last executing test programs: 11.53053961s ago: executing program 4 (id=2534): syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket(0x8, 0x802, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'gre0\x00', 0x0}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x2000, 0x4000}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000500)={0x0, 0x9, 0x2, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000500)={0x0, 0x9, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000d00)={0x0, 0x4, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001100)={0x220b5e1fff541251, 0x4, {0x75, @struct={0x0, 0x5}, r3, 0x100000000, 0x9, 0x3, 0x4, 0x100000000, 0x2, @struct={0x7, 0x4c}, 0x40000000, 0x3ff, [0xfffffffffffffffc, 0x32, 0xa, 0x80000001, 0x100000001, 0x2]}, {0x8, @struct={0x7, 0x4}, r4, 0x14, 0x800, 0x9, 0x7, 0x62c0e895, 0x42, @struct={0x279f, 0x1}, 0x55d, 0x7, [0x474e, 0x2008, 0x4, 0xc, 0x0, 0x6]}, {0x3, @struct={0x7, 0x10}, r5, 0x9, 0x7f, 0x29748072, 0x6b, 0x4, 0x90, @usage=0x10, 0xc, 0x9, [0x16c, 0xd2b, 0xfffffffffffffff8, 0xbb4b, 0x2, 0x8000000000000000]}, {0x4, 0xfafe, 0x3}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001100)={0x220b5e1fff541251, 0x4, {0x75, @struct={0x0, 0x5}, r3, 0x100000000, 0x9, 0x3, 0x4, 0x100000000, 0x2, @struct={0x7, 0x4c}, 0x40000000, 0x3ff, [0xfffffffffffffffc, 0x32, 0xa, 0x80000001, 0x100000001, 0x2]}, {0x8, @struct={0x7, 0x4}, r4, 0x14, 0x800, 0x9, 0x7, 0x62c0e895, 0x42, @struct={0x279f, 0x1}, 0x55d, 0x7, [0x474e, 0x2008, 0x4, 0xc, 0x0, 0x6]}, {0x3, @struct={0x7, 0x10}, r5, 0x9, 0x7f, 0x29748072, 0x6b, 0x4, 0x90, @usage=0x10, 0xc, 0x9, [0x16c, 0xd2b, 0xfffffffffffffff8, 0xbb4b, 0x2, 0x8000000000000000]}, {0x4, 0xfafe, 0x3}}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x4) (async) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', 0x0, &(0x7f00000001c0), 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket(0xf, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7f}}}]}, 0x3c}}, 0x20041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x9c}}, 0x801) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket(0x22, 0x2, 0x3) 8.484003986s ago: executing program 4 (id=2547): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x10, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x48}}, 0x0) (async) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @multicast2, r5}, 0xc) 8.294626307s ago: executing program 4 (id=2549): unshare(0x2000400) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(0x0, &(0x7f0000000140)=[{0x1, 0x1}], 0x1, &(0x7f0000000580)) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d6843dee4baa239500020000000009040000000e0100000904000001ff041000090500000000000000080bb6798d082cf1"], 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000304000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x40, 0xa, 0x8e, {0x8e, 0x2, "136214654a2ef379370d544ce795167c7af34a06578653cc7689d73dd96832356e520ba4c9e329b24291d0aa290378dd8cc456b4493b834512dd5d0f60bd8c4c95f85c019c77c3789ac8eb4d4d5d29a71c1c1e1fe15bb0f265974c1394f7262dfefa780f8bf4c5dd30c3a0a3999c1b21c6153b37ed8a977d27bf73a9cf98238d1237334d62e7bc1e1af24362"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000a00)={0x40, 0x0, 0x55, "84b2bcc6f2e0967717fd6f5cfba7479edcd5603e5ae69276b08b79befe98db1abaa7206baaa363e13ee1cdfa0539aa1872860501a11ebbf5a2565888186f6e498c5e57d4f126c8a15264ceff49093d8904867c36d7"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, &(0x7f0000000540)={0x20, 0xd, 0xd1, {0xd1, 0x9, "21bf5be91bdf639fd0d2bb4eda1e7fe296a7918baa934a212444c787adfc00cb9aea112169106829becf1d8a14d4861f904220e295ba9d306f8218df70af1a9eba49d70687df19db584d2540553b6164f6721e1996ab7b1e4b623bb08fcf5ebec4786e6dfdb54b5c7ffe90742d5634ce4b633fbe2c4cc484241c3bd26d5474345d7b9bc0d57565763ab4955c4b5fac4984c08e6968201a4ccfee3482f7f09a1e360834e144c76a62212d874b8686129a6cf056af5324537c3c57e4f1762d90a998e1adf9ab612d5b6266690b26d466"}}, &(0x7f0000000b40)=ANY=[], &(0x7f00000002c0)={0x0, 0x22, 0x25, {[@main=@item_012={0x2, 0x0, 0x8, "0127"}, @global=@item_4={0x3, 0x1, 0xa, "46ae12e1"}, @global=@item_4={0x3, 0x1, 0x5, "454b990c"}, @global=@item_4={0x3, 0x1, 0x8, "b7095a7d"}, @main=@item_4={0x3, 0x0, 0x9, "4d95ea9b"}, @global=@item_4={0x3, 0x1, 0x9, "c3f4ac54"}, @global=@item_012={0x2, 0x1, 0x2, "7ad0"}, @local=@item_012={0x2, 0x2, 0x3, "5fd5"}, @local=@item_012={0x2, 0x2, 0x3, "89e5"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x38, 0x3, 0x1, {0x22, 0xb80}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x0, 0x0, 0x7c, "97fccd3a14f5133aa581d7e7f857794c65ec1697606360d286ec77a44eba62b9c0e389d76a3fc7fa2a3f7459f0f0de8ff3a96bfc7e10c22355d4c234e31b0ffaa5919ffe8a4a50e202bb5eab3d85304601a51f3583a8e575be6cedc354db3c89f6c2a18d6c959c7d56689acb39116601a176085b42eddd20d00e493c"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x1, 0x5d, "bba8f218829da9540b51b76d05665b22af9333f0e7c14b037a413ea7b3bbd8c94cd6bd09a95e28997575928cf979eb3e087424a8831570af3287df139e680ce52f5ef3d8a7c472fe5cabad55e0b6f9a5912cf82c3266caf3d3acc65f52"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x84, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x3, 0xc0, 0xc, [{{0x9, 0x4, 0x0, 0x60, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, 'O'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x3, 0x8}, [@obex={0x5, 0x24, 0x15, 0x810d}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x40, 0xacb0}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x4, [0x6ca, 0x7, 0x1, 0x7f, 0x7]}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x7, 0x38, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x20, 0x5, 0x98}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x10, 0x7}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x4, 0xc, 0x1, 0x10, 0xf8}, 0x90, &(0x7f0000000180)=ANY=[@ANYBLOB="050f90000603100b14100400fb8747b7fae94cec9f3700d6309bd3de071002049d020003100b67100bd8609a5f00ec6163f070c5b74eedcd96916d191edbe4deccf50d3a6feaf80db123a98b3632eaa9fe0cccaed5b068ca3191798b270f6239e11d4a80f2140274b1082e6163c7f79f606fac25257881693e663ade11b0fce7c79621caedbf2b613646cbf52a03100b"], 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xdfff098eab07928b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x6e, &(0x7f0000000b80)=@string={0x6e, 0x3, "d85114f7fd9c8a8ba7b0ca4f62b9c44e1c2fbfe2079a004c31d6889be1f2e3cdb002ffa7b9944c7fd61630ced436a9b832adbe4f509b8b3ac8fed4280ed5616e2ef83e94dd89dabfc60b79e6ec51243bd1e04bdae5438550231d23e6093bffd243e5d97b73bdd3cfd39515be"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x446}}, {0x93, &(0x7f0000000c40)=@string={0x93, 0x3, "00fa8a6a4a58c8b51d084abff0f93faf40fde3bcf45753272ce22b034f6def2b40d9c2f1a3490d7b0a44054c9007d24e032e0c6b2fbdb194152c824ad81a9dd211059f32dd50e8b03fe9f2345ac76819e18cac1640ee5b87fb2cfdb9f4a99ca498d42baf0829a7f6699d20dc5ff81028a3d88213f993e133968f43b7f8710db7b26fb710afea76de13ec3f2e220443b351"}}]}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000000009000200256420ad000000000900010073797a300000000008000540"], 0xe0}}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000280)=0x100) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.454953973s ago: executing program 2 (id=2561): r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="180000003900050e004a0000000000000324fc6019003540596c20ffad7e33ba0e83b6504824a0019b0b5b78758d69cf2cdf28826135ee", 0x37}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 6.426883925s ago: executing program 2 (id=2562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc040480c, &(0x7f0000000b80)={0x0, "80e21d3f6c946c4b77ca1ec78558619c83df381ea2e6acaaedabfbe5f9695fd2d5e3b1577598bb5b0f3bc3bccd35091df07c0d5633c59fc830306b2e5454126f"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[], 0xfec8}}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x30}}, 0x4004004) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2680, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x11, 0xa, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) 5.39560617s ago: executing program 4 (id=2564): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x23, 0x44, 0x1d, 0x40, 0x93a, 0x2603, 0xca84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x87, 0x7c, 0x46}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x5, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="71a9032932ea23253ee90dfc77bad0d1e93d8333fa9d151424a654cf53391d3c2e9f29c24631d45c2b2c9208c222a3f83b73f0081343b7662e0747f6ce89fe9a41850c3f789d15eff0bdc5e33e49ea16962d55876cfe629a3bc6ffe6efd68bb851e776f4d150f0ecc0a2fbb415fdc6abef632d0f23d980b4f66746dce82c4f01849904ab3aa12aadb416999e6aa537bf29a1", 0x92}, {&(0x7f00000000c0)="788d3777af09512ffc8c4a46ab55aa1c9667e9356865eb3ab5d25e349f8dc7155ae1a481bad1bcb641040010c9ceb943626d83bab33e", 0x36}, {&(0x7f0000000100)="15b59c20154e4477c6700878ba9e0db70bed8f3f1a463b24671acccd3d0c56d9f2bd54ce304b8871ac69a836612ece699e377aeb0227b5a3f95d9593cf733c3933768ecf55708cebd89e732926d9b3b1cdd79bbaf7084698e4dcdf511f7d3c0d10d5f9fe8e4450b2bcbe96bdbe9a6867baa4df03e25b6b96adc1bcedfab73e8c71554450b61a8d0901bfe008496426fc0e79b24e4130e9000c7718f94ccf0de965d011ee044d9d791c0fccc159bc81ae894d3595", 0xb4}, {&(0x7f00000001c0)="e8de316e8a00eac43c80919feda30aa76af7503f4bcfbca286fd1110", 0x1c}], 0x4, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xe0, 0x117, 0x2, 0xc9, "f76d5ec79788862ddfc39521f387a3967f21e5b939f308936b696489ac1fdfdaf44f0a41d77971c0df61e8201dfafa221a37dfbe722a25f9b499e15d714a2e06196d219976ea9e65f1b07035c6bbb7bb6059f2fd3a955d8be0b70f662838897398bc63284e991ba4436dc27ac8eb7f236ccdb96abd78d31648ff173b306dd6657da4b7623ed1b7738e0cc6f5c8ffa7f599932f08d98777b213a2f0cc05328f116f43001968a825a71fe2ff4879e904b12f40a9ee05c11ff6cdf8b735823bceff14301e6dc89f092a26"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x158, 0x24000090}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="3cae0d6a4157169e9fa09d0f2d7df361b5b70f597cac864dd8cf26c2311660234a76882c96211f5894ef036934e7c00988a965a3df421fa97f08025e615372885991e6e810a126b144fa4537078ee195f04fd68784b0a070c42550fdfddc159860e114c4b9f0d7628bf181dd1f6b9bf7f65370a29faa4e3059df8dd8c90c63469475467309cb30de03d73e31826c923e7f4971f56e94aaaa30e2dbf7405071545f41ca9036a8f116e98e8df2f4bad6886e05d6cf8ca4e2591eadb254b806d4dc4fa269cfc8b872ecce69b3af3ec9d3b2dbf4823deb05ac1aff1f91fe7f00fd3c316d05faf9328398c987c9a38109b7c5940bfa336dbe5c", 0xf7}, {&(0x7f00000004c0)="13cec6bb24aa7c3af05768560a14064fe38096f59e136e54a85a", 0x1a}], 0x2, &(0x7f0000000640)=[@op={0x18}, @iv={0x110, 0x117, 0x2, 0xf7, "107082796815fd5b109a0e6534974dff3f55b90089165b5da0ea34dca673dc51b75ac7f5346082c81dba908d3466f5f5e5cfc4ec4f2923897568dd33f1d97857d8034f166e0f0bde803359464385a17295b9459b4db7c28442ccef7a2dfcfe458f470094471b106a2d924100abd2c42e7d7d7333b89e2ec5e478e534b07cb072ababa0e3e8e00cfa9c5aa118a2b2f70bd2ae523f04269333d1cef8f4b52b7e2e6e45d22d2469a84825c6e0287a40372a40a9080d26489bcfbaece5a5e31c152e51579256c00fa2783a26c61459fe27f697cf6075df8171e4973bb953ced6101a2709952562dc92667bc818628db7ca6c53ea2628f51887"}, @op={0x18, 0x117, 0x3, 0x1}], 0x140, 0x2400c001}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="e24384f42202d55b340355b0204e4c8d6f81598a1f346301e009c21c99aba068cb2542660f65b1faf79ad26ced3194dd2e2da63fc1291605ed606fcdd90d9013a8921a9658b74f5a1c775ae6c4bd0b4272326fd71a1931cf58af15bc08cd39ada4748a3ab9ea3694a061ff444c870e645c445ac5e009dfbe1c3c3e5d4663fb82286799807dbec1aa9f167ec7906bb4c216f8f5fdf5bfc34fd61421c67524c2b674cccfb7d9a20554b9f187", 0xab}, {&(0x7f0000000780)="b5ef7c17f27879d2922b172750af53ae9bc988c555ba4ca91d02bd55a9707c55d999f1ab887287cd25c9ab4789ac99892de065b206bfeb84287a6c1b938ca7bcf654f6f0ad8b741b41c06dc32e9018d0a7c6cbad76a55d7887a1de6c3fea196e3b5da6dc75088ceb899effb50c0d76b55a46c1dc40b56f384f76cfa7c4e6c716e590bf347b4d7b16b4947a8e90707f5b863c37687ce8bc31daa4a84a2c67dd4a90097cbe9076a6f3c5b48eb3c459251a760ccb898ecc77044e0d75cc8c66", 0xbe}, {&(0x7f0000000840)="2ee105f65258747bc3c90657f42a1c4cfbb38567e33b48e712aff6b5953649b211f037737701b11807ee24b7f05d49b14f10cdbb7a40c1af3e7dd3126756bd2557fe90dd3ae56be406008bb5b620fb32e9a81a45b75df2b8c7db94d7c35bff4e7eb168d24f56a74a35a46f4cb5422aa7189e183fbc4455c61a7fd7c5b71bdf5c5a05ce5a4fe4b26551f5ad53becd51c4047b3e8b7c", 0x95}], 0x3, &(0x7f0000000940)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x4000091}, {0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000009c0)="ad31acf44fcc10c7e39427693536f6724c01b2b2797c4ef9b8e463e5a871a7e58d2413ad01db052f1737e9251115ca6053246b05b8096e725e9b734426befa7a295ac5290d514ed473", 0x49}, {&(0x7f0000000a40)="a3c65c5ba40acdcb2e510b347f480a7cad688c23827fa4d593719108ee92901b348f6acacb88cb96251c008468ffd0023e2f5f8e2e02e026c03cb0d50419f11d26568176e64ae94f0e1752e94b2237dc21f6edbe119316357b07a59c2fa09d3bdcdd95d127d58634f1ea071e427d51d17c8341401b6db7054fd88b180df4392c0b7c38ebc3dc949d97fd86fcf0a54c", 0x8f}, {&(0x7f0000000b00)="82c15bc599d526c5915025f68160b1615fb032af5c5a2b59b2becd981319ed310632fd346431e4654841fd28c70b55cc8ab4f724d6096cd66eee34237e40d870949c4ec1093f9e031b4eafc4f2d99b03b869c1cdda83e65051d5", 0x5a}, {&(0x7f0000000b80)="b03cf6a58a95cf71e71c6d9ee901ee0cf3a0adfa32e3a542815ae8f6f61e", 0x1e}, {&(0x7f0000000bc0)="d933d0d919348174bef3069ae843a22f96247458ad104c1cd9e17f06d47af9057dc9bd4ccfc2db230aa0e0c98bc0f4fb1f8a2b121396e61b6fa74f5fcbb9af2867d96771ae59c1ea00271f400d03129426d246fd8ccc0e56f72a45236f4107f3f802349361050f6ca0d6f107aaf83371ccae6ce95b612414f708a067ace4b7942c59fae953952cea44e2322a6c3d5b8f3b327221d99a81de2becdf1028eaad9d3f0d", 0xa2}, {&(0x7f0000000c80)="8cfe410c91aba86b2056e06ab235817189b1aa91e54bedcbd685a87bb9ca118e4712b78eab7269cbc958ff29a820d1c49c1aa80843e0882376ec2659e683610630740bbc3702565c480e596279042c625298966ff0a79820f47330b78af6a8638f9a914d6bb0da8b4609bbd8d0a51cdacce6faf00dedbe7f4c294ba13e09", 0x7e}, {&(0x7f0000000d00)="be4df7df10973ebea00b1a482a11713bc8932c79133e64fe051bb91a05546cd9bff36dbe7cc27e904953eec4340c7c7c24f03b0c5b9e89177fc0fdb2f6c97c31a1a1c8883234b6ff5c3c8363cc001c2c9b3588a05a59067bfb72a12b3d9bec3b87e450a8dda4819e02deeaadd0e0343ce53b0297cb7e4ca3197c8628f183b5efd0fde5d0890eb0c526897ad4dee43a04c1f02c13b0ee25bcf2d363abf350ee288f01831dfe59e104039025b3a48eed23e4aab415a7630f18dae359ac697c975d", 0xc0}, {&(0x7f0000000dc0)="9994057ea5d69d88b996b510638aa0656ef5d0ee7061fb8a69ac0260c6837cfcb831a5c1e700c8fc413eedcc3a990768bb59e5fd0a87e12b6c6cf4dee30c84fd0b5b9d837126c44e5aa7cbd05744a49e49b5e7745d6fdc02c0d2c0e0e322e401cb62152c70f2a6c8b44ce8f9af", 0x6d}, {&(0x7f0000000e40)="64b59b6205322386be9d4e40fdf1e3e441a644e22b4716e4720ba3dac84d7b83488f07aeaf04da0641af9cc2f74fa6d66869e61afb761afdcc3e5131d257f68c9f08a95e31c669b7521e7f39f627e66222d7d8815f383f4ecd257d4fc346c7282bf3f950b8b91f8caf6840e9497161c71d1b5ae6592ebe82d0954eb2123c86092384ab3e98982fea209df8241a0e298ce63f14a06ba81616cccd4317193c9d2e4da9bcf02b4215ab451e15420fa59731101761f04450ccadc0ea1d8c1271146248a5fd7c46907b81c752cd35dff127b2db2525ae5509b0894c3e30", 0xdb}], 0x9, &(0x7f0000001000)=[@assoc={0x18, 0x117, 0x4, 0xa16}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x50, 0x117, 0x2, 0x35, "12787992d4a96483099fa1a930be5cb0789340a8858b3e40e16bc00af32cdb771b26f8e1f1d1ff25900b76e954ee7588649816455b"}], 0xc8, 0x11}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001100)="7c20e9a7cee41f1630350220aa2af1c6c4b509628739a884b52eec5e9bfc5ee662f3bec061f0012036f24596a2aef1640e4f5b5fa9f9adf43d8358af846c857ff901227721d6e2cbcfeabf6c818a39f78d2fe6c8064a407683dcbb01d135095510c058658cb8bae72e3f074f8332e716226db75c5a8217b5bdea8a2a581a0300d2abe1fe3c1de217b477a0", 0x8b}, {&(0x7f00000011c0)="1b13f43261a187017fd7b62f265540f01989a53c5a3f353d8939635df3c8d58e023afaad5ce41224e90d20384288cc1287e5c86fd2708e82917d413b01094dfb95f5754b064e", 0x46}, {&(0x7f0000001240)="689eeb6eac29eb129ba9", 0xa}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="21e113d5b9d1718df908494ee96c4cd5df98bf9471f35567d09d7797c0c7bd18490d02fe06ac1fb948b4d16ff8d2339fe636baf38b2837d3221a0ae993267dfce805f1159a579556afc049995c6a35628a4f55f432137da69a34471383779791dbe2e2e40c88782c35ffb2063520b138eaed78395925fe114c52c0b01463caedb0a51021ce56f2add2a9b2058c81672fa833fe50a2a3002dc868d71b1fc59fddf90c68b83378ee8fff2da24db4be79bbfd004269b923db10aa7ab458713b3ac49d", 0xc1}, {&(0x7f0000002380)="6d0c6c781ae384c423a9320d097109710197a998b28ea444f2992cdf2c5ee09b27edaac0628c4fbb788e9f380eaafe8a0c8b5845b6599af46ca7537b88d8f4dabe9d01588c69b00af0", 0x49}], 0x6, &(0x7f0000002480)=[@assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x6c8a}, @iv={0x68, 0x117, 0x2, 0x51, "347e421b1d58217dd2a7b0d27f3310544ebe3c65fc2f1786f0f196b6b829be92ef9255f45896c7f1a8cba14ce12be91ae0b0d682a4ad3809cc413b60135eac820499ab48469331cd56aa4e5d7d58cc8e5c"}, @iv={0xf8, 0x117, 0x2, 0xdf, "c6c6c5d264df92b16c47d23ce25fc40bbcb79f8c466a275e083c815d87242e72d78d25f7422a34c2ad2c811025627e8bb98d2acf99e9579f67951826f98246af3cce4ef16d91fdd7b76e68402defffd25607a180c5568f38e4291adc3eb2fbc9e2e0789fe506c05227f7da928eeef910bc76a480bd109b7f312ea8846f08b96a33d83bfbca49338b992b4f04055c912f47371d2fb88088a4d6f5cd8bf360a6debb1ee8925fa7902cb6e4ce44127738a031026eb09ade3a7fd9d8ad3aaebf2627fbaf9459546d2d5d01899f5530b1f92826359cc0429177ca0f0ec60089c5a0"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x1b, "2ba8ace83d4442990a9e9eae64cf44ed6b151a95a2da905a7c5bff"}, @iv={0x90, 0x117, 0x2, 0x7a, "a3d4d865e40b2d08f6d6eaed4290d9b9972ffe4ddc0424874f9dbe85082e3de641db879ff810b7d1661994910960275e16ad6dcf36f971fa08dd8fcf2769034ea473c61e89ef5955b9674824d16853f440766bf303d1d9c0ed608052bb90b22152eb9341b9569f0e91de919d10e93e0d58d92f601e0f28b4ec28"}], 0x2b0, 0x20008001}, {0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002740)="9b92d1e83ccdb24a3438cb1724cb3a5ec4ed3f4d8479d04acab5fd55ded1d4acb8050c1b4ae614d2bb1120a80fe5bcfd39974a53babd85806cebf55a37fe1f1d8b969ff464833df02c95e5afac9f34418804874f4ce3fbde5df623d4f434881cec3a72c384b427f6bf2c3677f5bfea482aeaf098cdc0788b1706ff6b398b908ea29d1d9b4cca42830a818285387bdf79c51e0438251f6332413809287d3c9afda492bc6a1162da253a2e7e08650aea270387ce70b7bd5595ed3b682e362432655b2c3bb47e7205db70f4995f67d4732f852f60e41bd358dfe187f44c87ad40", 0xdf}, {&(0x7f0000002840)="c4700f6a4b2a3ab8d8f7b07896f63635223633d87800a7b444fa9bf0b55f6d94563f45416bbcacd8a7ee7349d5edf977d183e406b092c2d41ed2d776f23139567b2e47943646ef4b720df05d0202543d7514d4b41aec0db7dc6adc9b7ee74c3e9ca7e5ea05bc9e", 0x67}], 0x2, &(0x7f0000002900)=[@assoc={0x18, 0x117, 0x4, 0xffffff81}, @iv={0x18}, @iv={0xd8, 0x117, 0x2, 0xbe, "f58d40d856180fcd17ff88ec15fd4c0d90010f730d60c927e931e9acafd78a1980a3a453c173e8801aa292f6e6ad27d74991e2049a9e55a327e33b3a9d4c00092331a020a583c6904cbaa1cd1494d8828a255425e8833be8d55575af0089890a726b737a2580c9dd1829ec13bdd5a467de3c069b093d936323129e6bb595b5298cc95db5b177540c7efda3a0db871cc8c9d0d326a550250dcdde05a173ac5298cf85647fae8f67313effc503ffe204f658b8c1ba79a5b8c34ebe886a13d3"}, @iv={0x30, 0x117, 0x2, 0x19, "1d5a664ca7c6b964320437c14045e4260a65183049d047e75a"}, @iv={0xc0, 0x117, 0x2, 0xa5, "1f85fca44b3c517b122b082a9e50060ddcc37755f468cda0d20f9d840cbc9af55d9e3680b468a6bb70a7bcffc7ce4d8d7394a4d519587a371a054f1a9b795837dfb249636ed3e31fc666d6423318fe7e6be8abc290896050fb0a32d3d55f187753991d32808f01212535f5978b67792bcae1e5b8d0d1d4612d874de0999d9cab718bfc577e59dc41d5beadac5a0a9da5c0b5bf81682b5ec3506aba76e6e9659fd4dba3d318"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x228, 