726.873897][T13399] dump_stack_lvl+0x241/0x360 [ 726.878574][T13399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.883776][T13399] ? __pfx__printk+0x10/0x10 [ 726.888390][T13399] ? __pfx_lock_release+0x10/0x10 [ 726.893437][T13399] should_fail_ex+0x3b0/0x4e0 [ 726.898111][T13399] _copy_from_iter+0x1f6/0x1960 [ 726.902951][T13399] ? __virt_addr_valid+0x183/0x530 [ 726.908050][T13399] ? __pfx_lock_release+0x10/0x10 [ 726.913080][T13399] ? __alloc_skb+0x2d5/0x440 [ 726.917665][T13399] ? __pfx__copy_from_iter+0x10/0x10 [ 726.922944][T13399] ? __virt_addr_valid+0x183/0x530 [ 726.928044][T13399] ? __virt_addr_valid+0x183/0x530 [ 726.933139][T13399] ? __virt_addr_valid+0x45f/0x530 [ 726.938235][T13399] ? __check_object_size+0x49c/0x900 [ 726.943510][T13399] tipc_msg_build+0x488/0x1070 [ 726.948267][T13399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 726.954583][T13399] ? __pfx_tipc_msg_build+0x10/0x10 [ 726.959789][T13399] ? tipc_group_bc_cong+0x1d0/0x290 [ 726.964978][T13399] ? remove_wait_queue+0x33/0x130 [ 726.969990][T13399] tipc_send_group_bcast+0x889/0xbd0 [ 726.975268][T13399] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 726.981067][T13399] ? __pfx_woken_wake_function+0x10/0x10 [ 726.986687][T13399] ? process_measurement+0x793/0x1fb0 [ 726.992053][T13399] __tipc_sendmsg+0x363/0x35f0 [ 726.996809][T13399] ? up_write+0x1a9/0x590 [ 727.001123][T13399] ? __pfx_validate_chain+0x10/0x10 [ 727.006303][T13399] ? ima_get_action+0x75/0xb0 [ 727.010990][T13399] ? __pfx___tipc_sendmsg+0x10/0x10 [ 727.016179][T13399] ? process_measurement+0x1af3/0x1fb0 [ 727.021621][T13399] ? __pfx_validate_chain+0x10/0x10 [ 727.026814][T13399] ? aa_label_sk_perm+0x4f0/0x6d0 [ 727.031834][T13399] ? mark_lock+0x9a/0x350 [ 727.036166][T13399] ? __lock_acquire+0x137a/0x2040 [ 727.041184][T13399] ? mark_lock+0x9a/0x350 [ 727.045509][T13399] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 727.051476][T13399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 727.057793][T13399] ? __local_bh_enable_ip+0x168/0x200 [ 727.063146][T13399] ? tipc_sendmsg+0x47/0x70 [ 727.067634][T13399] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 727.073335][T13399] ? do_raw_spin_unlock+0x13c/0x8b0 [ 727.078521][T13399] ? __pfx_tipc_sendmsg+0x10/0x10 [ 727.083529][T13399] tipc_sendmsg+0x55/0x70 [ 727.087842][T13399] __sock_sendmsg+0x221/0x270 [ 727.092511][T13399] ____sys_sendmsg+0x525/0x7d0 [ 727.097270][T13399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.102567][T13399] __sys_sendmmsg+0x3b2/0x740 [ 727.107251][T13399] ? __pfx___sys_sendmmsg+0x10/0x10 [ 727.112468][T13399] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 727.118358][T13399] ? ksys_write+0x23e/0x2c0 [ 727.122847][T13399] ? __pfx_lock_release+0x10/0x10 [ 727.127860][T13399] ? vfs_write+0x7c4/0xc90 [ 727.132262][T13399] ? __mutex_unlock_slowpath+0x21d/0x750 [ 727.137881][T13399] ? __pfx_vfs_write+0x10/0x10 [ 727.142641][T13399] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 727.148634][T13399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 727.154957][T13399] ? do_syscall_64+0x100/0x230 [ 727.159706][T13399] __x64_sys_sendmmsg+0xa0/0xb0 [ 727.164543][T13399] do_syscall_64+0xf3/0x230 [ 727.169028][T13399] ? clear_bhb_loop+0x35/0x90 [ 727.173691][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.179594][T13399] RIP: 0033:0x7ff85b17def9 [ 727.184006][T13399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.203692][T13399] RSP: 002b:00007ff85bf6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 727.212109][T13399] RAX: ffffffffffffffda RBX: 00007ff85b336058 RCX: 00007ff85b17def9 [ 727.220067][T13399] RDX: 00000000000101d0 RSI: 00000000200030c0 RDI: 0000000000000003 [ 727.228038][T13399] RBP: 00007ff85bf6c090 R08: 0000000000000000 R09: 0000000000000000 [ 727.236036][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.244019][T13399] R13: 0000000000000000 R14: 00007ff85b336058 R15: 00007ff85b45fa28 [ 727.251991][T13399] [ 727.355300][ T5317] usb 3-1: USB disconnect, device number 118 [ 727.805610][ T5317] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 727.805648][ T5286] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 727.835075][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.850721][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.867861][ T78] bond0 (unregistering): Released all slaves [ 728.000271][ T5317] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 728.015576][ T5286] usb 1-1: Using ep0 maxpacket: 16 [ 728.023149][ T5286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 728.039331][ T5286] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 728.052107][ T5317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 728.071306][ T5317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 728.084653][ T5317] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 728.087387][ T5286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 728.104514][ T5317] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.131849][ T5286] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 728.154956][ T5286] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 728.164929][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 728.173146][ T5286] usb 1-1: SerialNumber: syz [ 728.201275][ T5286] usb-storage 1-1:1.0: USB Mass Storage device detected [ 728.210804][ T5317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.239456][ T5286] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 728.264362][ T5317] usb 3-1: config 0 descriptor?? [ 728.324095][ T5286] scsi host1: usb-storage 1-1:1.0 [ 728.546490][T10887] Bluetooth: hci3: command tx timeout [ 728.652482][ T78] hsr_slave_0: left promiscuous mode [ 728.670114][ T78] hsr_slave_1: left promiscuous mode [ 728.677897][T12139] usb 1-1: USB disconnect, device number 24 [ 728.688525][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.709368][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.732289][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.741691][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.786097][ T5317] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 728.814297][ T5317] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 728.852494][ T5317] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 728.860566][ T78] veth1_macvtap: left promiscuous mode [ 728.878784][ T78] veth0_macvtap: left promiscuous mode [ 728.913638][ T78] veth1_vlan: left promiscuous mode [ 728.947442][ T78] veth0_vlan: left promiscuous mode [ 729.082014][ T5317] usb 3-1: USB disconnect, device number 119 [ 730.062323][ T78] team0 (unregistering): Port device team_slave_1 removed [ 730.179586][ T78] team0 (unregistering): Port device team_slave_0 removed [ 730.301367][ T25] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 730.533528][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 730.545811][ T5300] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 730.558734][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 730.570319][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.585211][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 730.603288][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.626294][T10887] Bluetooth: hci3: command tx timeout [ 730.638926][ T25] usb 3-1: config 0 descriptor?? [ 730.681313][ T25] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 730.690518][ T25] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 730.761923][ T5300] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 730.795336][ T5300] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 730.807002][ T5300] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 730.834600][ T5300] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 730.843872][ T5300] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 730.852396][ T5300] usb 1-1: Manufacturer: syz [ 730.864644][ T5300] usb 1-1: SerialNumber: syz [ 731.259835][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.319976][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.396945][T13396] chnl_net:caif_netlink_parms(): no params data found [ 731.478275][ T5300] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 731.530210][ T5300] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input43 [ 731.651857][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 731.658894][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 731.665875][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 731.672796][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 731.679713][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 731.686624][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 731.693569][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 731.700484][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 731.707234][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 731.720316][ T5300] usb 1-1: USB disconnect, device number 25 [ 731.853652][T13396] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.883979][T13396] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.904415][T13396] bridge_slave_0: entered allmulticast mode [ 731.936627][T13396] bridge_slave_0: entered promiscuous mode [ 731.958872][T13396] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.975185][T13396] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.000199][T13396] bridge_slave_1: entered allmulticast mode [ 732.013464][T13396] bridge_slave_1: entered promiscuous mode [ 732.091167][T13396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.140610][T13396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.242230][T13396] team0: Port device team_slave_0 added [ 732.364235][T13396] team0: Port device team_slave_1 added [ 732.482813][T13396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.491618][T13396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.521358][T13396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.563765][T13396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.599685][T13396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.644424][T13396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.715712][T10887] Bluetooth: hci3: command tx timeout [ 732.815609][ T5229] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 732.844367][T13396] hsr_slave_0: entered promiscuous mode [ 732.871272][T13396] hsr_slave_1: entered promiscuous mode [ 732.878328][T13396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.895862][T13396] Cannot create hsr debugfs directory [ 732.943526][ T5300] usb 3-1: USB disconnect, device number 120 [ 733.017364][ T5229] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 733.042200][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.066596][ T5229] usb 2-1: config 0 descriptor?? [ 733.292120][T13475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 733.413756][T13482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.487669][T13482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.607020][T12139] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 733.811625][T12139] usb 3-1: Using ep0 maxpacket: 8 [ 733.845995][T12139] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 