0x40000}, {0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002b40)="5945a41d06d31cbf26f0460c6e234ae3e178de40dfc6aedad0a134904fa7b21736a1f6bd1b98ed1d6c248fddf420d4d1f477cc308d4583c8a90080f2cd96d1d7279e7f055d16a3c83a31adb7a6866cb095b7f6c40b0edfd75df354c4d347b2474d3f5e76c806b4910872f1e41e2d0e6765dcca4e2856a2364525f4fd3e93b5e8783fe4cd7ee05047b376ad904bab7070807e6130af9f262b255754ccd6e67403dbea16e732ea8c23c4159e2c07479d39a7dab9c064d415ef3d93155c64160c3cbff532cda6d50389d673f9a827ec71fa9e4c6886b29af87f1bfe66f2673d0bfca7df9607ba7430d9366325bcecd1abd0855d09dcd013c7ac2434b61c6235805003943aaa7a2eefca3a6a4fe4eac0f506e313e671319bac9f494b456bf5f15e33b937ed8d41694fb84d3b14afb5cf71902f5f8e0a7bf03c55fca92b2be732b438f5061638e622fbac55725d36a345eade55244120e1e4336b920a04d35df7ab797d73bc9837b76178a7e358d47263afe4864d056176ab0babeac133ab5dc3e6d1b523643461fc66434f627f5b4ae65a6f4daa441b8fbf25346ebddcc5c0947cb758da3d46d6ce2522cf7194a548e8117d2e793b1df40fae0378b97e6cccda573abeb49653b6c2724c70f1fcbc18d5bdc83c87c37f5a1a6aa75ff0cb73df41f2c1153ac6c1bd924d42e28ad14a122da4e13edbf89485265ddb9cc6ec860de7dcdea45abc215323ace4dea5c4b83e876a75e78efbb3d5440fd5820a3b2446174742e77cb1831ca326a8f6c8a521adcaaf0cdf13428b33011e0f39b5677372063a2c071548f3a94fcbe0281571c355930e653665e3f827a739335b19b79a6519dc4423fa4247f3fea35a5cd81773f7a7da8df15cb49c5ee591311adc73a87b247ae5867c0a20f963c878d07a9e28cc3295da498154f17ae4c50f44d0544df11bbd810dcdafa13232875f651c75824c2d45116f4f9f4954b6a68316243567edfb305fbc8cf00324a9a1b775699e9d99da42bd178902bfaa59f9b87165ef3a4fcdbd35082154425faa621d1e0c80161e50b2733f776b7561e3bd73993756a73186317fcc55c32b7e124922f13bf2f4ceaa2184b85d1a21f66813e978f30229ce4ac32a6b195ca288d9cee6487bb36311b712e58f4f03641e152241a65cba0c5fb8c657ec751afc0063db54735f7154451ed6bf8910f1180670fbf015de31d3f8d5e311fa70105d261771739dabfea15a5a20c0580a6b74e2a09deda5a1440d6456da94c4dfe9f505ae9ede6d2f8b2878edb4a9441486861136b9c521fca5855b816a8be160ba3b1476911a82a107f793dcfa13a64eed9186669e196a6af0d279f8a7c3852be7d600b52e4d666ff8a8ca9cdfb6acc2ed66ae2f558b78a915fb617facf7e17bbd64bb119d481af1c03920aa3c0be04d3de30185dfd1dbfad241ab9b070a4d7dbd414487068de52ddc9f8f42045ff90772b83b2c16c1db70a7bfce25e5df394fb1d1e469b584db74af1afe8b1300b12e99b7bcf2812dd614ef93a40379271f5611c0f66c5705cb77a7cd3a03990532e509a0235d3f771b5fe57f3c21fc7b1a4632443cb354da95da96705b634bcba0f524e6a236edf47ed9cf44b8a19d073c098e8817094893b54ac3f1d71463b9a8076b1df624bed794d4a2fe2fb219bcbf8d0830d5dd17e1da93bffb1969e6a1f0c558e1e24da9ed34393c6c116f211e0de896e18f29c0faf282dde87a5485982039c845bc91e74829da1774cd45826533b7e2e6c977a7250516d2e12df65af579366d38488121e1196f3fb255dd2b49d890ef6f1688e445ed507d1e6ef1ac765aecc611f7ea0b1cb11b95ca9ac0a1c0ebea0a9761dce48b2b790d409a11e2fc683b0e5c2add2127e9caafffe7bcc11c210670f9621f109f39562b0ee35776b89e8bcb73a3b4dff03c221fd8546b83655af51088b36c8030b30d54b3295da6b5d8346728ad509dcdcd970365bb1f8eb6e5fd98acbf711c3670313ce1fccb872d573f6ead9d3a4aeff0705722aa9e6b4f2fc3046c80d27831360628e71c0572a2ccb0a60fa0d1cd2dc00c66b8d1fd7ae11200237ff954c1479833da96c7312f7929785c79822c16669b378f423e54e84a78092fcef45a705478b5038f6182efc679ba3df41d823cc921ab9b2d6297823c55337181aeda9ca3822066d28f50f1d198c62175d6b4a24fb0de23f61615b532a241c3c6c72638718ba9c3606679764e83d850b9c6b6685c3540756ec04608c47826a0ca6dc7263c18aa04cfa924c8a1695ee9717e42f0eb9a0b97d7a9ea62c4355bcc0ffaaa41c41e19c1ae1b58cb7d6ccdad4bb5c92e5ca05acd23d80f3cdf048a064b9263d478417db202f0ce1f40e57eb5549f409ef24a5fc4e1e476f2a78369006419f43f1667973d912643a49e35396327c9bf4a93911c85640919808ce9fff5e2c2f5ab6307577cc21c1cc81bd636e7c5b5e64840206878933864396c82b7007482cabfcbb05e286756a10e9051e42726f2b23204291ab332427a3eae5482ea13d13464175de1a6b49649397301ae1554ce58c7d0dcbf8d7842b06efeb92fa8b09e96af94d18dc69d4b9caed56c6b877f58af6f624ca31e91a5e8dea90566bf1a316edc6e720722a3651a3c82fae55fe94b8ea83fab585c59add46ea03158cd00fa6387de3b172a05c95661bcb1fc6dc3fa05c7f3dfb4e35b6ebd19b66777640f2899555ad6ad9b6734bb0ca51b13e63029b38abd43f17c99bfb1eb404656771774afe0d849766da8385a2e91324edca419f9e57c39866f92fdaaa9fe9445c116944af0fda1e5cfaec2afce59c15028a3325fc279fb0bbc37e1aad3ae186fe3a637d21db8715d49755ebf9190acf0659eaecdbaaf3c0881d205c2f13e535650a7f86be4680a5201cf38b41d0b5ffa918ae49f622523c39977b2112a4b74242d0ea990a05f03b75654a97129977616a92adcb5fc4acb60d004f133e727df9b397bdac803e7174f327f1394af5864425add9c6e38fe190e34853be75691b66b660dc3e8312b60122aebaa9fa6076752cda3b59db238bc5f0e411b7e8804fd74c235e93277539ca3144ad5e50b9c8fb7312bc690f58a9b4b1b5bae3c7f84cbbbdd53f74ff0a36747c126be8753549e2fc8f65a649a7ae3e04d17929a1f64edfe5ed74e5bbe0396fb358beac82716cc429176e0c3a691576e08a8befe8fd2e4c79cba0607d804f7ad0dad0500eab82dcdc482e7d5c56718363e2eeb516714f9ac557e92eee421467a99a816aa612677b77d1a6742ff76848fb70ae8b840060a54dc54809002697c9f86b5937b2c01815beae3f5f1d0c1c87b4b8eb8e3deac4f778a2cf59c81ada9f4c727a600c4390b06c12c2e0ccc2d01ca8174fa524303da4e552b11018595dfbfc3cbcf745a5740cbc035668ab80eeaed8a6c9c189d60360f036c3a643183c682fc59dec954f46f85f41ae45894c3f6ba34ba33b38f10024fd16399a3fe6892bdef8075eabf79692aa529e29f8f9bfbc4a16ffb2c2884ad6c30c259e242d6920ee6166df456d0605bc258dc164e9eb77957a448047f8f8e3052b90f351d7c3ef2d63c64caa4aae6caf7c66e91c51cf57347cd5ef140310ea4e53831c7ae0ede85de768919e39963d6516f78776b1ea7b60c9752c0a9f66c38ce1164573fa05b543e79bab712015733f80fb4430afe7438d6676067294571640121b512aa421e11f0aa4e4a738b9cb41639faaf4bbdb52bc7cdea983e188f5baeb9971374d67f029ab929185da2fd6cd93aca7426a859793775dcfabfce7c6eda69c507eabcc6404134dec5b01476e039e02137aefde49687ee8dc5f0338fa801cee3e840ac13293a484fe30cf3535c2c6ed1d2a11876c7432a68cb7c75e5d038681114caefae26b04c0ea1338fd77b10e55f0b1aff35a04f0195f5f854452390ab8a5469eb42ccc42c8954a00e46c05b194a05c0b8c85a4e8479e34e6f66c31eee155e342d64b79a0655b245de61d69b3f9ccc4292ef2c9d7110a87ed097c1ad9fca367b0119dd41f75f79d67538fdafaed50be8970f64fcfc77498af6c9f4edfe168d4701ac82e6dc674b1f561235e6e9f77a7ac2795c3fdbfbb55f6d37f233a828ded192374fd3de774bbfb5d00d7615fb9689f965360d8372691f68f7dac159cacddda347df2fcbf009fc40296651cf5b96c8b23711cffa17bd71ff8c010d2f7ca2e458f2abbd2eee52fffb3a51d530dbaf164176959e359b92e7e741a8883d70576781d83992139ec223bc40a6059ff3ca23b5dc39924c64ab016a9fdbe84a49918fe08232fa2dcbe9ea67da393d75041f1860a57786f7e01864a35d1823f5bc486d5276b7dbc36f385db89a0bed008ea4fa30f1062695327e36f34b9199f421dfa3d4a0d5420a666779de2b591a89b518d5337b70818afbdf0864a68bb7bee4f288278ae6a160c61cf370c1c0ba5c90dca93d75f45044cda87c2efbf86d18b1a589584858d2c8f5df4ec3438961ab2093fc784943e6259e20412bee9e1fda6d3b37e54da3afc73a856b779befea759cd4cc52dc1e478f32194e6da52b8706e205d8e6c428bb1d448b480eb4a23b07dec8609984ba79a7c62d6a8f57e80a6c4350859544114fc74df934e4531be352b297ffc1fa0faf6e0d5e919f2a1b10cba6de86e9f51e6d711115bf784bd8bb0981f88f7376092087f3bb1d7a10db08215e44cb2b89e0bfd5dbec0cb8ff8987f5c85e61e319bae2448fecae4388d374ff145994a856a1523437660e0e6f5b76f9ff3cded975efd7d8005ebcbe01bc05a5de1f0317ff3f9c0ade9bed4f2502a401c3a4ab5082d86b1b44158b5a34dfafd0bac4090df40ffaa6f71387dd05963709e5f3377884e5cae37173b0e684f1282ce29c9416558a3b469f75967a299d4df4e656d3464a4aa02710c47c346b89ee0102e4d678d5c2faaedb527061a28c157f815cc852430404b7d3a4f98001e74b63e6af5a97e95898f0f386e33b9ccdfd0603cd49ebcb5195c2306d612cbf1475ad208f3a47a029daa077099fbb057ceb6b626f91befac418852e83154c7a580837ac6651811e34380fdaf2b757cbe60be3d0748642c127155b68c2d34e6188c7f74c2fdf391daccd8106b2a8efea8e7368ca380e71e1e9edb7e039d0ade957a5c08b8e1c600b6f1da3c2eac697f83f320ac4f67fa98e85377d23433e4b6848f8604a30f621085e9bda54a2cd266621df3d75b5f5fa141ba42d242d06d26f9f8a59e989c8d74ec7f0304bea52db409f7bde45b8cf1086d6143625a8da3d05e05c31e66e7d5d2cebab674304343df426e57eddac224b6d2507c85758806b590fa4c6240ab511aa15cdf99622673d0963936cf7e228a3dbcf7d361135b2d1d9bba86b423ab2978f7b19cf479be4fd1ba98a1282ece21666e7b90db9c67744e78d83cd713b5555e6b6e25c117692c9eeb65fe6ff0c00d53b98dcff3c45810f3fd6524f345609ca5410ee63549da7276944da798e4cf1d949cc1adadf9852d30afa591a465021048f4f5affcc9fb21c86a46127b81a02936a2cf7105edf65d7720060904f9022088a4e5b136930fb3ed5ef3dc0beab1410dbeba22bc602e556fada21f497095e4b9c664fdc93323c762de5988a95c8623dc726a0f08f08a85498464459fe48cfcf4f23e1f3d213f7ff3fa9e21fd591bf00359806ef7ccf5e681ca4f6a043e6ba175a67ccfedbde36860191198aba5b8239f774f93e6d4608ec2e328f76088bf87e2e16161daca8afdb6f27af8ec11581fce22fa22994c4d050", 0x1000}], 0x1, &(0x7f0000003b80)=[@assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x200}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0xb, "31bcfb17880130214cba4e"}], 0x10f8, 0x4008400}, {0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004c80)="7374a152e21b07fb3c45f5dd845d136a0851014d9c5b96a53044387b69e38d90786e322fd3daa79a7b090373645b70c41295e136f8238163ddaa54c2ee09fa44ed9bc271f85778f8c94cddc937f7a2331e39693e89430b47234f70450881b4c9fd2e5cbbda63a7eb474540bcc611862381d4b9125079b898ac142e83aef6c8aace71cd608e635fdc4252ccb283bf59941030485fae25289947406c370beee053613cba26ab6b61ad31fa03138d6c2d5711c995391e58d4566ef6998b9f3b77befd67fe09b9f801e619eb78c52d06ab3204dd83d8761a907d130e06", 0xdb}, {&(0x7f0000004d80)="29d5651302e0", 0x6}, {&(0x7f0000004dc0)="134c43a708f034eb87988fa0737d9ad7f5d85b2621b8586b0d", 0x19}], 0x3, &(0x7f0000004e40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x73}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}], 0x60, 0x4081}], 0x8, 0x20000000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.235067581s ago: executing program 3 (id=2571): syz_io_uring_setup(0x239, &(0x7f0000000a80)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffe) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x4f, 0xb00c0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x2, 0x14, 0x200, 0x3, "2bc0e81ee8cb79fc3578d71b1523a4e8173e2950fdb9adfb8454dfa7ab32ebc2"}) syz_usb_ep_read(r0, 0x1, 0x12, &(0x7f0000000080)=""/18) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x10000000000000e4, 0x0, 0x0) 3.566642322s ago: executing program 1 (id=2579): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async, rerun: 32) syz_usb_connect(0x4, 0x417, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x9, 0x4, 0x20, 0x1}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}]}) (async, rerun: 32) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"6ddca34e7e8c0eddc266c6e78b527c09bf09be9b8edbd39f5474b556d286b80c"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) r3 = getpid() r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.events\x00', 0x300, 0x0) preadv(r7, &(0x7f0000000140)=[{&(0x7f00000009c0)=""/231, 0xe7}], 0x1, 0x0, 0x0) (async) r8 = syz_pidfd_open(r3, 0x0) process_madvise(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="38bdb6", 0x3}, {0x0, 0x300}], 0x2, 0x19, 0x0) shutdown(r1, 0x1) (async, rerun: 64) recvmmsg(r2, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/23, 0x17}}], 0x1, 0x0, 0x0) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r11, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x4], 0x4000, 0x200201}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async, rerun: 64) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) r12 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (async) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r13, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r14}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2}, 0x0) (async, rerun: 32) ioctl$EVIOCSFF(r12, 0x40304580, &(0x7f0000000100)={0x51, 0xfffe, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) (rerun: 32) 3.425141181s ago: executing program 1 (id=2580): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000c747"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000f9ff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c00028008"], 0x34}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002400010000000000000000000000000006000300"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x163, &(0x7f0000000500)={@link_local, @random="8cbab4665a58", @void, {@ipv4={0x800, @igmp={{0x22, 0x4, 0x1, 0x2, 0x155, 0x66, 0x0, 0xaf, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, {[@lsrr={0x83, 0xb, 0x9b, [@broadcast, @private=0xa010101]}, @rr={0x7, 0x17, 0xba, [@multicast2, @rand_addr=0x64010102, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x47, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x4}, {@local, 0x2}, {@multicast1, 0x43f}, {@multicast2, 0x8}, {@local, 0x9}, {@local, 0x5}, {@private=0xa010102, 0xfffffff7}]}, @generic={0x82, 0xd, "0ded72c41da58278428124"}, @lsrr={0x83, 0x3, 0xc2}]}}, {0x1f, 0x2, 0x0, @multicast2, "3c6ddb8250db1bd887332560f11b2442bedb6d182de6ac9c98644cc827a88478ed3fe08e1fb194d03f64578c398af5bbd5629c3706ebe3b9fd514ecfd233dfde8c1081df72518931efdb6f7983d29ab6a7c6772b0c03c6b230348084fae275a79f783e2341fbd62e14510b6d8e092f3498a3f94960e4e94902002de8c7f102b6e3012a3d958fec1a9567f966c3fb3f4bd6c2f1fe7750a19fb246d6f65357d161142e1285b962a2be29d3e7e6339521f468edcea90af51993846e2c1136c04d60cb7d8cb6db"}}}}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/74, 0x1100000, 0x1000, 0x7, 0x1}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x0, @local}, 0x2}}, 0x26) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000a40)={&(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000340)=""/11, 0xb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x7, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x30}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xb0}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x800, 0x1) 3.210223231s ago: executing program 2 (id=2583): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc4, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1=0xe0000011, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, "00060088bb35"}}}}}, 0x0) 3.193263173s ago: executing program 1 (id=2584): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0xfffffffc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x20, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}}}, 0x24}}, 0x854) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4000}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {}, {0x5}, {}, 0xfffffffc, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x1, 0x6}, 0x8) timerfd_gettime(r1, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) pwritev2(r7, &(0x7f0000001440)=[{&(0x7f0000000500)="cf55181b32", 0x5}], 0x1, 0xfffffffe, 0x0, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x30a, @tick=0x5, 0x92, {0x6, 0x4}, 0x5, 0x1}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000600)={0x20, r9, 0x1cb6227dd50f0df, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 3.136838869s ago: executing program 2 (id=2585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async, rerun: 64) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009211c0000012208000905810300000000ff00"], 0x0) (rerun: 64) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x19, {[@main=@item_012={0x2, 0x0, 0x8, "9cec"}, @global=@item_4={0x3, 0x1, 0x5, "9e568b0d"}, @local=@item_4={0x3, 0x2, 0x0, "394b3cab"}, @local=@item_4={0x3, 0x2, 0x3, "a5f64e4f"}, @global=@item_4={0x3, 0x1, 0x2, "976137a1"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x24, 0x11, 0x0, 0x0, @binary="863c0c29d932bc949b553791c5e48ba1f4bed0cbdd123b7f262fe96987bc058b"}]}, 0x38}, 0x1, 0x3000000}, 0x40) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc252e30440f7aa65a00000000000000c199c20a00002000fe8000000000000000000000000000bb0000000000000000", @ANYRES32=r4, @ANYRES16=r4, @ANYRES64=r6], 0xf8}}, 0x800) (async) clock_adjtime(0x0, &(0x7f0000000140)={0x930b}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) (async) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000340)={&(0x7f0000000300), 0x0}) (async, rerun: 32) renameat2(r7, &(0x7f0000000140)='./file0/file0\x00', r8, 0x0, 0x1) (rerun: 32) r10 = io_uring_setup(0x1de0, &(0x7f0000000440)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x1c, 0x20000028, r11) (async) dup3(r8, r9, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff2000/0x8000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) (rerun: 32) 3.039470669s ago: executing program 1 (id=2587): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x0, 0x85, "4b17e675b38be3d2c7f3008022943c6acaf696", 0xfffffffc, 0x10000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, 0xffffffffffffffff, 0x285f2000) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) syz_emit_vhci(0x0, 0x7) poll(0x0, 0x0, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd7d, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x2ee85000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x1ff, &(0x7f0000000340)=0xfffffffeffffffff, &(0x7f0000000000)=0x1) munlock(&(0x7f00001f1000/0x2000)=nil, 0x2000) poll(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) userfaultfd(0x80000) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 2.898949226s ago: executing program 0 (id=2589): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x100, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xffffff8d, &(0x7f0000002800)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0xfffffff5, @mcast2, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="834a9034a35f99173aeb1fb053e849892c8132d953623b9ffd4d1e8b9fc06b45f357386621198a0c64307876481ab65b1b0c1e6107004478ca970caa5581a42b61fdf443adedecd2d5846734caeb90a1d3b91a78b3154bfa22bcd4c1cf302ea92e0ed16e84b3ce463e7120dcb89f453e6eabc68590b41e523012c130527cab0bb63285f38af305851c", 0x89}, {&(0x7f00000002c0)="2820c7e5cb89ef355d7d7d3ac48ba0fc5f04d72917698fcac65ef4f29000c633a6b4dd5c4813bdbcad049bf2f64778f3b9c014db563374ee8e2ae4e0d19af440029b68a8cdfd909df9d8dd19e7110877c7ad26f5ed690d2ddc2b92cc2ba4cf0b5203f099fb589b2925da170e99f93e5d73a38c2cbe5f00d7", 0x78}], 0x2}}], 0x2, 0x0) 2.896514775s ago: executing program 0 (id=2590): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r2 = epoll_create(0x1) r3 = dup3(r1, r2, 0x0) read$FUSE(r3, &(0x7f0000002900)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004980)={0x2020}, 0x2020) r4 = socket(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000180)={0xb0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) recvmmsg$unix(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r4, &(0x7f0000000000)="14000080a000080000000000", 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xeee8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 1.991207609s ago: executing program 0 (id=2591): r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5432, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000100)=0x2, 0x4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3e4}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f00000006c0)={0x93, "3a8200000001000000000000ccfee2eb0743566cae263b15c2f84739a139c9159faf9cc001a456d58af0fe8e4c83330b72c79fb39f73207d580a1548eb5478a546606b47eac931b088f4be8dbfd9028a5e1d110fba01b468260aea57827d6b7cd33031ce36ca8fff3e96d9023787539521c67277e92f0b539196b5a4c85e805fea217be69f5be7fa4486669b1a72518eaf2096"}) r7 = socket$kcm(0x10, 0x2, 0x4) io_setup(0x22, &(0x7f00000003c0)=0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x87, 0x2, 0x0, r9, 0x0, 0x55}]) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000001200)=""/4096) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.922873078s ago: executing program 0 (id=2592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "d102ec1fd3fb445e6e9da35ebc62d3f8cfcc9aff7060ebeaeb5d429fa85456a11a93eabf240b4e33b6e2d0efe63dfc0efdde1e6a417ed21d14f1a4a84a515381", 0x23}, 0x48, r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r4, &(0x7f0000000300)=""/40, 0x28, 0xb76) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 1.754605646s ago: executing program 0 (id=2593): getitimer(0x1, &(0x7f0000000000)) (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00', @ANYBLOB="010000", @ANYBLOB='Q'], 0x70}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000004c000000030a01010000000000000000010000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0xa8}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffffa1, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_NAT]}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x8000, 0x7f40, 0x1000, 0x8000, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010101, {[@end]}}}}}) (async) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000880)={@multicast1, @remote, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x14c, 0x0, 0xb00, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14, 0x10}}, 0x78}}, 0x0) (async) r11 = getgid() mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x10000, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xa3}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'syz0\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) r12 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r12, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000080), &(0x7f0000000040)=0x4) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r12, 0x0, 0x489, &(0x7f00000000c0)={{0x73, @loopback, 0x4e23, 0x2, 'ovf\x00', 0x4, 0x2, 0x47}, {@private=0xa010102, 0x4e22, 0x1, 0x0, 0x6, 0x7}}, 0x44) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfc300000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.754247211s ago: executing program 4 (id=2594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = timerfd_create(0x0, 0x0) r3 = dup2(r1, r2) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f000085a000/0x1000)=nil, 0x1000}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001d005fd60000000000000000010200000c0006"], 0x20}}, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc040480c, &(0x7f0000000b80)={0x0, "80e21d3f6c946c4b77ca1ec78558619c83df381ea2e6acaaedabfbe5f9695fd2d5e3b1577598bb5b0f3bc3bccd35091df07c0d5633c59fc830306b2e5454126f"}) 1.653473706s ago: executing program 0 (id=2595): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='decodes'], 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2d8}}, {{@uncond, 0xc0, 0x100, 0x0, {0x0, 0x1e03}}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2c3bb27d9d5b379b853c7744b526e29755ec721db80fdb00f95f8a608b8d"}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@alu={0x7, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = openat$cuse(0xffffff9c, &(0x7f0000002380), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x1295) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='map_files\x00') fchdir(r7) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) socket(0x2a, 0x2, 0x0) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010014"], 0xfdef) lseek(r4, 0xae7e, 0x0) read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x203e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0xffffffea}, 0x0) syz_usb_disconnect(r0) 1.529257318s ago: executing program 2 (id=2596): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b38090987f70e06d038e7ff7fc6e5539b5064078b089b0e083863090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b34300d3b6d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fa2fe6cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc78f2c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eca5aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a93bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0772a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xffffffffffffffc8}}, 0xf60) socket(0x22, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xa) move_mount(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x165) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x11, 0x148, 0xd8, 0x10, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6, 0x9c0, 0x0, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x8, 0x3}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1, 0x3}, {0x0, [0x0, 0x6, 0x0, 0x0, 0x6], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 1.094950921s ago: executing program 3 (id=2597): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540100001000130700000000000000ff0200000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000132000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) 1.032863183s ago: executing program 3 (id=2598): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000240)={{0x1}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x6ad) read$FUSE(r1, &(0x7f0000007380)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r7 = getpid() r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="8520", 0x35880}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="1205ab58"], 0x38}, 0x41) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000c0c005006c0012800b00010062726964676500005c0002800600270006000000050026000100000005002c000100000008001d002b89000008001c"], 0x94}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000000)={r11, 0x308, 0x30, 0x1, 0x9}, &(0x7f0000000100)=0x18) 950.895426ms ago: executing program 3 (id=2599): mount$fuse(0x0, 0x0, 0x0, 0x100002, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000004000000010000007500000041220100", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe40, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 846.456853ms ago: executing program 3 (id=2600): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfce) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 611.84861ms ago: executing program 2 (id=2601): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000004c0)=@in={0x2, 0x4e22, @broadcast}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000e80)="f0843adf9b4454ab165464c0f819fd6d0224bc2bdec97bbd106688c747db3c684e7bd4fe038894d6cf01ffbaad8fa30a6e29d3f7c0484f16a09e91d19373968c7d3aa950b965ac1613bbc3eeabf93302d3da550254097cd1ac09356fa7a8e167a372aa29da07c0ce6d4bc282b841db0d0e", 0x71}], 0x1}, 0x48805) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = eventfd2(0x0, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107400000000000400000000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000030100c0"]) r5 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x5dd0}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x12) syz_usb_connect(0x0, 0x51, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x3b, 0x24, 0x27, 0x20, 0x763, 0x1002, 0xae89, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x85, 0xbf, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r0}, 0x18) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 411.719088ms ago: executing program 1 (id=2602): r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5432, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000100)=0x2, 0x4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3e4}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$HIDIOCGRDESC(r0, 0x4030582a, &(0x7f00000006c0)={0x93, "3a8200000001000000000000ccfee2eb0743566cae263b15c2f84739a139c9159faf9cc001a456d58af0fe8e4c83330b72c79fb39f73207d580a1548eb5478a546606b47eac931b088f4be8dbfd9028a5e1d110fba01b468260aea57827d6b7cd33031ce36ca8fff3e96d9023787539521c67277e92f0b539196b5a4c85e805fea217be69f5be7fa4486669b1a72518eaf2096"}) r7 = socket$kcm(0x10, 0x2, 0x4) io_setup(0x22, &(0x7f00000003c0)=0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x87, 0x2, 0x0, r9, 0x0, 0x55}]) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 347.257678ms ago: executing program 1 (id=2603): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0x84, 0x9d, 0x20, 0x1d6f, 0x10, 0xaa7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xef, 0x4, 0x1}}]}}]}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x34008000}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x13, &(0x7f0000000580)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a94d74ec61fe94a03976ac0babac43c8"}]}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b00"/11, @ANYBLOB='\aX'], 0x20) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 198.760829ms ago: executing program 4 (id=2604): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b0102030109022400010000000009040000023c7f98000905030200000000000905ba", @ANYBLOB="d385b75ce2e714987792e674d73a3f37c0a479b29ac577b0a2991bcb361955da2fd630c29ef52b720d5658aa6e798e6b315d8bf12aa1b3334daf048b59a4c3f9a362d6cfa2b46f36cb4547d19fc734414255b5"], 0x0) 0s ago: executing program 3 (id=2605): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f00000002c0), 0x200400, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = signalfd4(r0, &(0x7f0000000100), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x9) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x1000042, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote={0xa}}, 0x10, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000021c0)={0x18, 0xfffffffffffffffe, r5, {0x20000c}}, 0x18) read$FUSE(r3, 0x0, 0x0) write$FUSE_IOCTL(r3, 0x0, 0x0) lstat(&(0x7f0000008800)='./file0\x00', 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000001000001ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r9) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="0100"]) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x3, 0x100, 0xd}) kernel console output (not intermixed with test programs): .035763][T13189] tipc: Enabled bearer , priority 10 [ 409.043414][T13189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.053311][T13189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.073323][ T5288] usb 2-1: USB disconnect, device number 74 [ 409.086783][T13170] FAULT_INJECTION: forcing a failure. [ 409.086783][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 409.099807][T13170] CPU: 1 UID: 0 PID: 13170 Comm: syz.3.2182 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 409.110253][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 409.120321][T13170] Call Trace: [ 409.123591][T13170] [ 409.126511][T13170] dump_stack_lvl+0x241/0x360 [ 409.131189][T13170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.136377][T13170] ? __pfx__printk+0x10/0x10 [ 409.140961][T13170] ? fs_reclaim_acquire+0x93/0x140 [ 409.146068][T13170] ? __pfx___might_resched+0x10/0x10 [ 409.151350][T13170] should_fail_ex+0x3b0/0x4e0 [ 409.156037][T13170] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 409.161761][T13170] should_failslab+0xac/0x100 [ 409.166444][T13170] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 409.172161][T13170] __kmalloc_noprof+0xd8/0x400 [ 409.176930][T13170] tomoyo_realpath_from_path+0xcf/0x5e0 [ 409.182481][T13170] tomoyo_path_number_perm+0x23a/0x880 [ 409.187946][T13170] ? tomoyo_path_number_perm+0x208/0x880 [ 409.193586][T13170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 409.199617][T13170] ? __fget_files+0x29/0x470 [ 409.204203][T13170] ? __fget_files+0x3f3/0x470 [ 409.208885][T13170] security_file_ioctl+0xc6/0x2a0 [ 409.214003][T13170] __se_sys_ioctl+0x47/0x170 [ 409.218600][T13170] do_syscall_64+0xf3/0x230 [ 409.223111][T13170] ? clear_bhb_loop+0x35/0x90 [ 409.227969][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.233863][T13170] RIP: 0033:0x7f905897df39 [ 409.238277][T13170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.257885][T13170] RSP: 002b:00007f90597e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.266309][T13170] RAX: ffffffffffffffda RBX: 00007f9058b35f80 RCX: 00007f905897df39 [ 409.274287][T13170] RDX: 0000000020000b80 RSI: 00000000c040480c RDI: 0000000000000004 [ 409.282259][T13170] RBP: 00007f90597e6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.290226][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.298192][T13170] R13: 0000000000000000 R14: 00007f9058b35f80 R15: 00007f9058c5fa28 [ 409.306182][T13170] [ 409.309342][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.329073][T13170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 409.603770][T13203] pimreg: entered allmulticast mode [ 409.622143][T13203] pimreg: left allmulticast mode [ 409.970303][ T46] usb 3-1: USB disconnect, device number 76 [ 410.157165][ T1769] tipc: Node number set to 1440327724 [ 410.167205][ T5288] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 410.334541][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 410.350534][ T5288] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 410.365795][ T5288] usb 2-1: can't read configurations, error -61 [ 410.495304][ T5288] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 410.665717][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 410.692088][ T5288] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 410.714493][ T5288] usb 2-1: can't read configurations, error -61 [ 410.733043][ T5288] usb usb2-port1: attempt power cycle [ 410.760763][T12645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.779409][T12645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.787618][T12645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.800066][T12645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.805905][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 410.805921][ T29] audit: type=1326 audit(1727364123.078:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008417df39 code=0x7fc00000 [ 410.807482][ T8958] usb 4-1: USB disconnect, device number 74 [ 410.843985][T12645] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 410.851928][T12645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.104475][ T5288] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 411.146388][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 411.153631][ T5288] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 411.161277][ T5288] usb 2-1: can't read configurations, error -61 [ 411.170923][T13237] chnl_net:caif_netlink_parms(): no params data found [ 411.285897][T13241] pimreg: entered allmulticast mode [ 411.294465][ T5288] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 411.315323][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 411.322506][ T5288] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 411.330529][ T5288] usb 2-1: can't read configurations, error -61 [ 411.337307][ T5288] usb usb2-port1: unable to enumerate USB device [ 411.395639][T13237] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.409754][T13237] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.421962][T13237] bridge_slave_0: entered allmulticast mode [ 411.430590][T13237] bridge_slave_0: entered promiscuous mode [ 411.448487][T13237] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.468995][T13237] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.486937][T13237] bridge_slave_1: entered allmulticast mode [ 411.511290][T13237] bridge_slave_1: entered promiscuous mode [ 411.560039][T13237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.591674][T13237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.626342][T13230] pimreg: left allmulticast mode [ 411.682974][T13237] team0: Port device team_slave_0 added [ 411.700020][T13237] team0: Port device team_slave_1 added [ 411.733262][T13237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.741145][T13237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.780593][T13237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.796859][T13237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.811253][T13237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.843219][T13237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.911658][T13237] hsr_slave_0: entered promiscuous mode [ 411.929280][T13237] hsr_slave_1: entered promiscuous mode [ 411.941766][T13237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.959031][T13237] Cannot create hsr debugfs directory [ 412.016470][T13247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2198'. [ 412.135258][T13237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.221489][T13237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.274531][T13237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.331059][T13237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.364094][ T5444] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 412.437855][T13237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.448103][T13237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 412.459021][T13237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.471260][T13237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 412.529378][ T5444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.542450][T13237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.558832][ T5444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.569064][ T5444] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 412.578386][ T5444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.590888][ T5444] usb 4-1: config 0 descriptor?? [ 412.610384][T13237] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.623761][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.630908][T11153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.645435][T11159] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.652552][T11159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.702678][T13237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.738511][T13237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.780389][T13237] veth0_vlan: entered promiscuous mode [ 412.795760][T13237] veth1_vlan: entered promiscuous mode [ 412.807005][ T5444] zydacron 0003:13EC:0006.001B: unknown main item tag 0x0 [ 412.827994][ T5444] zydacron 0003:13EC:0006.001B: unknown main item tag 0x0 [ 412.842679][T13237] veth0_macvtap: entered promiscuous mode [ 412.848874][ T5444] zydacron 0003:13EC:0006.001B: unknown main item tag 0x0 [ 412.857754][ T5444] zydacron 0003:13EC:0006.001B: unknown main item tag 0x0 [ 412.862958][T13237] veth1_macvtap: entered promiscuous mode [ 412.865061][ T5444] zydacron 0003:13EC:0006.001B: unknown main item tag 0x0 [ 412.885975][ T5444] zydacron 0003:13EC:0006.001B: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 412.892435][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.919164][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.934918][ T5247] Bluetooth: hci3: command tx timeout [ 412.937044][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.962995][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.973350][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.984164][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.994589][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.007494][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.023117][ T1769] usb 4-1: USB disconnect, device number 75 [ 413.032782][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.054454][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.069453][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.080981][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.092490][T13237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.107083][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.124653][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.144368][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.163871][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.174088][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.194381][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.205717][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.217360][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.227303][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.237865][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.247768][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.262419][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.276512][T13237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.296270][T13237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.306392][T13237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.315552][T13237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.325435][T13237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.421543][T11159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.436540][ T29] audit: type=1326 audit(1727364125.708:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.4.