733.868523][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 733.910778][T12139] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.940104][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.985386][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.026997][T12139] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 734.044636][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.116689][T12139] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.175534][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.232260][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.267249][ T5229] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 734.275911][T12139] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 734.284751][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.288174][T13396] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 734.303538][ T5229] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 734.313391][T12139] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.313425][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.313452][T12139] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.316068][T12139] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 734.362606][T13396] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 734.371519][ T5229] [drm:udl_init] *ERROR* Selecting channel failed [ 734.377283][T12139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.389452][T13396] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 734.399295][T12139] usb 3-1: Product: syz [ 734.404868][T12139] usb 3-1: Manufacturer: syz [ 734.413616][T12139] usb 3-1: SerialNumber: syz [ 734.437080][T13396] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 734.453701][ T5229] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 734.475548][ T5229] [drm] Initialized udl on minor 2 [ 734.495194][ T5229] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 734.531798][ T5229] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 734.562976][ T5300] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 734.602895][ T5229] usb 2-1: USB disconnect, device number 30 [ 734.616508][ T5300] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 734.665016][T13396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.785698][T10887] Bluetooth: hci3: command tx timeout [ 734.822546][T13396] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.848256][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.855396][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.863733][T12139] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 734.894145][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.901382][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.916056][T12139] usb 3-1: USB disconnect, device number 121 [ 735.164063][T13396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.314472][T13396] veth0_vlan: entered promiscuous mode [ 735.356266][T13396] veth1_vlan: entered promiscuous mode [ 735.429512][T13396] veth0_macvtap: entered promiscuous mode [ 735.444126][T13396] veth1_macvtap: entered promiscuous mode [ 735.480915][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.502976][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.513850][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.524588][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.534460][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.547851][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.572867][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.583969][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.602248][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.614938][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.625164][ T5317] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 735.637019][T13396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.649507][T13526] netlink: 'syz.1.1054': attribute type 3 has an invalid length. [ 735.659497][T13526] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1054'. [ 735.681129][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.706842][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.717907][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.745664][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.765468][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.781584][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.797006][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.816038][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.836148][ T5317] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 735.844184][ T5317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.868367][T13396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.886508][ T5317] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 735.907626][T13396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.917709][ T5317] usb 1-1: config 1 has no interface number 1 [ 735.937235][T13396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.948743][ T5317] usb 1-1: too many endpoints for config 1 interface 3 altsetting 3: 239, using maximum allowed: 30 [ 735.994777][T13396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.007563][ T5317] usb 1-1: config 1 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 736.025708][T13396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.034568][T13396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.043699][ T5317] usb 1-1: config 1 interface 3 has no altsetting 0 [ 736.063124][T13396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.077180][ T5317] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.105707][ T5317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.163515][T13541] ip6_vti0: entered allmulticast mode [ 736.169076][ T5317] usb 1-1: Product: 㚥럤뺛 [ 736.181645][ T5317] usb 1-1: Manufacturer: 鐒霮垡烵욍⯚鯦祉繦縂쫤ὗ빴撧暳撵崎这䰑븘膭쵱毆幤褽煘俨ꉐ㲂웄恑혊뽕呀㡃昔횺䏽皴呟᪟ᆽ놧檟砒뛟옐疹䋡湑훃✎崛␪⦭뗔坨Ἄ૯썳﫥ꝶ颚玃崭᭸ [ 736.211433][ T5317] usb 1-1: SerialNumber: ж [ 736.323863][T13536] pim6reg: entered allmulticast mode [ 736.455712][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.463569][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.535612][ T5229] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 736.555329][T13548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.633957][T13548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.740206][ T2537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.780336][ T2537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.796038][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 736.828595][ T5229] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 736.853476][ T5229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.881404][ T5229] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 736.902750][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.012967][ T5229] usb 2-1: config 0 descriptor?? [ 737.081025][ T5229] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 737.124713][ T5229] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 737.244868][ T29] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.483313][ T29] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.672280][ T29] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.748963][T13558] input: syz1 as /devices/virtual/input/input44 [ 737.871265][ T29] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.886166][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 737.898845][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 737.911695][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 737.922746][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 737.936425][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 737.950419][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 738.461868][ T5317] usb 1-1: 0:2 : does not exist [ 738.556392][ T5317] usb 1-1: USB disconnect, device number 26 [ 738.604565][ T29] bridge_slave_1: left allmulticast mode [ 738.614964][T13581] kvm: pic: non byte write [ 738.624984][ T29] bridge_slave_1: left promiscuous mode [ 738.653199][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.691445][ T5365] udevd[5365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.716834][ T29] bridge_slave_0: left allmulticast mode [ 738.722954][ T29] bridge_slave_0: left promiscuous mode [ 738.741297][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.761429][T13587] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 739.140355][ T944] usb 2-1: USB disconnect, device number 31 [ 739.665809][ T944] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 739.879524][ T944] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 739.895665][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.914616][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.945037][ T944] usb 2-1: config 0 descriptor?? [ 740.001120][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.031716][ T29] bond0 (unregistering): Released all slaves [ 740.065991][T10887] Bluetooth: hci4: command tx timeout [ 740.142596][T13584] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 740.199646][T13584] team0: Port device netdevsim0 added [ 740.280893][T13587] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 740.405657][T13587] team0: Port device netdevsim0 removed [ 740.441800][T13587] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 740.868601][ T29] hsr_slave_0: left promiscuous mode [ 740.939126][ T29] hsr_slave_1: left promiscuous mode [ 740.967497][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.974940][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.998377][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.019565][ T944] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 741.029888][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.095115][ T29] veth1_macvtap: left promiscuous mode [ 741.103717][ T29] veth0_macvtap: left promiscuous mode [ 741.120957][ T29] veth1_vlan: left promiscuous mode [ 741.130118][ T29] veth0_vlan: left promiscuous mode [ 741.291365][ T5323] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 741.498423][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.509675][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.515597][ T944] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 741.520117][ T5323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 741.543552][ T5323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 741.553696][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.574676][ T5323] usb 3-1: config 0 descriptor?? [ 741.750471][ T944] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 741.758804][ T944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.771022][ T944] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 741.780112][ T944] usb 1-1: config 1 has no interface number 1 [ 741.786286][ T944] usb 1-1: too many endpoints for config 1 interface 3 altsetting 3: 239, using maximum allowed: 30 [ 741.804503][ T944] usb 1-1: config 1 interface 3 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 741.817858][ T944] usb 1-1: config 1 interface 3 has no altsetting 0 [ 741.827788][ T944] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.837970][ T944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.846079][ T944] usb 1-1: Product: 㚥럤뺛 [ 741.851152][ T944] usb 1-1: Manufacturer: 鐒霮垡烵욍⯚鯦祉繦縂쫤ὗ빴撧暳撵崎这䰑븘膭쵱毆幤褽煘俨ꉐ㲂웄恑혊뽕呀㡃昔횺䏽皴呟᪟ᆽ놧檟砒뛟옐疹䋡湑훃✎崛␪⦭뗔坨Ἄ૯썳﫥ꝶ颚玃崭᭸ [ 741.874401][ T944] usb 1-1: SerialNumber: ж [ 742.016898][ T5323] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x4 [ 742.033232][ T29] team0 (unregistering): Port device team_slave_1 removed [ 742.034738][ T5323] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 742.067053][ T5323] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 742.074503][ T5323] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 742.083304][ T5323] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 742.102550][ T5323] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 742.143991][ T29] team0 (unregistering): Port device team_slave_0 removed [ 742.156358][T10887] Bluetooth: hci4: command tx timeout [ 742.173304][T13657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.184015][T13657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.307906][ T5323] usb 2-1: USB disconnect, device number 32 [ 742.529717][T13638] usb 3-1: string descriptor 0 read error: -71 [ 742.529968][ T9] usb 3-1: USB disconnect, device number 122 [ 742.958434][ T5323] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 743.166148][ T5323] usb 2-1: Using ep0 maxpacket: 8 [ 743.203349][ T5323] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 743.230235][ T5323] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.282047][ T5323] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 743.327807][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.394131][ T5323] usbtmc 2-1:16.0: bulk endpoints not found [ 743.461413][T13569] chnl_net:caif_netlink_parms(): no params data found [ 743.838535][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.846837][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.855059][T13569] bridge_slave_0: entered allmulticast mode [ 743.863424][T13569] bridge_slave_0: entered promiscuous mode [ 743.875133][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.884793][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.903744][T13569] bridge_slave_1: entered allmulticast mode [ 743.985247][T13569] bridge_slave_1: entered promiscuous mode [ 744.124017][T13681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'. [ 744.132196][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.178990][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.226266][T10887] Bluetooth: hci4: command tx timeout [ 744.354869][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 744.375141][ T944] usb 1-1: 0:2 : does not exist [ 744.434496][T13569] team0: Port device team_slave_0 added [ 744.446215][ T944] usb 1-1: USB disconnect, device number 27 [ 744.480450][T13569] team0: Port device team_slave_1 added [ 744.619369][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.641587][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.678238][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.757368][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.783744][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.861093][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.018836][T13569] hsr_slave_0: entered promiscuous mode [ 745.034085][T13569] hsr_slave_1: entered promiscuous mode [ 745.041083][T13569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.059170][T13569] Cannot create hsr debugfs directory [ 745.455960][T12139] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 745.477747][ T5323] usb 2-1: USB disconnect, device number 33 [ 745.670718][T12139] usb 3-1: Using ep0 maxpacket: 8 [ 745.688598][T12139] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 745.711497][T12139] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 745.761618][T12139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 745.901774][T12139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.926955][T12139] usbtmc 3-1:16.0: bulk endpoints not found [ 746.021454][T13716] xt_l2tp: wrong L2TP version: 0 [ 746.047788][T13716] unsupported nlmsg_type 40 [ 746.305924][T10887] Bluetooth: hci4: command tx timeout [ 746.323774][T13569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 746.337362][T13569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 746.371898][T13569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.404422][T13569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 746.773058][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.867178][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.899282][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.906500][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.976811][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.984077][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.033472][T13737] FAULT_INJECTION: forcing a failure. [ 747.033472][T13737] name failslab, interval 1, probability 0, space 0, times 0 [ 747.085529][T13737] CPU: 1 UID: 0 PID: 13737 Comm: syz.1.1074 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 747.096347][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 747.106415][T13737] Call Trace: [ 747.109723][T13737] [ 747.112648][T13737] dump_stack_lvl+0x241/0x360 [ 747.117333][T13737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.122531][T13737] ? __pfx__printk+0x10/0x10 [ 747.127119][T13737] ? ref_tracker_alloc+0x332/0x490 [ 747.132249][T13737] should_fail_ex+0x3b0/0x4e0 [ 747.136960][T13737] ? skb_clone+0x20c/0x390 [ 747.141386][T13737] should_failslab+0xac/0x100 [ 747.146071][T13737] ? skb_clone+0x20c/0x390 [ 747.150491][T13737] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 747.155865][T13737] skb_clone+0x20c/0x390 [ 747.160109][T13737] __netlink_deliver_tap+0x3cc/0x7c0 [ 747.165401][T13737] ? netlink_deliver_tap+0x2e/0x1b0 [ 747.170605][T13737] netlink_deliver_tap+0x19d/0x1b0 [ 747.175712][T13737] netlink_unicast+0x7c4/0x990 [ 747.180481][T13737] ? __pfx_netlink_unicast+0x10/0x10 [ 747.185760][T13737] ? __virt_addr_valid+0x183/0x530 [ 747.190865][T13737] ? __check_object_size+0x49c/0x900 [ 747.196162][T13737] ? bpf_lsm_netlink_send+0x9/0x10 [ 747.201298][T13737] netlink_sendmsg+0x8e4/0xcb0 [ 747.206089][T13737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.211378][T13737] ? __import_iovec+0x536/0x820 [ 747.216228][T13737] ? aa_sock_msg_perm+0x91/0x160 [ 747.221162][T13737] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 747.226445][T13737] ? security_socket_sendmsg+0x87/0xb0 [ 747.231933][T13737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.237214][T13737] __sock_sendmsg+0x221/0x270 [ 747.241901][T13737] ____sys_sendmsg+0x525/0x7d0 [ 747.246669][T13737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.251965][T13737] __sys_sendmsg+0x2b0/0x3a0 [ 747.256560][T13737] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.261665][T13737] ? vfs_write+0x7c4/0xc90 [ 747.266112][T13737] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.272440][T13737] ? do_syscall_64+0x100/0x230 [ 747.277199][T13737] ? do_syscall_64+0xb6/0x230 [ 747.281872][T13737] do_syscall_64+0xf3/0x230 [ 747.286369][T13737] ? clear_bhb_loop+0x35/0x90 [ 747.291046][T13737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.296936][T13737] RIP: 0033:0x7ff85b17def9 [ 747.301346][T13737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.320947][T13737] RSP: 002b:00007ff85bf8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.329356][T13737] RAX: ffffffffffffffda RBX: 00007ff85b335f80 RCX: 00007ff85b17def9 [ 747.337325][T13737] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 747.345289][T13737] RBP: 00007ff85bf8d090 R08: 0000000000000000 R09: 0000000000000000 [ 747.353251][T13737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.361237][T13737] R13: 0000000000000000 R14: 00007ff85b335f80 R15: 00007ff85b45fa28 [ 747.369217][T13737] [ 747.651302][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.669336][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.677039][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.820918][T13569] veth0_vlan: entered promiscuous mode [ 747.859738][T13569] veth1_vlan: entered promiscuous mode [ 747.944073][T13569] veth0_macvtap: entered promiscuous mode [ 747.955631][T12139] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 747.969146][T13569] veth1_macvtap: entered promiscuous mode [ 748.021625][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.038180][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.057348][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.073414][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.090728][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.125661][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.147448][T12139] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 748.160617][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.171951][T12139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.182298][ T9] usb 3-1: USB disconnect, device number 123 [ 748.197293][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.213662][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.223016][T12139] usb 2-1: config 0 descriptor?? [ 748.227583][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.261482][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.323839][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.341881][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.345780][ T944] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 748.353117][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.377954][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.401003][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.415262][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.445076][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.471132][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.495158][T13771] xt_nfacct: accounting object `syz1' does not exists [ 748.503919][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.516692][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.529590][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.544796][T13569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.573100][T13569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.575559][ T944] usb 1-1: Using ep0 maxpacket: 32 [ 748.582775][T13569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.605488][T13569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.618316][ T944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.644925][ T944] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 748.654748][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.695484][ T944] usb 1-1: config 0 descriptor?? [ 748.723725][ T944] usb 1-1: bad CDC descriptors [ 748.789843][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.811212][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.849577][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.861944][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.252968][T12139] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 