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008417df39 code=0x7fc00000 [ 413.451917][T11159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.496705][T11153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.508884][T11153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.600915][T13263] IPVS: length: 136 != 24 [ 413.774465][ T5238] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 413.884511][ T1769] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 413.933784][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.955640][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.970627][ T5238] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.994537][ T5238] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 414.011733][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.025954][ T5238] usb 2-1: config 0 descriptor?? [ 414.042481][ T1769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.058777][ T1769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.070342][ T1769] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.087584][ T1769] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 414.104385][ T1769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.123361][ T1769] usb 4-1: config 0 descriptor?? [ 414.267569][T13274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2208'. [ 414.475720][ T5238] acrux 0003:1A34:0802.001C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 414.513750][ T5238] acrux 0003:1A34:0802.001C: no inputs found [ 414.520127][ T5238] acrux 0003:1A34:0802.001C: Failed to enable force feedback support, error: -19 [ 414.557356][ T1769] acrux 0003:1A34:0802.001D: hidraw1: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 414.581975][ T1769] acrux 0003:1A34:0802.001D: no inputs found [ 414.591579][ T1769] acrux 0003:1A34:0802.001D: Failed to enable force feedback support, error: -19 [ 414.649236][T13286] bond0: entered promiscuous mode [ 414.660397][T13286] bond_slave_0: entered promiscuous mode [ 414.674230][T13286] bond_slave_1: entered promiscuous mode [ 414.687446][T13286] bond0: left promiscuous mode [ 414.692668][T13286] bond_slave_0: left promiscuous mode [ 414.698928][T13286] bond_slave_1: left promiscuous mode [ 414.796317][T13291] FAULT_INJECTION: forcing a failure. [ 414.796317][T13291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.824479][T13291] CPU: 0 UID: 0 PID: 13291 Comm: syz.3.2205 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 414.834953][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 414.845037][T13291] Call Trace: [ 414.848340][T13291] [ 414.851302][T13291] dump_stack_lvl+0x241/0x360 [ 414.856198][T13291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.861440][T13291] ? __pfx__printk+0x10/0x10 [ 414.866054][T13291] ? __pfx_lock_release+0x10/0x10 [ 414.871090][T13291] ? __lock_acquire+0x1384/0x2050 [ 414.876120][T13291] should_fail_ex+0x3b0/0x4e0 [ 414.880802][T13291] _copy_from_user+0x2f/0xe0 [ 414.885394][T13291] kstrtouint_from_user+0xc6/0x190 [ 414.890502][T13291] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 414.896222][T13291] ? __pfx_lock_acquire+0x10/0x10 [ 414.901266][T13291] proc_fail_nth_write+0xaa/0x2d0 [ 414.906291][T13291] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 414.912196][T13291] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.917835][T13291] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.923468][T13291] vfs_write+0x29c/0xc90 [ 414.927735][T13291] ? __pfx_vfs_write+0x10/0x10 [ 414.932506][T13291] ? __fget_files+0x3f3/0x470 [ 414.937198][T13291] ? fdget_pos+0x24e/0x320 [ 414.941615][T13291] ksys_write+0x183/0x2b0 [ 414.945952][T13291] ? __pfx_ksys_write+0x10/0x10 [ 414.950802][T13291] ? do_syscall_64+0x100/0x230 [ 414.955574][T13291] ? do_syscall_64+0xb6/0x230 [ 414.960285][T13291] do_syscall_64+0xf3/0x230 [ 414.964796][T13291] ? clear_bhb_loop+0x35/0x90 [ 414.969490][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.975393][T13291] RIP: 0033:0x7f905897ca1f [ 414.979804][T13291] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 414.999417][T13291] RSP: 002b:00007f90597c5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 415.007844][T13291] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f905897ca1f [ 415.015830][T13291] RDX: 0000000000000001 RSI: 00007f90597c50a0 RDI: 0000000000000005 [ 415.023819][T13291] RBP: 00007f90597c5090 R08: 0000000000000000 R09: 0000000000000000 [ 415.031797][T13291] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 415.039770][T13291] R13: 0000000000000001 R14: 00007f9058b36058 R15: 00007f9058c5fa28 [ 415.047758][T13291] [ 415.055493][ T5247] Bluetooth: hci3: command tx timeout [ 415.096073][T13293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2215'. [ 415.109682][T13293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.129057][T13293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.092128][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'. [ 416.124516][ T1769] usb 4-1: reset high-speed USB device number 76 using dummy_hcd [ 416.142902][ T1769] usb 4-1: device reset changed ep0 maxpacket size! [ 416.165832][ T46] usb 4-1: USB disconnect, device number 76 [ 416.301414][T13308] FAULT_INJECTION: forcing a failure. [ 416.301414][T13308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.315542][T13308] CPU: 1 UID: 0 PID: 13308 Comm: syz.1.2221 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 416.325997][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 416.336078][T13308] Call Trace: [ 416.339375][T13308] [ 416.342323][T13308] dump_stack_lvl+0x241/0x360 [ 416.347030][T13308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.352342][T13308] ? __pfx__printk+0x10/0x10 [ 416.356958][T13308] ? __pfx_lock_release+0x10/0x10 [ 416.362009][T13308] should_fail_ex+0x3b0/0x4e0 [ 416.366716][T13308] _copy_from_user+0x2f/0xe0 [ 416.371326][T13308] copy_msghdr_from_user+0xae/0x680 [ 416.376544][T13308] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 416.382361][T13308] __sys_sendmsg+0x22d/0x380 [ 416.386951][T13308] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.392072][T13308] ? __pfx_vfs_write+0x10/0x10 [ 416.396870][T13308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 416.403208][T13308] ? do_syscall_64+0x100/0x230 [ 416.407972][T13308] ? do_syscall_64+0xb6/0x230 [ 416.412645][T13308] do_syscall_64+0xf3/0x230 [ 416.417145][T13308] ? clear_bhb_loop+0x35/0x90 [ 416.421830][T13308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.427725][T13308] RIP: 0033:0x7f2d3f57df39 [ 416.432138][T13308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.451739][T13308] RSP: 002b:00007f2d403b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.460147][T13308] RAX: ffffffffffffffda RBX: 00007f2d3f735f80 RCX: 00007f2d3f57df39 [ 416.468114][T13308] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 416.476095][T13308] RBP: 00007f2d403b4090 R08: 0000000000000000 R09: 0000000000000000 [ 416.484261][T13308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.492245][T13308] R13: 0000000000000000 R14: 00007f2d3f735f80 R15: 00007f2d3f85fa28 [ 416.500248][T13308] [ 416.524134][ T46] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 416.562997][ T8958] usb 2-1: USB disconnect, device number 79 [ 416.704625][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 416.737921][ T46] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 416.765828][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.786885][ T46] usb 4-1: Product: syz [ 416.798759][ T46] usb 4-1: Manufacturer: syz [ 416.808078][ T46] usb 4-1: SerialNumber: syz [ 416.823976][ T46] usb 4-1: config 0 descriptor?? [ 416.841689][ T46] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 417.008966][T13321] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2226'. [ 417.095913][ T5247] Bluetooth: hci3: command tx timeout [ 417.295604][ T6684] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 417.442759][T13334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2230'. [ 417.479282][ T6684] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 417.505942][ T6684] usb 3-1: config 0 has no interface number 0 [ 417.532744][ T46] gspca_ov534_9: reg_w failed -71 [ 417.533705][ T6684] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.598968][ T6684] usb 3-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 417.646760][ T6684] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 417.661325][ T6684] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 417.671627][ T6684] usb 3-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.673615][T13342] tc_dump_action: action bad kind [ 417.705418][ T6684] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 417.722601][ T6684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.741507][ T6684] usb 3-1: Product: syz [ 417.775056][ T6684] usb 3-1: Manufacturer: syz [ 417.788686][ T6684] usb 3-1: SerialNumber: syz [ 417.805639][ T6684] usb 3-1: config 0 descriptor?? [ 417.812686][T13328] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 417.846094][ T6684] ums-alauda 3-1:0.189: USB Mass Storage device detected [ 417.901745][ T6684] scsi host1: usb-storage 3-1:0.189 [ 417.954697][ T46] gspca_ov534_9: Unknown sensor 0000 [ 417.954771][ T46] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 418.041973][ T5288] usb 3-1: USB disconnect, device number 77 [ 418.074699][ T46] usb 4-1: USB disconnect, device number 77 [ 418.508562][T13371] sock: sock_timestamping_bind_phc: sock not bind to device [ 418.688623][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 418.740295][T13382] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2244'. [ 419.049335][T13399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.118556][T13397] pimreg: entered allmulticast mode [ 419.176314][ T5247] Bluetooth: hci3: command tx timeout [ 419.230622][T13401] program syz.4.2251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.258395][T13397] pimreg: left allmulticast mode [ 419.574521][ T5444] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 419.736409][ T5444] usb 3-1: Using ep0 maxpacket: 32 [ 419.756666][ T5444] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 419.781059][ T29] audit: type=1326 audit(1727364132.048:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3f57df39 code=0x7fc00000 [ 419.807203][ T5444] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 419.817211][ T5444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.844410][ T5444] usb 3-1: Product: syz [ 419.854502][ T5444] usb 3-1: Manufacturer: syz [ 419.859661][ T5444] usb 3-1: SerialNumber: syz [ 419.879915][ T5444] usb 3-1: config 0 descriptor?? [ 419.887797][T13407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 419.900351][ T5444] hub 3-1:0.0: bad descriptor, ignoring hub [ 419.906803][ T5444] hub 3-1:0.0: probe with driver hub failed with error -5 [ 419.922871][ T5444] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 420.142424][ T5444] usb 3-1: USB disconnect, device number 78 [ 420.148394][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 420.555937][ T29] audit: type=1326 audit(1727364132.828:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3f57df39 code=0x7fc00000 [ 420.977648][ T5444] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 421.160391][T13477] FAULT_INJECTION: forcing a failure. [ 421.160391][T13477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.185699][ T5444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.204925][ T5444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.215405][T13477] CPU: 0 UID: 0 PID: 13477 Comm: syz.2.2276 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 421.225861][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.235948][T13477] Call Trace: [ 421.239254][T13477] [ 421.242209][T13477] dump_stack_lvl+0x241/0x360 [ 421.246922][T13477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.252179][T13477] ? __pfx__printk+0x10/0x10 [ 421.256820][T13477] should_fail_ex+0x3b0/0x4e0 [ 421.261531][T13477] _copy_from_user+0x2f/0xe0 [ 421.266164][T13477] move_addr_to_kernel+0x82/0x150 [ 421.271234][T13477] __sys_sendto+0x29f/0x4f0 [ 421.275779][T13477] ? __pfx___sys_sendto+0x10/0x10 [ 421.280857][T13477] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 421.286880][T13477] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.293247][T13477] ? exc_page_fault+0x590/0x8c0 [ 421.298132][T13477] __x64_sys_sendto+0xde/0x100 [ 421.302927][T13477] do_syscall_64+0xf3/0x230 [ 421.307464][T13477] ? clear_bhb_loop+0x35/0x90 [ 421.312173][T13477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.318104][T13477] RIP: 0033:0x7f253837fdcc [ 421.322542][T13477] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 421.342181][T13477] RSP: 002b:00007f2537dfdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 421.350635][T13477] RAX: ffffffffffffffda RBX: 00007f2537dfdfc0 RCX: 00007f253837fdcc [ 421.358636][T13477] RDX: 0000000000000020 RSI: 00007f2537dfe010 RDI: 0000000000000003 [ 421.366642][T13477] RBP: 0000000000000000 R08: 00007f2537dfdf14 R09: 000000000000000c [ 421.374643][T13477] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 421.382666][T13477] R13: 00007f2537dfdf68 R14: 00007f2537dfe010 R15: 0000000000000000 [ 421.390685][T13477] [ 421.397245][ T5444] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.411477][ T5444] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 421.421797][ T5444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.434819][ T1769] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 421.449404][ T5444] usb 2-1: config 0 descriptor?? [ 421.472345][T13452] coredump: 111(syz.3.2269): written to core: VMAs: 38, size 93614080; core: 56026278 bytes, pos 93622272 [ 421.516945][T13482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.529914][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.538777][T13482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.560862][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.614679][ T1769] usb 4-1: Using ep0 maxpacket: 16 [ 421.621300][ T1769] usb 4-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 421.644409][ T1769] usb 4-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 421.660196][ T1769] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.672794][ T1769] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 421.694449][ T1769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.702532][ T1769] usb 4-1: Product: syz [ 421.714717][ T1769] usb 4-1: Manufacturer: syz [ 421.719389][ T1769] usb 4-1: SerialNumber: syz [ 421.736606][ T1769] usb 4-1: config 0 descriptor?? [ 421.874640][ T6684] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 421.914563][ T5444] acrux 0003:1A34:0802.001E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 421.948118][ T5444] acrux 0003:1A34:0802.001E: no inputs found [ 421.956160][T13491] FAULT_INJECTION: forcing a failure. [ 421.956160][T13491] name failslab, interval 1, probability 0, space 0, times 0 [ 421.958275][ T5444] acrux 0003:1A34:0802.001E: Failed to enable force feedback support, error: -19 [ 422.014377][T13491] CPU: 1 UID: 0 PID: 13491 Comm: syz.0.2284 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 422.024854][T13491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.034973][T13491] Call Trace: [ 422.038268][T13491] [ 422.041213][T13491] dump_stack_lvl+0x241/0x360 [ 422.045898][T13491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.051102][T13491] ? __pfx__printk+0x10/0x10 [ 422.055722][T13491] ? fs_reclaim_acquire+0x93/0x140 [ 422.060837][T13491] ? __pfx___might_resched+0x10/0x10 [ 422.066135][T13491] ? lockdep_init_map_type+0xa1/0x910 [ 422.071547][T13491] should_fail_ex+0x3b0/0x4e0 [ 422.076267][T13491] ? security_inode_alloc+0x32/0x310 [ 422.080587][T13494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.081629][T13491] should_failslab+0xac/0x100 [ 422.094657][T13491] ? security_inode_alloc+0x32/0x310 [ 422.099972][T13491] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 422.105380][T13491] security_inode_alloc+0x32/0x310 [ 422.110534][T13491] inode_init_always+0x966/0xcb0 [ 422.115509][T13491] ? __pfx_sock_alloc_inode+0x10/0x10 [ 422.120928][T13491] new_inode_pseudo+0x9e/0x1a0 [ 422.125724][T13491] __sock_create+0x123/0x920 [ 422.130360][T13491] mptcp_subflow_create_socket+0x132/0xdf0 [ 422.131577][ T6684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.136189][T13491] ? mark_lock+0x9a/0x360 [ 422.136221][T13491] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 422.136246][T13491] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.136276][T13491] __mptcp_nmpc_sk+0x178/0x800 [ 422.168076][T13491] ? __local_bh_enable_ip+0x168/0x200 [ 422.173471][T13491] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 422.178779][T13491] mptcp_setsockopt+0xf69/0x3bc0 [ 422.183904][T13491] ? aa_sk_perm+0x96d/0xab0 [ 422.188414][T13491] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 422.193795][T13491] ? __pfx_aa_sk_perm+0x10/0x10 [ 422.198657][T13491] ? __pfx_lock_acquire+0x10/0x10 [ 422.203693][T13491] ? __fget_files+0x29/0x470 [ 422.208284][T13491] ? aa_sock_opt_perm+0x79/0x120 [ 422.213219][T13491] ? sock_common_setsockopt+0x37/0xc0 [ 422.218595][T13491] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 422.224489][T13491] do_sock_setsockopt+0x3af/0x720 [ 422.229533][T13491] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 422.235105][T13491] ? __fget_files+0x29/0x470 [ 422.239706][T13491] ? __fget_files+0x3f3/0x470 [ 422.244385][T13491] ? __fget_files+0x29/0x470 [ 422.248981][T13491] __sys_setsockopt+0x1a2/0x250 [ 422.253840][T13491] __x64_sys_setsockopt+0xb5/0xd0 [ 422.258873][T13491] do_syscall_64+0xf3/0x230 [ 422.263385][T13491] ? clear_bhb_loop+0x35/0x90 [ 422.268067][T13491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.273961][T13491] RIP: 0033:0x7f9016f7df39 [ 422.278378][T13491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.297997][T13491] RSP: 002b:00007f9017dca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 422.306422][T13491] RAX: ffffffffffffffda RBX: 00007f9017135f80 RCX: 00007f9016f7df39 [ 422.314401][T13491] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003 [ 422.322372][T13491] RBP: 00007f9017dca090 R08: 0000000000000004 R09: 0000000000000000 [ 422.330351][T13491] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 422.338331][T13491] R13: 0000000000000000 R14: 00007f9017135f80 R15: 00007f901725fa28 [ 422.346317][T13491] [ 422.349355][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.354336][ T6684] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 422.368991][ T6684] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 422.378733][ T6684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 422.396657][T13491] socket: no more sockets [ 422.401703][T13494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.431868][ T6684] usb 3-1: SerialNumber: syz [ 422.485861][ T6684] usb 3-1: config 0 descriptor?? [ 422.500829][T13498] batadv0: entered promiscuous mode [ 422.505565][ T6684] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 422.520929][T13498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.731308][ T1769] usb 3-1: USB disconnect, device number 79 [ 422.745788][T13500] syz.0.2287 (13500): /proc/13499/oom_adj is deprecated, please use /proc/13499/oom_score_adj instead. [ 423.134990][T13507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.153547][T13507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.855408][ T1769] usb 2-1: USB disconnect, device number 80 [ 423.999883][T13522] pimreg: entered allmulticast mode [ 424.076332][T13534] pimreg: left allmulticast mode [ 424.284491][ T1769] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 424.325329][ T5288] usb 4-1: USB disconnect, device number 78 [ 424.454861][ T1769] usb 2-1: device descriptor read/64, error -71 [ 424.694453][ T1769] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 424.834560][ T8] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 424.836899][ T1769] usb 2-1: device descriptor read/64, error -71 [ 424.927760][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.028337][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 425.028520][ T1769] usb usb2-port1: attempt power cycle [ 425.065399][ T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 425.102199][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.142391][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 425.171425][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.219827][ T8] usbtmc 3-1:16.0: bulk endpoints not found [ 425.238451][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.434615][ T1769] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 425.458911][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.470186][ T1769] usb 2-1: device descriptor read/8, error -71 [ 425.596653][T12645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.610659][T12645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.619710][T12645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.628957][T12645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.636959][T12645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 425.646264][T12645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.713945][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.727516][ T1769] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 425.814751][ T1769] usb 2-1: device descriptor read/8, error -71 [ 425.861687][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.867546][T13579] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.878862][T13579] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.888035][T13579] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.896851][T13579] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.907809][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.941509][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.944892][ T1769] usb usb2-port1: unable to enumerate USB device [ 425.977512][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.035380][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.097324][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.263776][ T5247] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 426.309845][ T35] bridge_slave_1: left allmulticast mode [ 426.322945][ T35] bridge_slave_1: left promiscuous mode [ 426.328997][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.349699][ T35] bridge_slave_0: left allmulticast mode [ 426.360580][ T35] bridge_slave_0: left promiscuous mode [ 426.366681][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.254786][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.278414][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.299065][ T35] bond0 (unregistering): Released all slaves [ 427.321762][T13592] netlink: 'syz.4.2305': attribute type 29 has an invalid length. [ 427.377966][T13576] chnl_net:caif_netlink_parms(): no params data found [ 427.435665][T13597] netlink: 'syz.4.2305': attribute type 29 has an invalid length. [ 427.445326][T13599] netlink: 'syz.4.2305': attribute type 29 has an invalid length. [ 427.579043][ T8958] usb 3-1: USB disconnect, device number 80 [ 427.734692][ T5247] Bluetooth: hci0: command tx timeout [ 428.200852][T13624] pimreg: entered allmulticast mode [ 428.261463][T13639] pimreg: left allmulticast mode [ 428.326600][T13576] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.346124][T13576] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.355289][ T8958] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 428.358922][T13576] bridge_slave_0: entered allmulticast mode [ 428.381282][T13576] bridge_slave_0: entered promiscuous mode [ 428.408984][ T1769] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 428.441070][ T35] hsr_slave_0: left promiscuous mode [ 428.458327][ T35] hsr_slave_1: left promiscuous mode [ 428.474962][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.501840][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.517252][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.525003][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.551988][ T35] veth1_macvtap: left promiscuous mode [ 428.554470][ T8958] usb 2-1: Using ep0 maxpacket: 32 [ 428.559774][ T35] veth0_macvtap: left promiscuous mode [ 428.568482][ T1769] usb 3-1: Using ep0 maxpacket: 32 [ 428.577638][ T35] veth1_vlan: left promiscuous mode [ 428.583377][ T35] veth0_vlan: left promiscuous mode [ 428.587989][ T8958] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 428.589935][ T1769] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.612769][ T8958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.614005][ T1769] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.631396][ T8958] usb 2-1: Product: syz [ 428.656787][ T1769] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 428.657333][ T8958] usb 2-1: Manufacturer: syz [ 428.680063][ T1769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.690214][ T8958] usb 2-1: SerialNumber: syz [ 428.706036][ T8958] usb 2-1: config 0 descriptor?? [ 428.719580][ T1769] usb 3-1: config 0 descriptor?? [ 428.725938][ T8958] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 428.731812][ T1769] rndis_host 3-1:0.0: skipping garbage [ 428.760658][ T1769] usb 3-1: bad CDC descriptors [ 428.771189][ T1769] cdc_acm 3-1:0.0: skipping garbage [ 429.128954][T13644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.147967][T13644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.177836][T13644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.220323][T13644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.244239][T13644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.284679][T13644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.421342][ T8958] gspca_ov534_9: reg_w failed -71 [ 429.680298][ T35] team0 (unregistering): Port device team_slave_1 removed [ 429.743858][ T35] team0 (unregistering): Port device team_slave_0 removed [ 429.818692][ T5247] Bluetooth: hci0: command tx timeout [ 429.884524][ T8958] gspca_ov534_9: Unknown sensor 0000 [ 429.884666][ T8958] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 429.928823][ T8958] usb 2-1: USB disconnect, device number 85 [ 430.413070][ T1769] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 430.574525][ T1769] usb 2-1: Using ep0 maxpacket: 8 [ 430.588305][ T1769] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 430.601194][ T1769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.627552][ T1769] usb 2-1: Product: syz [ 430.648538][ T1769] usb 2-1: Manufacturer: syz [ 430.653296][ T1769] usb 2-1: SerialNumber: syz [ 430.692027][ T1769] usb 2-1: config 0 descriptor?? [ 430.786161][T13576] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.810666][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.841327][T13576] bridge_slave_1: entered allmulticast mode [ 430.867859][T13576] bridge_slave_1: entered promiscuous mode [ 430.887756][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2317'. [ 430.926625][ T1769] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 431.118550][T13576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.164136][T13683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2325'. [ 431.182706][T13683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2325'. [ 431.199279][T13576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.208758][T13685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2324'. [ 431.443950][T13576] team0: Port device team_slave_0 added [ 431.492463][T13576] team0: Port device team_slave_1 added [ 431.678379][T13576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.707130][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.733051][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.757392][T13576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.895517][ T5247] Bluetooth: hci0: command tx timeout [ 431.997834][T13576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.024492][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.129400][T13576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.221623][ T6684] usb 3-1: USB disconnect, device number 81 [ 432.494014][T13727] veth1_macvtap: left promiscuous mode [ 432.505404][T13727] macsec0: entered allmulticast mode [ 432.546217][T13731] FAULT_INJECTION: forcing a failure. [ 432.546217][T13731] name failslab, interval 1, probability 0, space 0, times 0 [ 432.561770][T13731] CPU: 0 UID: 0 PID: 13731 Comm: syz.2.2337 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 432.572230][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 432.582508][T13731] Call Trace: [ 432.585811][T13731] [ 432.588766][T13731] dump_stack_lvl+0x241/0x360 [ 432.593479][T13731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.598705][T13731] ? __pfx__printk+0x10/0x10 [ 432.603323][T13731] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 432.609331][T13731] ? __pfx___might_resched+0x10/0x10 [ 432.610691][T13576] hsr_slave_0: entered promiscuous mode [ 432.614626][T13731] should_fail_ex+0x3b0/0x4e0 [ 432.614659][T13731] should_failslab+0xac/0x100 [ 432.614681][T13731] ? __alloc_skb+0x1c3/0x440 [ 432.614704][T13731] kmem_cache_alloc_node_noprof+0x71/0x320 [ 432.614730][T13731] __alloc_skb+0x1c3/0x440 [ 432.614755][T13731] ? __pfx___alloc_skb+0x10/0x10 [ 432.614782][T13731] ? netlink_ack_tlv_len+0x6e/0x200 [ 432.614805][T13731] netlink_ack+0x13f/0xa30 [ 432.614824][T13731] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.614856][T13731] netlink_rcv_skb+0x262/0x430 [ 432.614875][T13731] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.614894][T13731] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.614935][T13731] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.614956][T13731] netlink_unicast+0x7f6/0x990 [ 432.614982][T13731] ? __pfx_netlink_unicast+0x10/0x10 [ 432.614999][T13731] ? __virt_addr_valid+0x183/0x530 [ 432.615022][T13731] ? __check_object_size+0x48e/0x900 [ 432.615047][T13731] netlink_sendmsg+0x8e4/0xcb0 [ 432.615078][T13731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.615110][T13731] ? aa_sock_msg_perm+0x91/0x160 [ 432.615134][T13731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.615154][T13731] __sock_sendmsg+0x221/0x270 [ 432.730557][T13731] __sys_sendto+0x39b/0x4f0 [ 432.735072][T13731] ? __pfx___sys_sendto+0x10/0x10 [ 432.740128][T13731] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.746118][T13731] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 432.752447][T13731] ? exc_page_fault+0x590/0x8c0 [ 432.757300][T13731] __x64_sys_sendto+0xde/0x100 [ 432.762064][T13731] do_syscall_64+0xf3/0x230 [ 432.766571][T13731] ? clear_bhb_loop+0x35/0x90 [ 432.771253][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.777151][T13731] RIP: 0033:0x7f253837fdcc [ 432.781570][T13731] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 432.801184][T13731] RSP: 002b:00007f2537ddcec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.809606][T13731] RAX: ffffffffffffffda RBX: 00007f2537ddcfc0 RCX: 00007f253837fdcc [ 432.817576][T13731] RDX: 0000000000000020 RSI: 00007f2537ddd010 RDI: 0000000000000003 [ 432.825545][T13731] RBP: 0000000000000000 R08: 00007f2537ddcf14 R09: 000000000000000c [ 432.833513][T13731] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 432.841483][T13731] R13: 00007f2537ddcf68 R14: 00007f2537ddd010 R15: 0000000000000000 [ 432.849465][T13731] [ 432.852615][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.877070][T13576] hsr_slave_1: entered promiscuous mode [ 432.887089][T13576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.897742][T13576] Cannot create hsr debugfs directory [ 433.113764][T13735] loop7: detected capacity change from 0 to 16384 [ 433.192714][T13735] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 433.224107][T13735] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 14 prio class 0 [ 433.251730][T13735] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 433.265293][ T1769] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 433.288860][T13735] Buffer I/O error on dev loop7, logical block 448, async page read [ 433.523388][ T8] usb 2-1: USB disconnect, device number 86 [ 433.790057][T13748] pimreg: entered allmulticast mode [ 433.937411][T13769] pimreg: left allmulticast mode [ 433.985426][ T5247] Bluetooth: hci0: command tx timeout [ 434.253466][T13779] loop5: detected capacity change from 0 to 16384 [ 434.705608][T13794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.745427][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.774643][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.786375][T13576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.800381][T13794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.843644][T13576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.869839][T13576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.905883][T13576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.915877][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2353'. [ 434.928856][T13804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.976881][T13804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.033870][T13576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.088080][T13576] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.153498][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.160677][T11151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.208497][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.215717][T11151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.252612][T13820] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2357'. [ 435.390434][T13576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.499317][T13576] veth0_vlan: entered promiscuous mode [ 435.530877][T13576] veth1_vlan: entered promiscuous mode [ 435.623589][T13576] veth0_macvtap: entered promiscuous mode [ 435.653918][T13576] veth1_macvtap: entered promiscuous mode [ 435.701527][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.725713][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.754438][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.774433][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.780428][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.784266][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.817026][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.839879][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.861904][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.910862][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.929375][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.942371][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.965276][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.985285][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.988518][T13576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.998414][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.027761][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.052060][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.072589][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.090645][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.106828][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.124371][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.144405][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.171572][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.192540][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.209581][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.220060][T13576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.230772][T13576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.241457][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.257339][T13576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.268263][T13576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.285460][T13576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.309798][T13576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.322506][T13576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.517187][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.562223][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.623509][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.651102][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.054395][ T5288] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 437.224460][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 437.257207][ T5288] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 437.296806][ T5288] usb 4-1: config 0 has no interface number 0 [ 437.329408][ T5288] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 437.352764][ T5288] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 437.383034][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.411756][ T5288] usb 4-1: config 0 descriptor?? [ 437.436095][ T5288] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 437.862034][T13906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 438.074642][ T8958] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 438.294709][ T8958] usb 2-1: Using ep0 maxpacket: 16 [ 438.315613][ T8958] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 438.349334][ T8958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 438.400210][ T8958] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 438.419354][ T8958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.433816][ T8958] usb 2-1: Product: syz [ 438.440659][ T8958] usb 2-1: Manufacturer: syz [ 438.445752][ T8958] usb 2-1: SerialNumber: syz [ 438.468877][ T8958] usb 2-1: config 0 descriptor?? [ 438.489275][ T8958] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 438.530264][ T8958] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 439.151585][ T8958] em28xx 2-1:0.0: chip ID is em2882/3 [ 439.368860][ T8958] em28xx 2-1:0.0: Config register raw data: 0x00 [ 439.843776][ T8] usb 4-1: USB disconnect, device number 79 [ 439.911181][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.948541][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.992950][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.030017][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.216667][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.223189][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.811434][T14011] trusted_key: syz.2.2403 sent an empty control message without MSG_MORE. [ 440.874654][ T1769] usb 2-1: USB disconnect, device number 87 [ 440.911730][ T1769] em28xx 2-1:0.0: Disconnecting em28xx [ 440.952830][ T1769] em28xx 2-1:0.0: Freeing device [ 441.173837][T14025] FAULT_INJECTION: forcing a failure. [ 441.173837][T14025] name failslab, interval 1, probability 0, space 0, times 0 [ 441.187006][T14025] CPU: 1 UID: 0 PID: 14025 Comm: syz.2.2395 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 441.197448][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 441.207521][T14025] Call Trace: [ 441.210810][T14025] [ 441.213752][T14025] dump_stack_lvl+0x241/0x360 [ 441.218455][T14025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.223674][T14025] ? __pfx__printk+0x10/0x10 [ 441.228293][T14025] should_fail_ex+0x3b0/0x4e0 [ 441.233001][T14025] ? skb_clone+0x20c/0x390 [ 441.237449][T14025] should_failslab+0xac/0x100 [ 441.242147][T14025] ? skb_clone+0x20c/0x390 [ 441.246586][T14025] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 441.251988][T14025] skb_clone+0x20c/0x390 [ 441.256260][T14025] ? dev_queue_xmit_nit+0x220/0xc10 [ 441.261488][T14025] dev_queue_xmit_nit+0x419/0xc10 [ 441.266537][T14025] ? dev_queue_xmit_nit+0x2b/0xc10 [ 441.271671][T14025] ? validate_xmit_skb+0x9f9/0x1120 [ 441.276904][T14025] dev_hard_start_xmit+0x15f/0x7e0 [ 441.282040][T14025] ? __pfx_validate_xmit_skb+0x10/0x10 [ 441.287531][T14025] __dev_queue_xmit+0x1b58/0x3e80 [ 441.292586][T14025] ? netlink_unicast+0x7f6/0x990 [ 441.297545][T14025] ? __sys_sendto+0x39b/0x4f0 [ 441.302245][T14025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.308338][T14025] ? __dev_queue_xmit+0x2da/0x3e80 [ 441.313483][T14025] ? __pfx___dev_queue_xmit+0x10/0x10 [ 441.318897][T14025] ? __copy_skb_header+0x437/0x5b0 [ 441.324043][T14025] ? __asan_memcpy+0x40/0x70 [ 441.328671][T14025] ? __copy_skb_header+0x437/0x5b0 [ 441.333912][T14025] ? __skb_clone+0x454/0x6c0 [ 441.338539][T14025] ? skb_clone+0x240/0x390 [ 441.342988][T14025] __netlink_deliver_tap+0x54d/0x7c0 [ 441.348308][T14025] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.353532][T14025] netlink_deliver_tap+0x19d/0x1b0 [ 441.358673][T14025] netlink_sendskb+0x68/0x140 [ 441.363384][T14025] netlink_unicast+0x39d/0x990 [ 441.368175][T14025] ? __asan_memcpy+0x40/0x70 [ 441.372797][T14025] ? __pfx_netlink_unicast+0x10/0x10 [ 441.378116][T14025] netlink_rcv_skb+0x262/0x430 [ 441.382911][T14025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.388387][T14025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.393677][T14025] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.398885][T14025] netlink_unicast+0x7f6/0x990 [ 441.403678][T14025] ? __pfx_netlink_unicast+0x10/0x10 [ 441.408976][T14025] ? __virt_addr_valid+0x183/0x530 [ 441.414084][T14025] ? __check_object_size+0x48e/0x900 [ 441.419368][T14025] netlink_sendmsg+0x8e4/0xcb0 [ 441.424148][T14025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.429448][T14025] ? aa_sock_msg_perm+0x91/0x160 [ 441.434416][T14025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.439698][T14025] __sock_sendmsg+0x221/0x270 [ 441.444389][T14025] __sys_sendto+0x39b/0x4f0 [ 441.448922][T14025] ? __pfx___sys_sendto+0x10/0x10 [ 441.453976][T14025] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.459955][T14025] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.466282][T14025] ? exc_page_fault+0x590/0x8c0 [ 441.471150][T14025] __x64_sys_sendto+0xde/0x100 [ 441.475948][T14025] do_syscall_64+0xf3/0x230 [ 441.480471][T14025] ? clear_bhb_loop+0x35/0x90 [ 441.485197][T14025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.491108][T14025] RIP: 0033:0x7f253837fdcc [ 441.495541][T14025] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 441.515167][T14025] RSP: 002b:00007f253909dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 441.523582][T14025] RAX: ffffffffffffffda RBX: 00007f253909dfc0 RCX: 00007f253837fdcc [ 441.531569][T14025] RDX: 0000000000000020 RSI: 00007f253909e010 RDI: 0000000000000003 [ 441.539544][T14025] RBP: 0000000000000000 R08: 00007f253909df14 R09: 000000000000000c [ 441.547524][T14025] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 441.555515][T14025] R13: 00007f253909df68 R14: 00007f253909e010 R15: 0000000000000000 [ 441.563522][T14025] [ 441.984519][ T5238] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 442.147838][ T5238] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 442.157347][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.174226][ T5238] usb 4-1: Product: syz [ 442.185106][ T5238] usb 4-1: Manufacturer: syz [ 442.200921][ T5238] usb 4-1: SerialNumber: syz [ 442.211719][T14068] FAULT_INJECTION: forcing a failure. [ 442.211719][T14068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.232036][ T5238] usb 4-1: config 0 descriptor?? [ 442.242082][ T5238] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 442.294549][T14068] CPU: 1 UID: 0 PID: 14068 Comm: syz.4.2410 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 442.305006][T14068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.315098][T14068] Call Trace: [ 442.318365][T14068] [ 442.321283][T14068] dump_stack_lvl+0x241/0x360 [ 442.325953][T14068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.331137][T14068] ? __pfx__printk+0x10/0x10 [ 442.335715][T14068] ? __pfx_lock_release+0x10/0x10 [ 