749.345670][ T5229] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 749.514039][ T5300] usb 1-1: USB disconnect, device number 28 [ 749.535793][ T5229] usb 3-1: Using ep0 maxpacket: 8 [ 749.553095][ T5229] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 749.577167][ T5229] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.603031][ T5229] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 749.623008][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.640412][ T5229] usbtmc 3-1:16.0: bulk endpoints not found [ 749.682561][T13781] FAULT_INJECTION: forcing a failure. [ 749.682561][T13781] name failslab, interval 1, probability 0, space 0, times 0 [ 749.700872][T13781] CPU: 1 UID: 0 PID: 13781 Comm: syz.0.1080 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 749.711680][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 749.721759][T13781] Call Trace: [ 749.725043][T13781] [ 749.727996][T13781] dump_stack_lvl+0x241/0x360 [ 749.732665][T13781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.737851][T13781] ? __pfx__printk+0x10/0x10 [ 749.742426][T13781] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 749.748424][T13781] ? __pfx___might_resched+0x10/0x10 [ 749.753715][T13781] should_fail_ex+0x3b0/0x4e0 [ 749.758381][T13781] should_failslab+0xac/0x100 [ 749.763048][T13781] ? __alloc_skb+0x1c3/0x440 [ 749.767632][T13781] kmem_cache_alloc_node_noprof+0x71/0x320 [ 749.773441][T13781] __alloc_skb+0x1c3/0x440 [ 749.777845][T13781] ? __pfx___might_resched+0x10/0x10 [ 749.783140][T13781] ? __pfx___alloc_skb+0x10/0x10 [ 749.788069][T13781] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 749.794120][T13781] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 749.800355][T13781] netlink_sendmsg+0x638/0xcb0 [ 749.805112][T13781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.810386][T13781] ? __import_iovec+0x536/0x820 [ 749.815222][T13781] ? aa_sock_msg_perm+0x91/0x160 [ 749.820147][T13781] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 749.825434][T13781] ? security_socket_sendmsg+0x87/0xb0 [ 749.830903][T13781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.836176][T13781] __sock_sendmsg+0x221/0x270 [ 749.840848][T13781] ____sys_sendmsg+0x525/0x7d0 [ 749.845603][T13781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 749.850883][T13781] __sys_sendmsg+0x2b0/0x3a0 [ 749.855470][T13781] ? __pfx___sys_sendmsg+0x10/0x10 [ 749.860569][T13781] ? vfs_write+0x7c4/0xc90 [ 749.865013][T13781] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.871332][T13781] ? do_syscall_64+0x100/0x230 [ 749.876083][T13781] ? do_syscall_64+0xb6/0x230 [ 749.880923][T13781] do_syscall_64+0xf3/0x230 [ 749.885424][T13781] ? clear_bhb_loop+0x35/0x90 [ 749.890105][T13781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.895984][T13781] RIP: 0033:0x7ff115b7def9 [ 749.900401][T13781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.920011][T13781] RSP: 002b:00007ff1168de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.928434][T13781] RAX: ffffffffffffffda RBX: 00007ff115d35f80 RCX: 00007ff115b7def9 [ 749.936424][T13781] RDX: 0000000004004008 RSI: 0000000020000000 RDI: 0000000000000003 [ 749.944389][T13781] RBP: 00007ff1168de090 R08: 0000000000000000 R09: 0000000000000000 [ 749.952350][T13781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.960323][T13781] R13: 0000000000000000 R14: 00007ff115d35f80 R15: 00007ff115e5fa28 [ 749.968309][T13781] [ 750.106400][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 750.684265][ T5300] usb 2-1: USB disconnect, device number 34 [ 751.365559][ T944] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 751.475532][T12139] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 751.555506][ T944] usb 2-1: Using ep0 maxpacket: 16 [ 751.574668][ T944] usb 2-1: config index 0 descriptor too short (expected 65535, got 159) [ 751.583316][ T944] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 751.593506][ T944] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 751.606205][ T944] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 751.637971][ T944] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 751.647568][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.655749][ T944] usb 2-1: Product: syz [ 751.660138][ T944] usb 2-1: Manufacturer: syz [ 751.674454][T12139] usb 1-1: Using ep0 maxpacket: 8 [ 751.684044][ T944] usb 2-1: SerialNumber: syz [ 751.693797][T12139] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 751.714067][T12139] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 751.740942][T12139] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 751.766335][T12139] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 751.775903][T12139] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 751.788075][T12139] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 751.814772][T12139] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 751.823029][T12139] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 751.840031][T12139] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 751.881372][T12139] usb 1-1: string descriptor 0 read error: -22 [ 751.894114][T12139] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 751.903418][T12139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.949887][T12139] adutux 1-1:168.0: interrupt endpoints not found [ 751.978863][ T944] usb 2-1: USB disconnect, device number 35 [ 752.048307][ T5300] usb 3-1: USB disconnect, device number 124 [ 752.171233][ T5317] usb 1-1: USB disconnect, device number 29 [ 752.608362][T13807] capability: warning: `syz.1.1087' uses 32-bit capabilities (legacy support in use) [ 752.905723][ T944] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 753.312877][T13814] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1087'. [ 753.333075][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 753.692141][ T944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 753.711693][ T944] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 753.732410][ T944] usb 2-1: can't read configurations, error -71 [ 753.955543][ T5323] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 754.073398][T12139] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 754.145751][ T5323] usb 3-1: Using ep0 maxpacket: 32 [ 754.154357][ T5323] usb 3-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 754.165445][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.173451][ T5323] usb 3-1: Product: syz [ 754.177810][ T5323] usb 3-1: Manufacturer: syz [ 754.182425][ T5323] usb 3-1: SerialNumber: syz [ 754.189476][ T5323] usb 3-1: config 0 descriptor?? [ 754.258373][T12139] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 754.270289][T12139] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 754.281461][T12139] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 754.293826][T12139] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 754.304822][T12139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.316598][T13820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 754.627846][ T944] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 754.815511][ T944] usb 2-1: Using ep0 maxpacket: 32 [ 754.824429][ T944] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 754.833799][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.843069][ T944] usb 2-1: Product: syz [ 754.849504][ T944] usb 2-1: Manufacturer: syz [ 754.854101][ T944] usb 2-1: SerialNumber: syz [ 754.860718][ T944] usb 2-1: config 0 descriptor?? [ 755.065588][ T5323] usb 3-1: reset high-speed USB device number 125 using dummy_hcd [ 755.470460][T13818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.479347][T13818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.492901][ T5323] usb 3-1: USB disconnect, device number 125 [ 755.745896][ T944] usb 2-1: reset high-speed USB device number 37 using dummy_hcd [ 756.182453][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.206903][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.230665][ T5317] usb 2-1: USB disconnect, device number 37 [ 756.365592][ T944] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 756.565510][ T944] usb 3-1: Using ep0 maxpacket: 8 [ 756.579674][ T944] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 756.600089][ T944] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.613620][ T944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 756.622935][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.668165][ T944] usbtmc 3-1:16.0: bulk endpoints not found [ 757.064499][T12139] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 757.083273][T12139] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input45 [ 757.107370][ T5323] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 757.152388][T12139] usb 1-1: USB disconnect, device number 30 [ 757.152440][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 757.305706][ T5323] usb 2-1: Using ep0 maxpacket: 16 [ 757.318150][ T5323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 757.335489][ T5323] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 757.359612][ T5323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 757.372866][ T5323] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 757.384016][ T5323] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 757.393241][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 757.404620][ T5323] usb 2-1: SerialNumber: syz [ 757.417536][ T5323] usb-storage 2-1:1.0: USB Mass Storage device detected [ 757.430353][ T5323] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 757.438258][ T5323] scsi host1: usb-storage 2-1:1.0 [ 757.752697][T12139] usb 2-1: USB disconnect, device number 38 [ 758.075654][ T5323] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 758.257898][ T5323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 758.268042][ T5323] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 758.278098][ T5323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 758.288812][ T5323] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 758.308992][ T5323] usb 1-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 758.318665][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.329003][ T5323] usb 1-1: Product: syz [ 758.333292][ T5323] usb 1-1: Manufacturer: syz [ 758.338409][ T5323] usb 1-1: SerialNumber: syz [ 758.352899][ T5323] usb 1-1: config 0 descriptor?? [ 758.370107][ T5323] ti_usb_3410_5052 1-1:0.0: TI USB 3410 1 port adapter converter detected [ 758.386692][ T5323] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 758.587094][ T5323] usb 1-1: USB disconnect, device number 31 [ 758.609220][ T5323] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 758.633011][ T5323] ti_usb_3410_5052 1-1:0.0: device disconnected [ 759.073377][T12139] usb 3-1: USB disconnect, device number 126 [ 759.182564][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 759.575533][T12139] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 759.765512][T12139] usb 3-1: Using ep0 maxpacket: 8 [ 759.778239][T12139] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 759.796834][T12139] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.821166][T12139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 759.843691][T12139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.877259][T12139] usbtmc 3-1:16.0: bulk endpoints not found [ 760.291227][T13855] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 760.312237][T13855] PKCS7: Only support pkcs7_signedData type [ 760.339289][T13850] kvm: kvm [13849]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x80 [ 760.355679][T13850] kvm: kvm [13849]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x80 [ 760.935554][T12139] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 761.135731][T12139] usb 2-1: Using ep0 maxpacket: 32 [ 761.148788][T12139] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.164565][T12139] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 761.174574][T12139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.195014][T12139] usb 2-1: config 0 descriptor?? [ 761.214490][T12139] usb 2-1: bad CDC descriptors [ 761.982882][T12139] usb 2-1: USB disconnect, device number 39 [ 762.148343][ T5300] usb 3-1: USB disconnect, device number 127 [ 762.196085][T13863] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 762.455525][T12139] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 762.637964][T12139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 762.651666][T12139] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 762.662921][T12139] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 762.669818][ T5300] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 762.676576][T12139] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 762.690191][T12139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.698646][T12139] usb 2-1: Product: syz [ 762.702826][T12139] usb 2-1: Manufacturer: syz [ 762.708208][T12139] usb 2-1: SerialNumber: syz [ 762.721856][T13861] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 762.898672][ T5300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.909130][ T5300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 762.924756][ T5300] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 762.936509][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 762.944621][ T5300] usb 3-1: SerialNumber: syz [ 762.959771][T13861] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 763.569815][T13864] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 763.606366][T13865] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 763.779177][T13861] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 763.878065][T13869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1107'. [ 764.005677][T12139] cdc_ncm 2-1:1.0: failed to get mac address [ 764.025012][T12139] cdc_ncm 2-1:1.0: bind() failure [ 764.050180][T12139] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 764.079367][T12139] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 764.106444][T12139] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 764.141804][T12139] usb 2-1: USB disconnect, device number 40 [ 764.498184][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 764.947000][T12139] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 765.105864][T10887] Bluetooth: hci2: command 0x0406 tx timeout [ 765.145688][T12139] usb 1-1: Using ep0 maxpacket: 8 [ 765.153288][T12139] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 765.172045][T12139] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.213129][T12139] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 765.231770][T12139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.269181][ T5300] usb 3-1: 0:2 : does not exist [ 765.283255][ T5300] usb 3-1: unit 5 not found! [ 765.283298][T12139] usbtmc 1-1:16.0: bulk endpoints not found [ 765.333027][ T5300] usb 3-1: USB disconnect, device number 2 [ 765.415211][T13882] FAULT_INJECTION: forcing a failure. [ 765.415211][T13882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.433961][T13882] CPU: 1 UID: 0 PID: 13882 Comm: syz.2.1112 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 765.444749][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 765.454812][T13882] Call Trace: [ 765.458087][T13882] [ 765.461012][T13882] dump_stack_lvl+0x241/0x360 [ 765.465698][T13882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.470911][T13882] ? __pfx__printk+0x10/0x10 [ 765.475499][T13882] ? __pfx_lock_release+0x10/0x10 [ 765.480523][T13882] should_fail_ex+0x3b0/0x4e0 [ 765.485190][T13882] _copy_from_user+0x2f/0xe0 [ 765.489775][T13882] usbdev_ioctl+0x1e4b/0x6130 [ 765.494448][T13882] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 765.500596][T13882] ? unwind_get_return_address+0x91/0xc0 [ 765.506219][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.512288][T13882] ? arch_stack_walk+0x16d/0x1b0 [ 765.517223][T13882] ? __pfx_usbdev_ioctl+0x10/0x10 [ 765.522359][T13882] ? stack_trace_save+0x118/0x1d0 [ 765.527374][T13882] ? __pfx_stack_trace_save+0x10/0x10 [ 765.532735][T13882] ? stack_depot_save_flags+0x29/0x830 [ 765.538211][T13882] ? kasan_save_track+0x51/0x80 [ 765.543151][T13882] ? kasan_save_track+0x3f/0x80 [ 765.547984][T13882] ? kasan_save_free_info+0x40/0x50 [ 765.553184][T13882] ? poison_slab_object+0xe0/0x150 [ 765.558281][T13882] ? __kasan_slab_free+0x37/0x60 [ 765.563226][T13882] ? kfree+0x149/0x360 [ 765.567277][T13882] ? tomoyo_path_number_perm+0x68d/0x880 [ 765.572918][T13882] ? security_file_ioctl+0x75/0xb0 [ 765.578018][T13882] ? __se_sys_ioctl+0x47/0x170 [ 765.582779][T13882] ? do_syscall_64+0xf3/0x230 [ 765.587446][T13882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.593523][T13882] ? do_vfs_ioctl+0xf0e/0x2e50 [ 765.598297][T13882] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 765.603316][T13882] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 765.609632][T13882] ? tomoyo_path_number_perm+0x208/0x880 [ 765.615253][T13882] ? __pfx_lock_release+0x10/0x10 [ 765.620268][T13882] ? kfree+0x149/0x360 [ 765.624323][T13882] ? tomoyo_path_number_perm+0x71a/0x880 [ 765.629976][T13882] ? tomoyo_path_number_perm+0x208/0x880 [ 765.635599][T13882] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 765.641679][T13882] ? __fget_files+0x29/0x470 [ 765.646275][T13882] ? __fget_files+0x3f6/0x470 [ 765.650934][T13882] ? __fget_files+0x29/0x470 [ 765.655528][T13882] ? bpf_lsm_file_ioctl+0x9/0x10 [ 765.660449][T13882] ? security_file_ioctl+0x87/0xb0 [ 765.665545][T13882] ? __pfx_usbdev_ioctl+0x10/0x10 [ 765.670556][T13882] __se_sys_ioctl+0xfc/0x170 [ 765.675130][T13882] do_syscall_64+0xf3/0x230 [ 765.679620][T13882] ? clear_bhb_loop+0x35/0x90 [ 765.684282][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.690159][T13882] RIP: 0033:0x7f0cc657def9 [ 765.694578][T13882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.714200][T13882] RSP: 002b:00007f0cc732b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.722600][T13882] RAX: ffffffffffffffda RBX: 00007f0cc6736058 RCX: 00007f0cc657def9 [ 765.730554][T13882] RDX: 0000000020000040 RSI: 00000000c0105500 RDI: 0000000000000006 [ 765.738508][T13882] RBP: 00007f0cc732b090 R08: 0000000000000000 R09: 0000000000000000 [ 765.746464][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.754416][T13882] R13: 0000000000000000 R14: 00007f0cc6736058 R15: 00007f0cc685fa28 [ 765.762382][T13882] [ 766.535844][ T5300] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 766.725491][ T5300] usb 2-1: Using ep0 maxpacket: 8 [ 766.735847][ T5300] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 766.743974][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 766.758774][ T5300] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 766.775359][ T5300] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 766.785770][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 766.805775][ T5300] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 766.825292][ T5300] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 766.834219][ T5300] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 766.849199][ T5300] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 766.870591][ T5300] usb 2-1: string descriptor 0 read error: -22 [ 766.878246][ T5300] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 766.888124][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.902179][ T5300] adutux 2-1:168.0: interrupt endpoints not found [ 767.117509][ T5300] usb 2-1: USB disconnect, device number 41 [ 767.625965][ T944] usb 1-1: USB disconnect, device number 32 [ 768.142578][T13900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1116'. [ 768.965575][ T5317] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 769.046217][ T5300] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 769.182538][ T5317] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 769.191756][ T5317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.204432][ T5317] usb 1-1: config 0 descriptor?? [ 769.231588][ T5317] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 769.257577][ T5300] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 769.273522][ T5300] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 769.288539][ T5300] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 769.289270][ T2537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.308812][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.320519][ T2537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.348574][T13908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 769.361333][ T5300] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.510486][ T2537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.535768][ T2537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.646652][ T944] usb 2-1: USB disconnect, device number 42 [ 769.655374][ T2537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.667889][ T2537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.781417][ T2537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.796211][ T2537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.882592][T10887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.901904][T10887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.912636][T10887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 769.929070][T10887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 769.938916][T10887] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 769.948608][T10887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 770.009821][ T2537] bridge_slave_1: left allmulticast mode [ 770.018709][ T2537] bridge_slave_1: left promiscuous mode [ 770.024543][ T2537] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.042558][ T2537] bridge_slave_0: left allmulticast mode [ 770.048364][ T2537] bridge_slave_0: left promiscuous mode [ 770.054076][ T2537] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.199451][ T2537] ip6_vti0 (unregistering): left allmulticast mode [ 770.239136][ T944] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 770.440967][ T944] usb 2-1: Using ep0 maxpacket: 16 [ 770.456695][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 770.468412][ T944] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 770.478509][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.488973][ T944] usb 2-1: config 0 descriptor?? [ 770.570530][ T2537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.582638][ T2537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.594348][ T2537] bond0 (unregistering): Released all slaves [ 770.678678][ T2537] tipc: Left network mode [ 770.911529][T13911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.926785][T13911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.951931][ T944] hid (null): report_id 2838798905 is invalid [ 770.965991][ T944] hid (null): unknown global tag 0xc [ 770.971454][ T944] hid (null): unknown global tag 0xa5 [ 770.989057][ T944] hid (null): unknown global tag 0xd [ 771.007203][ T944] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 771.014657][ T944] hid-generic 0003:0158:0100.0015: unexpected long global item [ 771.039660][ T944] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 771.062281][ T5317] usb 1-1: USB disconnect, device number 33 [ 771.161283][ T2537] hsr_slave_0: left promiscuous mode [ 771.161657][T13911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.180013][ T2537] hsr_slave_1: left promiscuous mode [ 771.186458][T13911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.202355][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.210011][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.227402][ T2537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.236461][ T2537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.283480][ T2537] veth1_macvtap: left promiscuous mode [ 771.297102][ T2537] veth0_macvtap: left promiscuous mode [ 771.304152][ T2537] veth1_vlan: left promiscuous mode [ 771.313784][ T2537] veth0_vlan: left promiscuous mode [ 771.392703][ T944] usb 2-1: USB disconnect, device number 43 [ 771.478560][ T2537] pim6reg (unregistering): left allmulticast mode [ 771.991323][T10887] Bluetooth: hci5: command tx timeout [ 772.015167][ T2537] team0 (unregistering): Port device team_slave_1 removed [ 772.098057][ T2537] team0 (unregistering): Port device team_slave_0 removed [ 772.398084][T13938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1126'. [ 772.867091][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 772.891334][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 772.925984][T13912] chnl_net:caif_netlink_parms(): no params data found [ 773.060561][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 773.086122][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 773.244306][T13912] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.254842][T13912] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.263145][T13912] bridge_slave_0: entered allmulticast mode [ 773.267970][ T31] INFO: task syz.2.861:12286 blocked for more than 143 seconds. [ 773.275131][T13912] bridge_slave_0: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 773.291066][ T31] Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 773.315523][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.338959][ T31] task:syz.2.861 state:D stack:26352 pid:12286 tgid:12286 ppid:11946 flags:0x00000004 [ 773.395512][ T31] Call Trace: [ 773.398849][ T31] [ 773.401803][ T31] __schedule+0x1800/0x4a60 [ 773.448604][ T31] ? __pfx___schedule+0x10/0x10 [ 773.453523][ T31] ? __pfx_lock_release+0x10/0x10 [ 773.485587][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 773.496874][ T31] ? schedule+0x90/0x320 [ 773.501173][ T31] schedule+0x14b/0x320 [ 773.505352][ T31] schedule_preempt_disabled+0x13/0x30 [ 773.523590][ T31] __mutex_lock+0x6a4/0xd70 [ 773.535634][ T31] ? __mutex_lock+0x527/0xd70 [ 773.540380][ T31] ? hugetlb_fault+0x56f/0x3770 [ 773.545265][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 773.565548][ T31] ? __lock_acquire+0x137a/0x2040 [ 773.570657][ T31] hugetlb_fault+0x56f/0x3770 [ 773.583543][ T31] ? __pfx_hugetlb_fault+0x10/0x10 [ 773.594056][ T31] ? reacquire_held_locks+0x3eb/0x690 [ 773.608458][ T31] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 773.613748][ T31] ? __pfx_reacquire_held_locks+0x10/0x10 [ 773.620051][ T31] handle_mm_fault+0x1901/0x1bc0 [ 773.626368][ T31] ? mtree_range_walk+0x6fd/0x8e0 [ 773.631441][ T31] ? __pfx_lock_release+0x10/0x10 [ 773.645525][ T31] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 773.650793][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 773.659555][ T31] ? lock_vma_under_rcu+0x592/0x6e0 [ 773.664811][ T31] ? lock_vma_under_rcu+0x18a/0x6e0 [ 773.671123][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 773.677062][ T31] ? exc_page_fault+0x113/0x8c0 [ 773.681956][ T31] exc_page_fault+0x459/0x8c0 [ 773.688771][ T31] asm_exc_page_fault+0x26/0x30 [ 773.693660][ T31] RIP: 0033:0x7fd00694597c [ 773.699013][ T31] RSP: 002b:00007fd006c5fb88 EFLAGS: 00010246 [ 773.705133][ T31] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 773.705523][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 773.713705][ T31] RDX: 0000000000000010 RSI: 00007fd0064005d5 RDI: 0000000020000d00 [ 773.734530][ T31] RBP: 00007fd006b37a80 R08: 00007fd006800000 R09: 0000000000000001 [ 773.744258][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 000000000009883f [ 773.767191][ T31] R13: 00007fd006c5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 773.775245][ T31] [ 773.790032][ T31] INFO: task syz.2.861:12287 blocked for more than 143 seconds. [ 773.802357][ T31] Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 773.815594][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.824310][ T31] task:syz.2.861 state:D stack:26512 pid:12287 tgid:12286 ppid:11946 flags:0x00004006 [ 773.842677][ T31] Call Trace: [ 773.847233][ T31] [ 773.850201][ T31] __schedule+0x1800/0x4a60 [ 773.854757][ T31] ? __pfx___schedule+0x10/0x10 [ 773.866824][ T31] ? __pfx_lock_release+0x10/0x10 [ 773.871910][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 773.884046][ T31] ? schedule+0x90/0x320 [ 773.891404][ T31] schedule+0x14b/0x320 [ 773.904398][ T31] io_schedule+0x8d/0x110 [ 773.909750][ T31] folio_wait_bit_common+0x882/0x12b0 [ 773.915194][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 773.925547][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 773.931164][ T31] ? _raw_spin_unlock+0x28/0x50 [ 773.943102][ T31] ? __vma_reservation_common+0x498/0x7d0 [ 773.949249][ T31] __filemap_get_folio+0xb7/0xc10 [ 773.954324][ T31] hugetlb_fault+0x1b72/0x3770 [ 773.975539][ T31] ? __pfx_hugetlb_fault+0x10/0x10 [ 773.980744][ T31] ? mt_find+0x226/0x850 [ 773.985014][ T31] ? __pfx_lock_release+0x10/0x10 [ 774.015619][ T31] handle_mm_fault+0x1901/0x1bc0 [ 774.020637][ T31] ? mt_find+0x62d/0x850 [ 774.024910][ T31] ? mt_find+0x226/0x850 [ 774.045553][ T31] ? __pfx_mt_find+0x10/0x10 [ 774.050221][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 774.061863][ T31] ? find_vma+0xf9/0x170 [ 774.066535][ T31] ? __pfx_find_vma+0x10/0x10 [ 774.071302][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 774.076479][T10887] Bluetooth: hci5: command tx timeout [ 774.084864][ T31] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 774.090347][ T31] exc_page_fault+0x2b9/0x8c0 [ 774.097692][ T31] asm_exc_page_fault+0x26/0x30 [ 774.102630][ T31] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 774.108734][ T31] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 774.128618][ T31] RSP: 0018:ffffc90000bc7ad0 EFLAGS: 00050246 [ 774.134752][ T31] RAX: ffffffff84b29901 RBX: 0000000020013a00 RCX: 0000000000000040 [ 774.144952][ T31] RDX: 0000000000000000 RSI: ffffc90000bc7b60 RDI: 00000000200139c0 [ 774.153334][ T31] RBP: ffffc90000bc7c10 R08: ffffc90000bc7b9f R09: 1ffff92000178f73 [ 774.171243][ T31] R10: dffffc0000000000 R11: fffff52000178f74 R12: 0000000000000040 [ 774.183300][ T31] R13: 0000000000013380 R14: 00000000200139c0 R15: ffffc90000bc7b60 [ 774.191687][ T31] ? _copy_from_user+0x91/0xe0 [ 774.205483][ T31] _copy_to_user+0x86/0xb0 [ 774.210026][ T31] rng_dev_read+0x3be/0x6d0 [ 774.214594][ T31] ? __pfx_rng_dev_read+0x10/0x10 [ 774.226370][ T31] ? security_file_permission+0x7f/0xa0 [ 774.232015][ T31] ? rw_verify_area+0x52a/0x6b0 [ 774.243248][ T31] vfs_readv+0x6c2/0xa90 [ 774.251128][ T31] ? __pfx_rng_dev_read+0x10/0x10 [ 774.262432][ T31] ? __pfx_vfs_readv+0x10/0x10 [ 774.267469][ T31] ? __fget_files+0x29/0x470 [ 774.272142][ T31] __x64_sys_preadv+0x1c7/0x2d0 [ 774.285076][ T31] ? __pfx___x64_sys_preadv+0x10/0x10 [ 774.290898][ T31] ? do_syscall_64+0x100/0x230 [ 774.305790][ T31] ? do_syscall_64+0xb6/0x230 [ 774.310664][ T31] do_syscall_64+0xf3/0x230 [ 774.315220][ T31] ? clear_bhb_loop+0x35/0x90 [ 774.327197][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.333178][ T31] RIP: 0033:0x7fd00697def9 [ 774.342730][ T31] RSP: 002b:00007fd0077e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 774.353823][ T31] RAX: ffffffffffffffda RBX: 00007fd006b35f80 RCX: 00007fd00697def9 [ 774.371622][ T31] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 774.379832][ T31] RBP: 00007fd0069f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 774.395509][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.411866][ T31] R13: 0000000000000000 R14: 00007fd006b35f80 R15: 00007fd006c5fa28 [ 774.424634][ T31] [ 774.435262][ T31] INFO: task syz.2.861:12292 blocked for more than 144 seconds. [ 774.443148][ T31] Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 774.451111][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 774.462918][T13912] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.469402][ T31] task:syz.2.861 state:D stack:23280 pid:12292 tgid:12286 ppid:11946 flags:0x00004006 [ 774.496693][T13912] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.515752][ T31] Call Trace: [ 774.516525][T13912] bridge_slave_1: entered allmulticast mode [ 774.519086][ T31] [ 774.548837][T13912] bridge_slave_1: entered promiscuous mode [ 774.554643][ T31] __schedule+0x1800/0x4a60 [ 774.554700][ T31] ? __pfx___schedule+0x10/0x10 [ 774.593215][ T31] ? __pfx_lock_release+0x10/0x10 [ 774.614820][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 774.646856][ T31] ? schedule+0x90/0x320 [ 774.651184][ T31] schedule+0x14b/0x320 [ 774.665509][ T31] schedule_preempt_disabled+0x13/0x30 [ 774.671064][ T31] __mutex_lock+0x6a4/0xd70 [ 774.692406][ T31] ? __mutex_lock+0x527/0xd70 [ 774.697480][ T31] ? hugetlb_wp+0x104d/0x3a90 [ 774.713494][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 774.725729][ T31] ? __pfx_up_write+0x10/0x10 [ 774.730786][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 774.745698][ T31] ? vma_interval_tree_iter_next+0x193/0x340 [ 774.751803][ T31] hugetlb_wp+0x104d/0x3a90 [ 774.765568][ T31] ? mark_lock+0x9a/0x350 [ 774.770017][ T31] ? __pfx_hugetlb_wp+0x10/0x10 [ 774.774911][ T31] ? __pfx___might_resched+0x10/0x10 [ 774.825497][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 774.830881][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 774.885490][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 774.890965][ T31] ? __filemap_get_folio+0x769/0xc10 [ 774.915478][ T31] hugetlb_fault+0x27b2/0x3770 [ 774.920370][ T31] ? __pfx_hugetlb_fault+0x10/0x10 [ 774.933811][ T31] ? mt_find+0x226/0x850 [ 774.938280][ T31] ? __pfx_lock_release+0x10/0x10 [ 774.943373][ T31] handle_mm_fault+0x1901/0x1bc0 [ 774.948565][ T31] ? mt_find+0x62d/0x850 [ 774.952886][ T31] ? mt_find+0x226/0x850 [ 774.959357][ T31] ? __pfx_mt_find+0x10/0x10 [ 774.964014][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 774.969507][ T31] ? find_vma+0xf9/0x170 [ 774.973806][ T31] ? __pfx_find_vma+0x10/0x10 [ 774.985540][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 774.985871][T13951] syz.0.1129: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 774.991926][ T31] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 774.992109][T13951] ,cpuset=syz0,mems_allowed=0-1 [ 775.024288][ T31] exc_page_fault+0x2b9/0x8c0 [ 775.032738][T13951] CPU: 1 UID: 0 PID: 13951 Comm: syz.0.1129 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 775.035543][ T31] asm_exc_page_fault+0x26/0x30 [ 775.044018][T13951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 775.044040][T13951] Call Trace: [ 775.044051][T13951] [ 775.065211][T13951] dump_stack_lvl+0x241/0x360 [ 775.067488][ T31] RIP: 0010:__put_user_8+0x11/0x20 [ 775.069900][T13951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.075026][ T31] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 775.080184][T13951] ? __pfx__printk+0x10/0x10 [ 775.080213][T13951] ? __rcu_read_unlock+0xa1/0x110 [ 775.080238][T13951] warn_alloc+0x278/0x410 [ 775.080269][T13951] ? __pfx_warn_alloc+0x10/0x10 [ 775.080298][T13951] ? vb2_vmalloc_alloc+0xf2/0x340 [ 775.080323][T13951] ? __get_vm_area_node+0x23d/0x270 [ 775.080359][T13951] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 775.080409][T13951] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 775.080432][T13951] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 775.133914][ T31] RSP: 0018:ffffc90003e77778 EFLAGS: 00050202 [ 775.134888][T13951] ? vb2_vmalloc_alloc+0xf2/0x340 [ 775.140948][ T31] [ 775.147162][T13951] ? __get_vm_area_node+0x23d/0x270 [ 775.147200][T13951] __vmalloc_node_range_noprof+0x5bc/0x1400 [ 775.147223][T13951] ? vb2_vmalloc_alloc+0xf2/0x340 [ 775.153287][ T31] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 775.158300][T13951] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 775.158329][T13951] ? __kasan_kmalloc+0x98/0xb0 [ 775.158355][T13951] ? vb2_vmalloc_alloc+0xb5/0x340 [ 775.160677][ T31] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608f40 [ 775.165832][T13951] vmalloc_user_noprof+0x74/0x80 [ 775.165857][T13951] ? vb2_vmalloc_alloc+0xf2/0x340 [ 775.165880][T13951] vb2_vmalloc_alloc+0xf2/0x340 [ 775.165908][T13951] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 775.171781][ T31] RBP: ffffc90003e77ec8 R08: ffffffff9018766f R09: 1ffffffff2030ecd [ 775.176758][T13951] __vb2_queue_alloc+0xa0f/0x16f0 [ 775.176808][T13951] vb2_core_create_bufs+0x825/0x1040 [ 775.176841][T13951] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 775.176869][T13951] ? __pfx___might_resched+0x10/0x10 [ 775.176890][T13951] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 775.176919][T13951] vb2_create_bufs+0x60e/0xdd0 [ 775.176948][T13951] ? __pfx_vb2_create_bufs+0x10/0x10 [ 775.192673][ T31] R10: dffffc0000000000 R11: fffffbfff2030ece R12: 1ffff920007cef7d [ 775.195977][T13951] ? __mutex_lock+0x2ef/0xd70 [ 775.196012][T13951] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 775.196042][T13951] vb2_ioctl_create_bufs+0x2ba/0x400 [ 775.196073][T13951] v4l_create_bufs+0x18b/0x2a0 [ 775.201097][ T31] R13: 1ffff920007cef08 R14: 0000000020800000 R15: 0000000000800000 [ 775.209037][T13951] __video_do_ioctl+0xc26/0xde0 [ 775.209075][T13951] ? __pfx___video_do_ioctl+0x10/0x10 [ 775.209102][T13951] ? __might_fault+0xc6/0x120 [ 775.209135][T13951] video_usercopy+0x89b/0x1180 [ 775.214062][ T31] userfaultfd_ioctl+0x28e7/0x70a0 [ 775.219039][T13951] ? __pfx___video_do_ioctl+0x10/0x10 [ 775.219063][T13951] ? __pfx_video_usercopy+0x10/0x10 [ 775.219097][T13951] ? __fget_files+0x29/0x470 [ 775.219121][T13951] ? __fget_files+0x3f6/0x470 [ 775.219141][T13951] ? __fget_files+0x29/0x470 [ 775.219165][T13951] v4l2_ioctl+0x18c/0x1e0 [ 775.219186][T13951] ? __pfx_v4l2_ioctl+0x10/0x10 [ 775.219207][T13951] __se_sys_ioctl+0xfc/0x170 [ 775.219230][T13951] do_syscall_64+0xf3/0x230 [ 775.219252][T13951] ? clear_bhb_loop+0x35/0x90 [ 775.219278][T13951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.219302][T13951] RIP: 0033:0x7ff115b7def9 [ 775.219323][T13951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.219346][T13951] RSP: 002b:00007ff1168de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.219370][T13951] RAX: ffffffffffffffda RBX: 00007ff115d35f80 RCX: 00007ff115b7def9 [ 775.219387][T13951] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000009 [ 775.219400][T13951] RBP: 00007ff115bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 775.219414][T13951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.219429][T13951] R13: 0000000000000000 R14: 00007ff115d35f80 R15: 00007ff115e5fa28 [ 775.219460][T13951] [ 775.257050][T13951] Mem-Info: [ 775.268668][ T31] ? stack_trace_save+0x118/0x1d0 [ 775.309105][T13951] active_anon:4286 inactive_anon:0 isolated_anon:0 [ 775.309105][T13951] active_file:11619 inactive_file:38574 isolated_file:0 [ 775.309105][T13951] unevictable:768 dirty:562 writeback:0 [ 775.309105][T13951] slab_reclaimable:9222 slab_unreclaimable:97281 [ 775.309105][T13951] mapped:10044 shmem:1260 pagetables:552 [ 775.309105][T13951] sec_pagetables:0 bounce:0 [ 775.309105][T13951] kernel_misc_reclaimable:0 [ 775.309105][T13951] free:1324123 free_pcp:1158 free_cma:0 [ 775.324276][ T31] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 775.324320][ T31] ? stack_depot_save_flags+0x29/0x830 [ 775.324508][ T31] ? kasan_save_track+0x51/0x80 [ 775.324535][ T31] ? kasan_save_track+0x3f/0x80 [ 775.324558][ T31] ? kasan_save_free_info+0x40/0x50 [ 775.324579][ T31] ? poison_slab_object+0xe0/0x150 [ 775.324628][ T31] ? __kasan_slab_free+0x37/0x60 [ 775.324653][ T31] ? kfree+0x149/0x360 [ 775.324671][ T31] ? tomoyo_path_number_perm+0x68d/0x880 [ 775.324697][ T31] ? security_file_ioctl+0x75/0xb0 [ 775.324721][ T31] ? __se_sys_ioctl+0x47/0x170 [ 775.342405][T13951] Node 0 active_anon:17144kB inactive_anon:0kB active_file:46476kB inactive_file:154228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40176kB dirty:2248kB writeback:0kB shmem:3504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9916kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 775.352847][ T31] ? do_syscall_64+0xf3/0x230 [ 775.373784][T13951] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 775.405513][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.435799][T13951] Node 0 [ 775.475469][ T31] ? do_vfs_ioctl+0xf0e/0x2e50 [ 775.488294][T13951] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.565470][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 775.583214][T13951] lowmem_reserve[]: [ 775.605505][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 775.659525][T13951] 0 [ 775.705490][ T31] ? tomoyo_path_number_perm+0x208/0x880 [ 775.715839][T13951] 2467 2468 0 0 [ 775.720037][T13951] Node 0 DMA32 free:1330576kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:17112kB inactive_anon:0kB active_file:46476kB inactive_file:153412kB unevictable:1536kB writepending:2248kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:3840kB local_pcp:3028kB free_cma:0kB [ 775.745519][ T31] ? __pfx_lock_release+0x10/0x10 [ 775.761964][T13951] lowmem_reserve[]: 0 0 0 0 0 [ 775.765525][ T31] ? kfree+0x149/0x360 [ 775.771450][ T31] ? tomoyo_path_number_perm+0x208/0x880 [ 775.777290][T13951] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 775.787521][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 775.810050][T13951] lowmem_reserve[]: 0 0 0 0 0 [ 775.810103][T13951] Node 1 Normal free:3950964kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:0kB free_cma:0kB [ 775.835848][ T31] ? __fget_files+0x29/0x470 [ 775.848704][T13951] lowmem_reserve[]: 0 0 0 0 0 [ 775.853470][T13951] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 775.866508][T13951] Node 0 DMA32: 1591*4kB (UME) 1305*8kB (UME) 893*16kB (UME) 821*32kB (UME) 295*64kB (UME) 29*128kB (UME) 12*256kB (UM) 11*512kB (UM) 6*1024kB (UME) 3*2048kB (UME) 300*4096kB (UM) = 1329748kB [ 775.889810][T13951] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 775.902070][T13951] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 2*16kB (UM) 3*32kB (UM) 2*64kB (U) 1*128kB (U) 6*256kB (UM) 5*512kB (UM) 2*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3951012kB [ 775.911920][ T31] ? __fget_files+0x3f6/0x470 [ 775.923714][T13951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.931888][ T31] ? __fget_files+0x29/0x470 [ 775.933553][T13951] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 775.945450][ T31] ? bpf_lsm_file_ioctl+0x9/0x10 [ 775.949101][T13951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.956885][ T31] ? security_file_ioctl+0x87/0xb0 [ 775.963562][T13951] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 775.975089][ T31] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 775.980102][T13951] 51457 total pagecache pages [ 775.983894][ T31] __se_sys_ioctl+0xfc/0x170 [ 775.988154][T13951] 0 pages in swap cache [ 775.993017][ T31] do_syscall_64+0xf3/0x230 [ 775.997057][T13951] Free swap = 124216kB [ 776.008169][T13951] Total swap = 124996kB [ 776.009303][ T31] ? clear_bhb_loop+0x35/0x90 [ 776.012529][T13951] 2097051 pages RAM [ 776.019975][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.021126][T13951] 0 pages HighMem/MovableOnly [ 776.032281][ T31] RIP: 0033:0x7fd00697def9 [ 776.035205][T13951] 426967 pages reserved [ 776.039769][ T31] RSP: 002b:00007fd0077bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.044500][T13951] 0 pages cma reserved [ 776.056930][ T31] RAX: ffffffffffffffda RBX: 00007fd006b36058 RCX: 00007fd00697def9 [ 776.064944][ T31] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 776.079930][ T31] RBP: 00007fd0069f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 776.090730][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.103348][ T31] R13: 0000000000000000 R14: 00007fd006b36058 R15: 00007fd006c5fa28 [ 776.120355][ T31] [ 776.123696][ T31] [ 776.123696][ T31] Showing all locks held in the system: [ 776.152795][T10887] Bluetooth: hci5: command tx timeout [ 776.184554][ T31] 5 locks held by kworker/0:1/9: [ 776.221140][ T31] #0: ffff888022ee0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 776.275455][ T31] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 776.335648][ T31] #2: ffff8880291d5190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 776.355476][ T31] #3: ffff888028ca4518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 776.375485][ T31] #4: ffff888028bf0368 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 776.385298][ T31] 1 lock held by khungtaskd/31: [ 776.395126][ T31] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 776.405789][ T31] 3 locks held by kworker/0:2/944: [ 776.410963][ T31] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 776.425526][ T31] #1: ffffc90003da7d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 776.457473][ T31] #2: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 776.477409][ T31] 2 locks held by kworker/u8:6/1112: [ 776.482767][ T31] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 776.515551][ T31] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 776.545653][ T31] 3 locks held by kworker/u8:10/2537: [ 776.552387][ T31] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 776.575569][ T31] #1: ffffc90009357d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 776.605446][ T31] #2: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 776.622690][ T31] 2 locks held by getty/4984: [ 776.653337][ T31] #0: ffff888023d500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 776.671656][ T31] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 776.695563][ T31] 3 locks held by kworker/1:8/5317: [ 776.700852][ T31] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 776.725545][ T31] #1: ffffc900041c7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 776.755520][ T31] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 776.775604][ T31] 2 locks held by syz.2.861/12286: [ 776.780782][ T31] #0: ffff88807fb802f8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 776.812623][ T31] #1: ffff888021694608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 776.831074][ T31] 3 locks held by syz.2.861/12287: [ 776.845548][ T31] #0: ffff8880247c3118 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 776.865906][ T31] #1: ffff888021694608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 776.897439][ T31] #2: ffff8880329618e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 776.915152][ T31] 2 locks held by syz.2.861/12292: [ 776.920454][ T31] #0: ffff8880247c3118 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 776.930981][ T31] #1: ffff888021694608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 776.955482][ T31] 3 locks held by syz-executor/13396: [ 776.962066][ T31] #0: ffff88805db94d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 776.994765][ T31] #1: ffff88805db94078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 777.011301][ T31] #2: ffffffff8fdf7f28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 777.035498][ T31] 3 locks held by syz-executor/13569: [ 777.040954][ T31] #0: ffff88802fb20d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 777.065543][ T31] #1: ffff88802fb20078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 777.075361][ T31] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 777.095154][ T31] 3 locks held by syz-executor/13912: [ 777.101692][ T31] #0: ffff88806a310d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 777.123905][ T31] #1: ffff88806a310078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 777.135962][ T31] #2: ffffffff8fdf7f28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 777.156457][ T31] 3 locks held by syz.1.1128/13942: [ 777.161701][ T31] #0: ffff88806909cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 777.181635][ T31] #1: ffff88806909c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 777.195144][ T31] #2: ffffffff8fdf7f28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 777.211916][ T31] 2 locks held by dhcpcd-run-hook/13993: [ 777.220027][ T31] [ 777.222381][ T31] ============================================= [ 777.222381][ T31] [ 777.284967][ T31] NMI backtrace for cpu 1 [ 777.289353][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 777.299872][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 777.309943][ T31] Call Trace: [ 777.313230][ T31] [ 777.316176][ T31] dump_stack_lvl+0x241/0x360 [ 777.320873][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.326082][ T31] ? __pfx__printk+0x10/0x10 [ 777.330681][ T31] ? vprintk_emit+0x667/0x7c0 [ 777.335368][ T31] ? __pfx_vprintk_emit+0x10/0x10 [ 777.340411][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 777.345370][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 777.350838][ T31] ? _printk+0xd5/0x120 [ 777.355002][ T31] ? __pfx__printk+0x10/0x10 [ 777.359607][ T31] ? __wake_up_klogd+0xcc/0x110 [ 777.364471][ T31] ? __pfx__printk+0x10/0x10 [ 777.369078][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 777.374119][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 777.380123][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 777.386136][ T31] watchdog+0xff4/0x1040 [ 777.390403][ T31] ? watchdog+0x1ea/0x1040 [ 777.394835][ T31] ? __pfx_watchdog+0x10/0x10 [ 777.399526][ T31] kthread+0x2f0/0x390 [ 777.403608][ T31] ? __pfx_watchdog+0x10/0x10 [ 777.408299][ T31] ? __pfx_kthread+0x10/0x10 [ 777.412901][ T31] ret_from_fork+0x4b/0x80 [ 777.417348][ T31] ? __pfx_kthread+0x10/0x10 [ 777.421947][ T31] ret_from_fork_asm+0x1a/0x30 [ 777.426738][ T31] [ 777.431278][ T31] Sending NMI from CPU 1 to CPUs 0: [ 777.437503][ C0] NMI backtrace for cpu 0 [ 777.437516][ C0] CPU: 0 UID: 0 PID: 5286 Comm: kworker/0:6 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 777.437536][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 777.437547][ C0] Workqueue: events purge_vmap_node [ 777.437568][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 777.437594][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 6c 76 96 0c 48 89 de 5b e9 b3 9a 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 40 4a [ 777.437608][ C0] RSP: 0018:ffffc90003fc7440 EFLAGS: 00000202 [ 777.437621][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff88802cdabc00 [ 777.437632][ C0] RDX: 0000000000000002 RSI: ffffffff8e7a3d80 RDI: 0000000000000002 [ 777.437643][ C0] RBP: ffffffff909f072e R08: 0000000000000003 R09: ffffffff81412e12 [ 777.437655][ C0] R10: 0000000000000002 R11: ffff88802cdabc00 R12: ffffffff9029bfa8 [ 777.437667][ C0] R13: dffffc0000000000 R14: 1ffff920007f8ea4 R15: ffffffff909f072a [ 777.437680][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 777.437694][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.437706][ C0] CR2: 000055e2c28b1a18 CR3: 000000000e734000 CR4: 00000000003506f0 [ 777.437721][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.437731][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 777.437742][ C0] Call Trace: [ 777.437749][ C0] [ 777.437755][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 777.437776][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 777.437797][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 777.437815][ C0] ? nmi_handle+0x2a/0x5a0 [ 777.437839][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 777.437857][ C0] ? nmi_handle+0x14f/0x5a0 [ 777.437873][ C0] ? nmi_handle+0x2a/0x5a0 [ 777.437889][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 777.437915][ C0] ? default_do_nmi+0x63/0x160 [ 777.437934][ C0] ? exc_nmi+0x123/0x1f0 [ 777.437953][ C0] ? end_repeat_nmi+0xf/0x53 [ 777.437975][ C0] ? unwind_next_frame+0x6c2/0x2a00 [ 777.437999][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 777.438019][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 777.438040][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 777.438060][ C0] [ 777.438066][ C0] [ 777.438072][ C0] unwind_next_frame+0x6ef/0x2a00 [ 777.438094][ C0] ? process_scheduled_works+0xa2b/0x1830 [ 777.438116][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 777.438134][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 777.438152][ C0] ? __kernel_text_address+0xd/0x40 [ 777.438169][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 777.438187][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 777.438207][ C0] arch_stack_walk+0x151/0x1b0 [ 777.438226][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 777.438247][ C0] stack_trace_save+0x118/0x1d0 [ 777.438266][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 777.438292][ C0] save_stack+0xfb/0x1f0 [ 777.438311][ C0] ? __pfx_save_stack+0x10/0x10 [ 777.438328][ C0] ? free_unref_page+0xd22/0xea0 [ 777.438345][ C0] ? kasan_depopulate_vmalloc_pte+0x74/0x90 [ 777.438363][ C0] ? __apply_to_page_range+0x8a8/0xe50 [ 777.438381][ C0] ? kasan_release_vmalloc+0x9a/0xb0 [ 777.438399][ C0] ? purge_vmap_node+0x417/0x810 [ 777.438414][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 777.438439][ C0] ? page_ext_get+0x20/0x2a0 [ 777.438460][ C0] __reset_page_owner+0x76/0x430 [ 777.438478][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 777.438499][ C0] free_unref_page+0xd22/0xea0 [ 777.438518][ C0] ? __virt_addr_valid+0x183/0x530 [ 777.438537][ C0] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 777.438557][ C0] __apply_to_page_range+0x8a8/0xe50 [ 777.438579][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 777.438602][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 777.438629][ C0] kasan_release_vmalloc+0x9a/0xb0 [ 777.438647][ C0] purge_vmap_node+0x417/0x810 [ 777.438673][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 777.438694][ C0] ? process_scheduled_works+0x945/0x1830 [ 777.438712][ C0] process_scheduled_works+0xa2c/0x1830 [ 777.438746][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 777.438784][ C0] ? assign_work+0x364/0x3d0 [ 777.438806][ C0] worker_thread+0x870/0xd30 [ 777.438829][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 777.438853][ C0] ? __kthread_parkme+0x169/0x1d0 [ 777.438875][ C0] ? __pfx_worker_thread+0x10/0x10 [ 777.438894][ C0] kthread+0x2f0/0x390 [ 777.438912][ C0] ? __pfx_worker_thread+0x10/0x10 [ 777.438930][ C0] ? __pfx_kthread+0x10/0x10 [ 777.438945][ C0] ret_from_fork+0x4b/0x80 [ 777.438964][ C0] ? __pfx_kthread+0x10/0x10 [ 777.438978][ C0] ret_from_fork_asm+0x1a/0x30 [ 777.439006][ C0] [ 777.458515][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 777.458532][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 777.458554][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 777.458565][ T31] Call Trace: [ 777.458573][ T31] [ 777.458581][ T31] dump_stack_lvl+0x241/0x360 [ 777.458608][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.458628][ T31] ? __pfx__printk+0x10/0x10 [ 777.458644][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 777.458673][ T31] ? vscnprintf+0x5d/0x90 [ 777.458697][ T31] panic+0x349/0x860 [ 777.458716][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 777.458739][ T31] ? __pfx_panic+0x10/0x10 [ 777.458754][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 777.458790][ T31] ? __irq_work_queue_local+0x137/0x410 [ 777.458815][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 777.458834][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 777.458855][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 777.458879][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 777.458903][ T31] watchdog+0x1033/0x1040 [ 777.458928][ T31] ? watchdog+0x1ea/0x1040 [ 777.458955][ T31] ? __pfx_watchdog+0x10/0x10 [ 777.458978][ T31] kthread+0x2f0/0x390 [ 777.458995][ T31] ? __pfx_watchdog+0x10/0x10 [ 777.459016][ T31] ? __pfx_kthread+0x10/0x10 [ 777.459034][ T31] ret_from_fork+0x4b/0x80 [ 777.459056][ T31] ? __pfx_kthread+0x10/0x10 [ 777.459072][ T31] ret_from_fork_asm+0x1a/0x30 [ 777.459106][ T31] [ 777.464141][ T31] Kernel Offset: disabled [ 778.068618][ T31] Rebooting in 86400 seconds..