442.340750][T14068] should_fail_ex+0x3b0/0x4e0 [ 442.345421][T14068] _copy_to_iter+0x1ed/0x1d60 [ 442.350082][T14068] ? __virt_addr_valid+0x183/0x530 [ 442.355181][T14068] ? __skb_try_recv_datagram+0x49a/0x6a0 [ 442.360818][T14068] ? __pfx_lock_release+0x10/0x10 [ 442.365844][T14068] ? __pfx__copy_to_iter+0x10/0x10 [ 442.370956][T14068] ? __virt_addr_valid+0x183/0x530 [ 442.376063][T14068] ? __virt_addr_valid+0x183/0x530 [ 442.381154][T14068] ? __virt_addr_valid+0x45f/0x530 [ 442.386275][T14068] ? __phys_addr_symbol+0x2f/0x70 [ 442.391303][T14068] ? __check_object_size+0x48e/0x900 [ 442.396589][T14068] __skb_datagram_iter+0x107/0x900 [ 442.401703][T14068] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 442.407694][T14068] skb_copy_datagram_iter+0xd1/0x250 [ 442.412994][T14068] netlink_recvmsg+0x2d0/0x11d0 [ 442.417851][T14068] ? __pfx_netlink_recvmsg+0x10/0x10 [ 442.423131][T14068] ? __pfx_aa_sk_perm+0x10/0x10 [ 442.427974][T14068] ? __fget_files+0x29/0x470 [ 442.432563][T14068] ? aa_sock_msg_perm+0x91/0x160 [ 442.437505][T14068] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 442.442783][T14068] ? __pfx_netlink_recvmsg+0x10/0x10 [ 442.448066][T14068] sock_recvmsg+0x22f/0x280 [ 442.452564][T14068] __sys_recvfrom+0x246/0x3d0 [ 442.457235][T14068] ? __pfx___sys_recvfrom+0x10/0x10 [ 442.462432][T14068] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 442.468403][T14068] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 442.474722][T14068] __x64_sys_recvfrom+0xde/0x100 [ 442.479651][T14068] do_syscall_64+0xf3/0x230 [ 442.484143][T14068] ? clear_bhb_loop+0x35/0x90 [ 442.488811][T14068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.494692][T14068] RIP: 0033:0x7f008417fd04 [ 442.499101][T14068] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 442.518703][T14068] RSP: 002b:00007f0084fdfed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 442.527108][T14068] RAX: ffffffffffffffda RBX: 00007f0084fdffc0 RCX: 00007f008417fd04 [ 442.535070][T14068] RDX: 0000000000001000 RSI: 00007f0084fe0010 RDI: 0000000000000003 [ 442.543030][T14068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.550987][T14068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 442.558943][T14068] R13: 00007f0084fdff68 R14: 00007f0084fe0010 R15: 0000000000000000 [ 442.566909][T14068] [ 442.714433][ T5288] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 442.778021][T14076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.820289][T14076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.837726][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.855037][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.884471][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 442.893618][ T5288] usb 2-1: config 253 has an invalid interface number: 223 but max is 1 [ 442.902867][ T5288] usb 2-1: config 253 has an invalid interface number: 223 but max is 1 [ 442.922443][ T5288] usb 2-1: config 253 has an invalid interface number: 109 but max is 1 [ 442.931209][ T5288] usb 2-1: config 253 has no interface number 0 [ 442.937725][ T5288] usb 2-1: config 253 has no interface number 1 [ 442.944163][ T5288] usb 2-1: config 253 interface 223 altsetting 4 endpoint 0xD has invalid wMaxPacketSize 0 [ 442.954880][ T5288] usb 2-1: too many endpoints for config 253 interface 223 altsetting 124: 67, using maximum allowed: 30 [ 442.966426][ T5288] usb 2-1: config 253 interface 223 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 442.980840][ T5288] usb 2-1: config 253 interface 223 has no altsetting 0 [ 442.988095][ T5288] usb 2-1: config 253 interface 223 has no altsetting 1 [ 442.995502][ T5288] usb 2-1: config 253 interface 109 has no altsetting 0 [ 443.005091][ T5288] usb 2-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=1d.2e [ 443.016666][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.028605][ T5288] usb 2-1: Product: syz [ 443.033291][ T5288] usb 2-1: Manufacturer: syz [ 443.038541][ T5288] usb 2-1: SerialNumber: syz [ 443.248706][ T5288] ti_usb_3410_5052 2-1:253.223: required endpoints missing [ 443.269833][ T5288] ti_usb_3410_5052 2-1:253.109: required endpoints missing [ 443.273765][T14038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2400'. [ 443.288312][ T5288] usb 2-1: USB disconnect, device number 88 [ 443.307828][ T1167] usb 4-1: USB disconnect, device number 80 [ 443.495225][ T5238] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 443.512462][T14091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.521233][T14091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.536343][T14091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.546317][T14091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.657563][ T5238] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.667991][ T5238] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 443.677248][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.692838][ T5238] usb 3-1: config 0 descriptor?? [ 443.701268][ T5238] pwc: Askey VC010 type 2 USB webcam detected. [ 443.900528][ T5238] pwc: send_video_command error -71 [ 443.908749][ T5238] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 443.917191][ T5238] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 443.941909][ T5238] usb 3-1: USB disconnect, device number 82 [ 444.040031][T14098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2424'. [ 444.049407][ T1167] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 444.218800][ T1167] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 444.235508][ T1167] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1056, setting to 1024 [ 444.256418][ T1167] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 444.259851][ T5238] usb 5-1: USB disconnect, device number 57 [ 444.276384][ T1167] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.287634][ T1167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.296048][ T1167] usb 2-1: Product: Ðœ [ 444.300131][ T1167] usb 2-1: Manufacturer: ш [ 444.304813][ T1167] usb 2-1: SerialNumber: Є [ 444.384542][ T8958] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 444.393302][ T8] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 444.546800][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.564854][ T8958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.584364][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 444.599210][ T8958] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.619800][ T1066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.625154][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 444.644378][ T8958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.663578][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 444.672715][ T8] usb 4-1: SerialNumber: syz [ 444.685464][ T8958] usb 3-1: config 0 descriptor?? [ 444.726096][ T8958] pwc: Askey VC010 type 2 USB webcam detected. [ 444.737744][T14093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.801799][ T1066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.821704][T14093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.966923][ T1066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.980911][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 444.989629][ T8] usb-storage 4-1:1.0: USB Mass Storage device detected [ 444.999034][ T1167] cdc_ncm 2-1:1.0: bind() failure [ 445.007787][ T1167] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 445.014934][ T1167] cdc_ncm 2-1:1.1: bind() failure [ 445.026629][T12645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.036534][ T1167] usb 2-1: USB disconnect, device number 89 [ 445.037751][T12645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.051117][ T8] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 445.051526][T12645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.069813][T12645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.077545][T12645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 445.085121][T12645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.096930][ T8] scsi host1: usb-storage 4-1:1.0 [ 445.176510][ T8958] pwc: recv_control_msg error -32 req 02 val 2b00 [ 445.199869][ T8958] pwc: recv_control_msg error -32 req 02 val 2700 [ 445.211729][ T8958] pwc: recv_control_msg error -32 req 02 val 2c00 [ 445.221742][ T8958] pwc: recv_control_msg error -32 req 04 val 1000 [ 445.230403][ T8958] pwc: recv_control_msg error -32 req 04 val 1300 [ 445.237775][ T8958] pwc: recv_control_msg error -32 req 04 val 1400 [ 445.253451][ T1066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.278278][T14116] bond_slave_0: entered promiscuous mode [ 445.284173][T14116] bond_slave_1: entered promiscuous mode [ 445.299931][T14118] bond_slave_0: left promiscuous mode [ 445.305996][T14118] bond_slave_1: left promiscuous mode [ 445.353631][T14120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.377368][T14120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.428296][T14120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.463286][T14120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.581880][T14118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.603810][T14118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.626242][T14118] bond0 (unregistering): Released all slaves [ 445.668207][T14085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.683538][T14085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.714032][ T8958] pwc: recv_control_msg error -71 req 04 val 1500 [ 445.721052][ T8958] pwc: recv_control_msg error -71 req 02 val 2500 [ 445.731125][ T8958] pwc: recv_control_msg error -71 req 02 val 2400 [ 445.752889][ T8958] pwc: recv_control_msg error -71 req 02 val 2600 [ 445.780236][ T8958] pwc: recv_control_msg error -71 req 02 val 2900 [ 445.808695][ T8958] pwc: recv_control_msg error -71 req 02 val 2800 [ 445.846597][ T8958] pwc: recv_control_msg error -71 req 04 val 1100 [ 445.867628][ T8958] pwc: recv_control_msg error -71 req 04 val 1200 [ 445.956793][ T8958] pwc: Registered as video71. [ 446.002177][ T8958] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 446.072875][ T8958] usb 3-1: USB disconnect, device number 83 [ 446.360138][ T8958] usb 4-1: USB disconnect, device number 81 [ 446.454188][T14144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2435'. [ 446.911427][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2438'. [ 447.174559][T12645] Bluetooth: hci1: command tx timeout [ 448.145614][ T1066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.191534][T14185] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2445'. [ 448.250502][ T1066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.275035][ T1066] bond0 (unregistering): Released all slaves [ 448.297441][T14114] chnl_net:caif_netlink_parms(): no params data found [ 448.402032][T14167] pimreg: entered allmulticast mode [ 448.448550][T14172] pimreg: left allmulticast mode [ 448.544429][ T5444] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 448.754575][ T5444] usb 3-1: Using ep0 maxpacket: 8 [ 448.762388][ T5444] usb 3-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 448.797023][ T5444] usb 3-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 448.886882][ T5444] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 448.944625][ T5444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.959684][T14198] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2451'. [ 448.973690][ T5444] usb 3-1: Product: syz [ 448.993978][ T5444] usb 3-1: Manufacturer: syz [ 448.998731][ T5444] usb 3-1: SerialNumber: syz [ 449.027234][ T5444] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 449.074419][ T5444] dvb-usb: bulk message failed: -22 (3/0) [ 449.132711][ T1066] hsr_slave_0: left promiscuous mode [ 449.142845][ T5444] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 449.169238][ T5240] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 449.175209][ T5444] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 449.218888][ T5444] usb 3-1: media controller created [ 449.218966][ T1066] hsr_slave_1: left promiscuous mode [ 449.234574][ T5238] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 449.262694][T12645] Bluetooth: hci1: command tx timeout [ 449.276520][ T5444] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.349073][ T1066] veth1_macvtap: left promiscuous mode [ 449.363908][ T5444] dvb-usb: bulk message failed: -22 (6/0) [ 449.404623][ T1066] veth0_macvtap: left promiscuous mode [ 449.411939][ T5444] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 449.434245][ T1066] veth1_vlan: left promiscuous mode [ 449.435776][ T5240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.439653][ T1066] veth0_vlan: left promiscuous mode [ 449.450881][ T5238] usb 4-1: Using ep0 maxpacket: 16 [ 449.499492][ T5240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.506565][ T5444] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 449.530898][ T5238] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 449.543987][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 449.550218][ T5240] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.570990][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.579716][ T5444] dvb-usb: schedule remote query interval to 150 msecs. [ 449.598345][ T5238] usb 4-1: Product: syz [ 449.606558][T14217] netlink: 'syz.0.2455': attribute type 3 has an invalid length. [ 449.610862][ T5238] usb 4-1: Manufacturer: syz [ 449.627465][ T5444] dvb-usb: bulk message failed: -22 (3/0) [ 449.629834][ T5240] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 449.642500][ T5238] usb 4-1: SerialNumber: syz [ 449.664184][ T5238] usb 4-1: config 0 descriptor?? [ 449.674424][ T5444] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 449.687675][ T5240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.703969][ T5238] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 449.730705][ T5240] usb 2-1: config 0 descriptor?? [ 449.736420][ T29] audit: type=1326 audit(1727364161.968:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016f7df39 code=0x7ffc0000 [ 449.753950][ T5238] usb 4-1: Detected FT-X [ 449.758871][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.793374][ T8958] dvb-usb: bulk message failed: -22 (1/0) [ 449.860410][ T8958] dvb-usb: error while querying for an remote control event. [ 449.875042][ T29] audit: type=1326 audit(1727364161.968:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9016f7df39 code=0x7ffc0000 [ 449.919409][ T5238] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 449.977435][ T5238] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 450.004874][ T29] audit: type=1326 audit(1727364161.968:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016f7df39 code=0x7ffc0000 [ 450.006807][ T5238] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 450.027314][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.085266][ T8958] dvb-usb: bulk message failed: -22 (1/0) [ 450.112625][ T8958] dvb-usb: error while querying for an remote control event. [ 450.121764][ T29] audit: type=1326 audit(1727364161.968:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f9016f7df39 code=0x7ffc0000 [ 450.144131][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.191667][ T5240] acrux 0003:1A34:0802.001F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 450.244944][ T5240] acrux 0003:1A34:0802.001F: no inputs found [ 450.253224][ T5240] acrux 0003:1A34:0802.001F: Failed to enable force feedback support, error: -19 [ 450.272588][ T29] audit: type=1326 audit(1727364161.968:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016f7df39 code=0x7ffc0000 [ 450.307696][ T29] audit: type=1326 audit(1727364161.968:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9016f7df39 code=0x7ffc0000 [ 450.335657][ T5444] dvb-usb: bulk message failed: -22 (1/0) [ 450.345314][ T5444] dvb-usb: error while querying for an remote control event. [ 450.512422][ T8958] dvb-usb: bulk message failed: -22 (1/0) [ 450.528242][ T8958] dvb-usb: error while querying for an remote control event. [ 450.716488][ T8958] dvb-usb: bulk message failed: -22 (1/0) [ 450.719984][ T5240] usb 4-1: USB disconnect, device number 82 [ 450.736485][ T5240] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 450.755101][ T8958] dvb-usb: error while querying for an remote control event. [ 450.779045][ T5240] ftdi_sio 4-1:0.0: device disconnected [ 450.938715][ T8958] dvb-usb: bulk message failed: -22 (1/0) [ 450.970626][ T8958] dvb-usb: error while querying for an remote control event. [ 451.061372][ T1066] team0 (unregistering): Port device team_slave_1 removed [ 451.144694][ T8958] dvb-usb: bulk message failed: -22 (1/0) [ 451.154162][ T8958] dvb-usb: error while querying for an remote control event. [ 451.195217][ T1066] team0 (unregistering): Port device team_slave_0 removed [ 451.334557][T12645] Bluetooth: hci1: command tx timeout [ 451.345047][ T8958] dvb-usb: bulk message failed: -22 (1/0) [ 451.350826][ T8958] dvb-usb: error while querying for an remote control event. [ 451.445184][ T5240] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 451.504481][ T5288] usb 2-1: reset high-speed USB device number 90 using dummy_hcd [ 451.528041][ T8958] dvb-usb: bulk message failed: -22 (1/0) [ 451.537997][ T8958] dvb-usb: error while querying for an remote control event. [ 451.612085][ T5240] usb 4-1: Using ep0 maxpacket: 8 [ 451.638611][ T5240] usb 4-1: unable to get BOS descriptor or descriptor too short [ 451.649059][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.665929][ T1769] usb 3-1: USB disconnect, device number 84 [ 451.675820][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.676753][ T5240] usb 4-1: config 4 has an invalid interface number: 109 but max is 0 [ 451.685823][T14114] bridge_slave_0: entered allmulticast mode [ 451.733190][T14114] bridge_slave_0: entered promiscuous mode [ 451.743945][ T5240] usb 4-1: config 4 has no interface number 0 [ 451.759728][ T1769] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 451.771553][ T5240] usb 4-1: config 4 interface 109 has no altsetting 0 [ 451.783720][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.800423][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.803466][ T5240] usb 4-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=8f.75 [ 451.813130][T14114] bridge_slave_1: entered allmulticast mode [ 451.833662][T14114] bridge_slave_1: entered promiscuous mode [ 451.846117][ T5240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.875952][ T5240] usb 4-1: Product: syz [ 451.880184][ T5240] usb 4-1: Manufacturer: syz [ 451.913272][ T5240] usb 4-1: SerialNumber: syz [ 451.930110][T14114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.941959][T14114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.067088][T14249] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2463'. [ 452.109393][T14114] team0: Port device team_slave_0 added [ 452.119909][T14114] team0: Port device team_slave_1 added [ 452.315411][T14114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.322926][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.348858][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.367874][T14114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.485096][T14114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.524521][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.550703][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.601724][ T5240] r8712u: register rtl8712_netdev_ops to netdev_ops [ 452.608447][ T5240] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 452.664773][ T5240] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 452.671430][ T5240] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 452.679189][ T5240] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 452.685740][T14114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.726420][ T5240] usb 4-1: USB disconnect, device number 83 [ 452.855131][ T5238] usb 2-1: USB disconnect, device number 90 [ 452.866994][T14271] pimreg: entered allmulticast mode [ 452.971971][T14275] pimreg: left allmulticast mode [ 453.073372][T14282] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 453.259942][T14114] hsr_slave_0: entered promiscuous mode [ 453.296112][T14114] hsr_slave_1: entered promiscuous mode [ 453.331508][T14292] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2475'. [ 453.341209][T14114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.350972][T14114] Cannot create hsr debugfs directory [ 453.414388][T12645] Bluetooth: hci1: command tx timeout [ 454.284781][ T5240] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 454.406239][T14114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.417448][T14114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.458380][ T5240] usb 3-1: Using ep0 maxpacket: 32 [ 454.462573][T14114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.465374][ T5240] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.492645][ T5240] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.494049][T14114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.515996][ T5240] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 454.532914][ T5240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.563139][ T5240] usb 3-1: config 0 descriptor?? [ 454.574127][ T5240] rndis_host 3-1:0.0: skipping garbage [ 454.581454][ T5240] usb 3-1: bad CDC descriptors [ 454.594107][ T5240] cdc_acm 3-1:0.0: skipping garbage [ 454.700993][T14114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.747878][T14114] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.895870][T11153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.038887][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.046068][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.192430][T11153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.233729][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.240951][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.382976][T11153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.541581][T11153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.724085][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.737143][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.753329][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.763762][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.774950][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 455.782455][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.822669][T14114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.934589][ T8958] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 456.106404][ T8958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.139044][ T8958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.169598][ T8958] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 456.204533][ T8958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.215388][ T8958] usb 4-1: config 0 descriptor?? [ 456.628629][T14364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.651012][T14364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.683933][ T8958] usbhid 4-1:0.0: can't add hid device: -71 [ 456.694684][ T8958] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 456.712601][ T8958] usb 4-1: USB disconnect, device number 84 [ 456.878196][T11153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.928497][T11153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.965276][T11153] bond0 (unregistering): Released all slaves [ 457.075823][T11153] tipc: Disabling bearer [ 457.094651][ T1769] usb 3-1: USB disconnect, device number 85 [ 457.131341][T11153] tipc: Left network mode [ 457.258983][T14114] veth0_vlan: entered promiscuous mode [ 457.368640][T14114] veth1_vlan: entered promiscuous mode [ 457.553351][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 457.639054][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'. [ 457.774111][T14114] veth0_macvtap: entered promiscuous mode [ 457.801996][T11153] batadv_slave_0: left promiscuous mode [ 457.825430][T11153] batadv_slave_1: left promiscuous mode [ 457.882288][T11153] hsr_slave_0: left promiscuous mode [ 457.891075][T11153] hsr_slave_1: left promiscuous mode [ 457.897274][ T5247] Bluetooth: hci2: command tx timeout [ 457.924809][T11153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.954485][T11153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.985041][T11153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.992489][T11153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.126600][T11153] veth1_macvtap: left promiscuous mode [ 458.132169][T11153] veth0_macvtap: left promiscuous mode [ 458.175670][T11153] veth1_vlan: left promiscuous mode [ 458.195366][T11153] veth0_vlan: left promiscuous mode [ 458.873215][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2505'. [ 458.906082][T14471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2505'. [ 459.076838][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 459.169743][ T8958] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 459.347301][ T8958] usb 3-1: Using ep0 maxpacket: 32 [ 459.355964][ T8958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.371034][ T8958] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.398435][ T8958] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 459.418356][ T8958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.437566][ T8958] usb 3-1: config 0 descriptor?? [ 459.454508][ T8958] rndis_host 3-1:0.0: skipping garbage [ 459.460025][ T8958] usb 3-1: bad CDC descriptors [ 459.475626][ T8958] cdc_acm 3-1:0.0: skipping garbage [ 459.555345][T14422] coredump: 808(syz.0.2498): written to core: VMAs: 40, size 97677312; core: 61565282 bytes, pos 97689600 [ 459.666866][T11153] team0 (unregistering): Port device team_slave_1 removed [ 459.781842][T11153] team0 (unregistering): Port device team_slave_0 removed [ 459.974609][ T5247] Bluetooth: hci2: command tx timeout [ 460.310689][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2507'. [ 460.842814][T14114] veth1_macvtap: entered promiscuous mode [ 460.853954][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 460.911771][T14370] chnl_net:caif_netlink_parms(): no params data found [ 461.070925][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.104104][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.147080][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.182595][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.225636][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.264602][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.299359][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.334043][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.382186][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.413196][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.434860][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.450488][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.516605][T14114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.556951][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.570847][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.634353][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.659287][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.684344][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.712221][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.744760][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.784398][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.801277][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.836630][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.864467][T14114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.881922][T14114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.929085][T14114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.991686][T14114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.005100][T14114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.014132][T14114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.023269][T14114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.054538][ T5247] Bluetooth: hci2: command tx timeout [ 462.073004][ T5444] usb 3-1: USB disconnect, device number 86 [ 462.210396][T14370] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.214087][T14530] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2517'. [ 462.241008][T14370] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.243605][T14526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2516'. [ 462.258215][T14370] bridge_slave_0: entered allmulticast mode [ 462.269321][T14370] bridge_slave_0: entered promiscuous mode [ 462.304496][ T8958] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 462.356407][T14370] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.375872][T14370] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.383170][T14370] bridge_slave_1: entered allmulticast mode [ 462.396806][T14370] bridge_slave_1: entered promiscuous mode [ 462.502672][ T8958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.517772][ T8958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.536445][ T8958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.549522][ T8958] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 462.558774][ T8958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.582261][T14370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.594606][ T8958] usb 4-1: config 0 descriptor?? [ 462.617662][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.656252][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.689437][T14370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.808594][T14370] team0: Port device team_slave_0 added [ 462.833850][T11155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.835456][T14370] team0: Port device team_slave_1 added [ 462.850640][T11155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.023521][T14370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.071273][T14548] futex_wake_op: syz.2.2522 tries to shift op by -1; fix this program [ 463.085249][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.146051][ T8958] acrux 0003:1A34:0802.0020: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 463.174530][ T8958] acrux 0003:1A34:0802.0020: no inputs found [ 463.180588][ T8958] acrux 0003:1A34:0802.0020: Failed to enable force feedback support, error: -19 [ 463.197192][T14370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.210199][T14370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.217274][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.269185][T14370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.357490][T14370] hsr_slave_0: entered promiscuous mode [ 463.381811][T14370] hsr_slave_1: entered promiscuous mode [ 463.400697][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.401017][T14370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.430514][T14370] Cannot create hsr debugfs directory [ 463.449932][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.512874][T14577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.547189][T14577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.652488][ T25] usb 4-1: USB disconnect, device number 85 [ 463.764675][ T1769] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 463.985233][ T1769] usb 3-1: Using ep0 maxpacket: 8 [ 464.006231][ T1769] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 464.017374][ T1769] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 464.044599][ T1769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.083860][ T1769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.108459][ T1769] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 464.130235][ T1769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.146067][ T5247] Bluetooth: hci2: command tx timeout [ 464.162447][ T1769] usb 3-1: config 0 descriptor?? [ 464.384111][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2536'. [ 464.393428][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 464.471679][T14370] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 464.505400][T14370] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.529927][T14370] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 464.543091][T14370] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.565642][ T25] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 464.587847][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 464.600021][ T25] usb 5-1: can't read configurations, error -61 [ 464.622847][ T1769] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 464.643092][ T1769] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 464.678907][T14370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.687220][ T1769] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 464.696233][ T1769] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 464.712811][ T1769] hid-picolcd 0003:04D8:F002.0021: unknown main item tag 0x0 [ 464.726100][T14370] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.745532][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.752790][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.760592][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 464.784469][ T1769] hid-picolcd 0003:04D8:F002.0021: No report with id 0xf3 found [ 464.786076][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.798299][ T1769] hid-picolcd 0003:04D8:F002.0021: No report with id 0xf4 found [ 464.799266][T11151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.915650][ T25] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 464.933454][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 464.952984][ T25] usb 5-1: can't read configurations, error -61 [ 464.963863][T14370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.972241][ T25] usb usb5-port1: attempt power cycle [ 465.035416][T14370] veth0_vlan: entered promiscuous mode [ 465.059997][T14370] veth1_vlan: entered promiscuous mode [ 465.117448][T14370] veth0_macvtap: entered promiscuous mode [ 465.145392][T14370] veth1_macvtap: entered promiscuous mode [ 465.173054][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.195059][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.213340][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.241416][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.262330][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.281599][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.293205][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.313271][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.323449][ T25] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 465.342707][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.367242][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.384687][ T25] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 465.400610][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.415477][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 465.432211][ T25] usb 5-1: can't read configurations, error -61 [ 465.440249][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.452728][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.463805][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.476348][ T8958] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 465.477972][T14370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.515937][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.537186][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.564349][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.575386][ T25] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 465.586218][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.596837][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.608371][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.619104][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.630016][ T25] usb 5-1: too many configurations: 96, using maximum allowed: 8 [ 465.641240][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.654959][ T8958] usb 4-1: Using ep0 maxpacket: 16 [ 465.655038][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 465.663583][ T8958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.674856][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.687330][ T8958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.695945][ T25] usb 5-1: can't read configurations, error -61 [ 465.710262][ T8958] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 465.714395][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.722841][ T8958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.732971][ T25] usb usb5-port1: unable to enumerate USB device [ 465.752120][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.773750][ T8958] usb 4-1: config 0 descriptor?? [ 465.780869][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.791383][T14370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.802572][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.820867][T14370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.842293][T14370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.861119][T14370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.874523][T14370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.884473][T14370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.964379][ T25] usb 3-1: reset high-speed USB device number 87 using dummy_hcd [ 466.035460][T14641] syzkaller0: entered promiscuous mode [ 466.058112][T14641] syzkaller0 (unregistering): left promiscuous mode [ 466.128019][T11153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.158191][T11153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.198288][T11159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.207011][T11159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.285527][T14665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2490'. [ 466.318147][T14641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.344948][T14641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.369446][ T8958] mcp2200 0003:04D8:00DF.0022: unbalanced delimiter at end of report description [ 466.391024][ T8958] mcp2200 0003:04D8:00DF.0022: can't parse reports [ 466.402452][ T8958] mcp2200 0003:04D8:00DF.0022: probe with driver mcp2200 failed with error -22 [ 466.586669][T14673] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 466.669261][ T5288] usb 4-1: USB disconnect, device number 86 [ 466.730549][T14676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2543'. [ 467.294481][ T25] usb 3-1: device descriptor read/64, error -71 [ 467.432702][T14691] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2550'. [ 467.537951][ T25] usb 3-1: reset high-speed USB device number 87 using dummy_hcd [ 467.564167][ T25] usb 3-1: device reset changed ep0 maxpacket size! [ 467.584268][ T1769] usb 3-1: USB disconnect, device number 87 [ 467.605118][ T5288] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 467.621950][ C0] I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 467.634904][ C1] I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 467.644844][ C1] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 467.655470][T14702] binder_alloc: 14701: binder_alloc_buf, no vma [ 467.754557][ T1769] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 467.822996][ T5288] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 467.833464][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.866723][ T5288] usb 5-1: config 0 descriptor?? [ 467.877119][ T5288] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 467.910642][ T1769] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 467.930693][ T1769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.960463][ T1769] pwc: Logitech ViewPort AV 100 webcam detected. [ 468.004598][ T5444] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 468.179200][ T5444] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 468.188594][ T5444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.198985][ T5444] usb 4-1: config 0 descriptor?? [ 468.215335][ T5444] cp210x 4-1:0.0: cp210x converter detected [ 468.286979][ T8958] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 468.360784][ T1769] pwc: send_video_command error -71 [ 468.366474][ T1769] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 468.374104][ T1769] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -71 [ 468.389267][ T1769] usb 3-1: USB disconnect, device number 88 [ 468.475087][ T8958] usb 2-1: Using ep0 maxpacket: 16 [ 468.481940][T14689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.493862][ T8958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.505262][T14689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.525065][ T8958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.544594][ T8958] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 468.567142][ T8958] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.582708][ T8958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.601344][ T8958] usb 2-1: config 0 descriptor?? [ 468.619498][ T5444] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 468.839621][ T5444] usb 4-1: cp210x converter now attached to ttyUSB0 [ 468.924823][ T5288] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 469.034656][ T1769] usb 4-1: USB disconnect, device number 87 [ 469.041556][ T8958] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 469.049523][ T1769] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 469.055007][ T8958] microsoft 0003:045E:07DA.0023: ignoring exceeding usage max [ 469.085000][ T8958] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0023/input/input38 [ 469.097894][ T1769] cp210x 4-1:0.0: device disconnected [ 469.162151][ T8958] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 469.274775][ T29] audit: type=1326 audit(1727364181.538:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7e97df39 code=0x7ffc0000 [ 469.301280][ T29] audit: type=1326 audit(1727364181.538:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7e97df39 code=0x7ffc0000 [ 469.324493][ T29] audit: type=1326 audit(1727364181.538:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b7e97df39 code=0x7ffc0000 [ 469.349672][ T29] audit: type=1326 audit(1727364181.538:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14703 comm="syz.1.2555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b7e97df39 code=0x0 [ 469.400094][T14689] netlink: 'syz.4.2549': attribute type 10 has an invalid length. [ 469.421037][T14689] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 469.449701][T14689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.459512][T14689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.504530][ T8958] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 469.516976][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 469.665788][ T8958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.679157][ T8958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.689143][ T8958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.709270][ T8958] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 469.720271][ T8958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.737828][ T8958] usb 3-1: config 0 descriptor?? [ 469.854507][ T5444] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 470.014633][ T5444] usb 4-1: Using ep0 maxpacket: 16 [ 470.023246][ T5444] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 470.041542][ T5444] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.052745][ T5444] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 470.081623][ T5444] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 470.094471][ T5444] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 470.122813][ T5444] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.143485][ T5444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.153666][ T5444] usb 4-1: SerialNumber: syz [ 470.166738][ T8958] acrux 0003:1A34:0802.0024: hidraw1: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 470.180168][T14726] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 470.189351][ T5444] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 470.197373][ T8958] acrux 0003:1A34:0802.0024: no inputs found [ 470.203388][ T8958] acrux 0003:1A34:0802.0024: Failed to enable force feedback support, error: -19 [ 470.247328][ T5288] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 470.271409][ T5288] usb 5-1: USB disconnect, device number 62 [ 470.344514][ T5303] usb 2-1: reset high-speed USB device number 91 using dummy_hcd [ 470.398419][ T5444] usb 4-1: USB disconnect, device number 88 [ 470.594461][ T5288] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 470.768305][ T5288] usb 5-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=ca.84 [ 470.802141][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.814138][ T5288] usb 5-1: Product: syz [ 470.824499][ T5288] usb 5-1: Manufacturer: syz [ 470.831455][ T5288] usb 5-1: SerialNumber: syz [ 470.842708][ T5288] usb 5-1: config 0 descriptor?? [ 470.858779][ T5288] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 470.989854][T14734] binder_alloc: 14732: binder_alloc_buf, no vma [ 471.190626][T14738] loop2: detected capacity change from 0 to 7 [ 471.204115][T14738] Dev loop2: unable to read RDB block 7 [ 471.209940][T14738] loop2: unable to read partition table [ 471.233152][T14738] loop2: partition table beyond EOD, truncated [ 471.244162][T14738] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 471.458359][ T5444] usb 3-1: reset high-speed USB device number 89 using dummy_hcd [ 471.505763][ T8958] usb 2-1: USB disconnect, device number 91 [ 471.784610][ T1769] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 472.004388][ T1769] usb 4-1: Using ep0 maxpacket: 8 [ 472.051325][ T1769] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 472.069252][T14766] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2577'. [ 472.087218][ T1769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.112961][ T1769] usb 4-1: Product: syz [ 472.124730][ T1769] usb 4-1: Manufacturer: syz [ 472.136178][ T1769] usb 4-1: SerialNumber: syz [ 472.360455][ T1769] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 473.014603][ T5444] usb 3-1: device descriptor read/64, error -71 [ 473.125701][ T5288] input: pac7311 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 473.256364][ T5444] usb 3-1: reset high-speed USB device number 89 using dummy_hcd [ 473.271718][ T5444] usb 3-1: device reset changed ep0 maxpacket size! [ 473.279201][ T8] usb 3-1: USB disconnect, device number 89 [ 473.338315][ T5444] usb 5-1: USB disconnect, device number 63 [ 473.427411][ T8] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 473.584426][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 473.591828][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.603182][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.613496][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 473.622875][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.635179][ T8] usb 3-1: config 0 descriptor?? [ 473.699736][T14804] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2591'. [ 474.091110][ T8] savu 0003:1E7D:2D5A.0025: hidraw0: USB HID v0.1c Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 474.116754][ T5288] usb 3-1: USB disconnect, device number 90 [ 474.174705][ T5303] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 474.269058][T14820] SET target dimension over the limit! [ 474.336856][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.353469][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.379777][ T5303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.403934][ T5303] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 474.413650][ T5303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.428318][ T5303] usb 5-1: config 0 descriptor?? [ 474.505124][ T5444] usb 4-1: USB disconnect, device number 89 [ 474.514071][ T5444] usblp0: removed [ 474.864838][ T5303] usbhid 5-1:0.0: can't add hid device: -71 [ 474.870913][ T5303] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 474.921708][ T5303] usb 5-1: USB disconnect, device number 64 [ 475.279382][T14834] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2602'. [ 475.364725][ T5303] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 475.524510][ T5303] usb 3-1: Using ep0 maxpacket: 32 [ 475.531186][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.541831][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 475.552904][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 475.564156][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 475.574090][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 475.574567][ T5288] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 475.585188][ T5303] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=ae.89 [ 475.601516][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.611356][ T5303] usb 3-1: config 0 descriptor?? [ 475.628526][ T5303] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.675096][ T8958] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 475.744526][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 475.762031][ T5288] usb 2-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 475.771946][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.782603][ T5288] usb 2-1: Product: syz [ 475.786894][ T5288] usb 2-1: Manufacturer: syz [ 475.791626][ T5288] usb 2-1: SerialNumber: syz [ 475.798018][ T5288] usb 2-1: config 0 descriptor?? [ 475.804472][ T5288] usb 2-1: bad CDC descriptors [ 475.810196][ T5288] cp210x 2-1:0.0: cp210x converter detected [ 475.856716][ T8958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 475.866956][ T8958] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 475.878825][ T8958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 46981, setting to 64 [ 475.896515][ T8958] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 475.906304][ T8958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.914614][ T8958] usb 5-1: Product: syz [ 475.918982][ T8958] usb 5-1: Manufacturer: syz [ 475.923719][ T8958] usb 5-1: SerialNumber: syz [ 475.935301][ T8958] usb 5-1: config 0 descriptor?? [ 475.941176][T14838] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 475.951069][ T8958] smsusb:smsusb_probe: board id=2, interface number 0 [ 475.960076][ T8958] smsusb:siano_media_device_register: media controller created [ 475.971834][ T8958] ------------[ cut here ]------------ [ 475.977675][ T8958] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 475.984509][ T8958] WARNING: CPU: 0 PID: 8958 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x1930 [ 475.995065][ T8958] Modules linked in: [ 476.000048][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 476.010881][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.013817][ T5288] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 476.021207][ T8958] Workqueue: usb_hub_wq hub_event [ 476.021252][ T8958] RIP: 0010:usb_submit_urb+0xc4e/0x1930 [ 476.021280][ T8958] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 ee 08 00 00 45 8b 07 48 c7 c7 80 12 b1 8c 48 8b 34 24 4c 89 e2 89 e9 e8 f3 ec 1e fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 10 8c 5a 8f [ 476.021300][ T8958] RSP: 0018:ffffc900032ceae8 EFLAGS: 00010246 [ 476.042454][ T5288] cp210x 2-1:0.0: querying part number failed [ 476.064963][ T8958] RAX: b51389a6dc8f7900 RBX: dffffc0000000000 RCX: 0000000000100000 [ 476.085261][ T8958] RDX: ffffc9000d94d000 RSI: 000000000003246d RDI: 000000000003246e [ 476.094128][ T8958] RBP: 0000000000000003 R08: ffffffff8155aaa2 R09: 1ffff110170c519a [ 476.102965][ T8958] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff888011bd5640 [ 476.111219][ T8958] R13: ffff888068d11200 R14: 0000000000000001 R15: ffffffff8cb1106c [ 476.111722][ T5288] usb 2-1: cp210x converter now attached to ttyUSB0 [ 476.119473][ T8958] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 476.135536][ T8958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.142304][ T8958] CR2: 00007f04939610a0 CR3: 0000000030c04000 CR4: 00000000003506f0 [ 476.149007][ T5288] usb 2-1: USB disconnect, device number 92 [ 476.156766][ T8958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.164971][ T8958] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.173132][ T8958] Call Trace: [ 476.176667][ T8958] [ 476.179771][ T8958] ? __warn+0x168/0x4e0 [ 476.184105][ T8958] ? usb_submit_urb+0xc4e/0x1930 [ 476.184586][ T5288] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.189287][ T8958] ? report_bug+0x2b3/0x500 [ 476.203032][ T8958] ? usb_submit_urb+0xc4e/0x1930 [ 476.208208][ T8958] ? handle_bug+0x60/0x90 [ 476.212707][ T8958] ? exc_invalid_op+0x1a/0x50 [ 476.217707][ T8958] ? asm_exc_invalid_op+0x1a/0x20 [ 476.222912][ T8958] ? __warn_printk+0x292/0x360 [ 476.227954][ T8958] ? usb_submit_urb+0xc4e/0x1930 [ 476.232087][ T5288] cp210x 2-1:0.0: device disconnected [ 476.233034][ T8958] ? usb_submit_urb+0xc4d/0x1930 [ 476.243723][ T8958] smsusb_start_streaming+0x22/0x340 [ 476.249368][ T8958] smsusb_probe+0x1c54/0x2410 [ 476.254239][ T8958] ? __pfx_smsusb_probe+0x10/0x10 [ 476.259567][ T8958] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 476.265379][ T8958] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 476.271445][ T8958] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 476.278054][ T8958] ? __pm_runtime_set_status+0x6c1/0xa10 [ 476.283876][ T8958] usb_probe_interface+0x645/0xbb0 [ 476.289282][ T8958] ? __pfx_usb_probe_interface+0x10/0x10 [ 476.295911][ T8958] really_probe+0x2b8/0xad0 [ 476.301322][ T8958] __driver_probe_device+0x1a2/0x390 [ 476.306941][ T8958] driver_probe_device+0x50/0x430 [ 476.312501][ T8958] __device_attach_driver+0x2d6/0x530 [ 476.318115][ T8958] bus_for_each_drv+0x24e/0x2e0 [ 476.323144][ T8958] ? __pfx___device_attach_driver+0x10/0x10 [ 476.329324][ T8958] ? __pfx_bus_for_each_drv+0x10/0x10 [ 476.334970][ T8958] __device_attach+0x333/0x520 [ 476.339871][ T8958] ? __pfx_lock_release+0x10/0x10 [ 476.345344][ T8958] ? __pfx___device_attach+0x10/0x10 [ 476.350813][ T8958] ? do_raw_spin_unlock+0x13c/0x8b0 [ 476.356273][ T8958] bus_probe_device+0x189/0x260 [ 476.361342][ T8958] device_add+0x856/0xbf0 [ 476.365932][ T8958] usb_set_configuration+0x1976/0x1fb0 [ 476.371529][ T8958] usb_generic_driver_probe+0x88/0x140 [ 476.377561][ T8958] usb_probe_device+0x1b8/0x380 [ 476.382593][ T8958] ? __pfx_usb_probe_device+0x10/0x10 [ 476.388267][ T8958] really_probe+0x2b8/0xad0 [ 476.392926][ T8958] __driver_probe_device+0x1a2/0x390 [ 476.401490][ T8958] driver_probe_device+0x50/0x430 [ 476.406772][ T8958] __device_attach_driver+0x2d6/0x530 [ 476.412280][ T8958] bus_for_each_drv+0x24e/0x2e0 [ 476.417364][ T8958] ? __pfx___device_attach_driver+0x10/0x10 [ 476.423522][ T8958] ? __pfx_bus_for_each_drv+0x10/0x10 [ 476.429187][ T8958] __device_attach+0x333/0x520 [ 476.434223][ T8958] ? __pfx___device_attach+0x10/0x10 [ 476.439754][ T8958] bus_probe_device+0x189/0x260 [ 476.444878][ T8958] device_add+0x856/0xbf0 [ 476.449335][ T8958] usb_new_device+0x104a/0x19a0 [ 476.454408][ T8958] ? __pfx_usb_new_device+0x10/0x10 [ 476.459784][ T8958] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.465255][ T8958] ? lockdep_hardirqs_on+0x99/0x150 [ 476.470577][ T8958] hub_event+0x2d6d/0x5150 [ 476.475269][ T8958] ? __pfx_hub_event+0x10/0x10 [ 476.480180][ T8958] ? __pfx_lock_acquire+0x10/0x10 [ 476.485482][ T8958] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 476.491655][ T8958] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 476.498928][ T8958] ? process_scheduled_works+0x976/0x1850 [ 476.505597][ T8958] process_scheduled_works+0xa63/0x1850 [ 476.511372][ T8958] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.517604][ T8958] ? assign_work+0x364/0x3d0 [ 476.522386][ T8958] worker_thread+0x870/0xd30 [ 476.527281][ T8958] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 476.533357][ T8958] ? __kthread_parkme+0x169/0x1d0 [ 476.538804][ T8958] ? __pfx_worker_thread+0x10/0x10 [ 476.544048][ T8958] kthread+0x2f0/0x390 [ 476.548328][ T8958] ? __pfx_worker_thread+0x10/0x10 [ 476.553631][ T8958] ? __pfx_kthread+0x10/0x10 [ 476.558484][ T8958] ret_from_fork+0x4b/0x80 [ 476.563038][ T8958] ? __pfx_kthread+0x10/0x10 [ 476.567909][ T8958] ret_from_fork_asm+0x1a/0x30 [ 476.572913][ T8958] [ 476.576214][ T8958] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 476.583528][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 476.593979][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.604058][ T8958] Workqueue: usb_hub_wq hub_event [ 476.609286][ T8958] Call Trace: [ 476.612566][ T8958] [ 476.615496][ T8958] dump_stack_lvl+0x241/0x360 [ 476.620188][ T8958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.625390][ T8958] ? __pfx__printk+0x10/0x10 [ 476.629980][ T8958] ? vscnprintf+0x5d/0x90 [ 476.634325][ T8958] panic+0x349/0x880 [ 476.638244][ T8958] ? __warn+0x177/0x4e0 [ 476.642425][ T8958] ? __pfx_panic+0x10/0x10 [ 476.646867][ T8958] ? ret_from_fork_asm+0x1a/0x30 [ 476.651935][ T8958] __warn+0x34b/0x4e0 [ 476.655931][ T8958] ? usb_submit_urb+0xc4e/0x1930 [ 476.661059][ T8958] report_bug+0x2b3/0x500 [ 476.665401][ T8958] ? usb_submit_urb+0xc4e/0x1930 [ 476.670351][ T8958] handle_bug+0x60/0x90 [ 476.674516][ T8958] exc_invalid_op+0x1a/0x50 [ 476.679042][ T8958] asm_exc_invalid_op+0x1a/0x20 [ 476.683899][ T8958] RIP: 0010:usb_submit_urb+0xc4e/0x1930 [ 476.689458][ T8958] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 ee 08 00 00 45 8b 07 48 c7 c7 80 12 b1 8c 48 8b 34 24 4c 89 e2 89 e9 e8 f3 ec 1e fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 10 8c 5a 8f [ 476.709090][ T8958] RSP: 0018:ffffc900032ceae8 EFLAGS: 00010246 [ 476.715168][ T8958] RAX: b51389a6dc8f7900 RBX: dffffc0000000000 RCX: 0000000000100000 [ 476.723140][ T8958] RDX: ffffc9000d94d000 RSI: 000000000003246d RDI: 000000000003246e [ 476.731110][ T8958] RBP: 0000000000000003 R08: ffffffff8155aaa2 R09: 1ffff110170c519a [ 476.739087][ T8958] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff888011bd5640 [ 476.747063][ T8958] R13: ffff888068d11200 R14: 0000000000000001 R15: ffffffff8cb1106c [ 476.755039][ T8958] ? __warn_printk+0x292/0x360 [ 476.759815][ T8958] ? usb_submit_urb+0xc4d/0x1930 [ 476.764766][ T8958] smsusb_start_streaming+0x22/0x340 [ 476.770056][ T8958] smsusb_probe+0x1c54/0x2410 [ 476.774743][ T8958] ? __pfx_smsusb_probe+0x10/0x10 [ 476.779773][ T8958] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 476.785322][ T8958] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 476.791225][ T8958] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 476.797835][ T8958] ? __pm_runtime_set_status+0x6c1/0xa10 [ 476.803481][ T8958] usb_probe_interface+0x645/0xbb0 [ 476.808613][ T8958] ? __pfx_usb_probe_interface+0x10/0x10 [ 476.814250][ T8958] really_probe+0x2b8/0xad0 [ 476.818761][ T8958] __driver_probe_device+0x1a2/0x390 [ 476.824066][ T8958] driver_probe_device+0x50/0x430 [ 476.829092][ T8958] __device_attach_driver+0x2d6/0x530 [ 476.834472][ T8958] bus_for_each_drv+0x24e/0x2e0 [ 476.839325][ T8958] ? __pfx___device_attach_driver+0x10/0x10 [ 476.845224][ T8958] ? __pfx_bus_for_each_drv+0x10/0x10 [ 476.850605][ T8958] __device_attach+0x333/0x520 [ 476.855372][ T8958] ? __pfx_lock_release+0x10/0x10 [ 476.860398][ T8958] ? __pfx___device_attach+0x10/0x10 [ 476.865689][ T8958] ? do_raw_spin_unlock+0x13c/0x8b0 [ 476.870900][ T8958] bus_probe_device+0x189/0x260 [ 476.875752][ T8958] device_add+0x856/0xbf0 [ 476.880089][ T8958] usb_set_configuration+0x1976/0x1fb0 [ 476.885574][ T8958] usb_generic_driver_probe+0x88/0x140 [ 476.891039][ T8958] usb_probe_device+0x1b8/0x380 [ 476.895986][ T8958] ? __pfx_usb_probe_device+0x10/0x10 [ 476.901363][ T8958] really_probe+0x2b8/0xad0 [ 476.905874][ T8958] __driver_probe_device+0x1a2/0x390 [ 476.911173][ T8958] driver_probe_device+0x50/0x430 [ 476.916211][ T8958] __device_attach_driver+0x2d6/0x530 [ 476.921595][ T8958] bus_for_each_drv+0x24e/0x2e0 [ 476.926473][ T8958] ? __pfx___device_attach_driver+0x10/0x10 [ 476.932373][ T8958] ? __pfx_bus_for_each_drv+0x10/0x10 [ 476.937756][ T8958] __device_attach+0x333/0x520 [ 476.942535][ T8958] ? __pfx___device_attach+0x10/0x10 [ 476.947833][ T8958] bus_probe_device+0x189/0x260 [ 476.952865][ T8958] device_add+0x856/0xbf0 [ 476.957201][ T8958] usb_new_device+0x104a/0x19a0 [ 476.962072][ T8958] ? __pfx_usb_new_device+0x10/0x10 [ 476.967274][ T8958] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.972475][ T8958] ? lockdep_hardirqs_on+0x99/0x150 [ 476.977849][ T8958] hub_event+0x2d6d/0x5150 [ 476.982304][ T8958] ? __pfx_hub_event+0x10/0x10 [ 476.987076][ T8958] ? __pfx_lock_acquire+0x10/0x10 [ 476.992110][ T8958] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 476.998271][ T8958] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 477.004613][ T8958] ? process_scheduled_works+0x976/0x1850 [ 477.010341][ T8958] process_scheduled_works+0xa63/0x1850 [ 477.015915][ T8958] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.021939][ T8958] ? assign_work+0x364/0x3d0 [ 477.026537][ T8958] worker_thread+0x870/0xd30 [ 477.031142][ T8958] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 477.037042][ T8958] ? __kthread_parkme+0x169/0x1d0 [ 477.042078][ T8958] ? __pfx_worker_thread+0x10/0x10 [ 477.047194][ T8958] kthread+0x2f0/0x390 [ 477.051263][ T8958] ? __pfx_worker_thread+0x10/0x10 [ 477.056398][ T8958] ? __pfx_kthread+0x10/0x10 [ 477.061235][ T8958] ret_from_fork+0x4b/0x80 [ 477.065685][ T8958] ? __pfx_kthread+0x10/0x10 [ 477.070289][ T8958] ret_from_fork_asm+0x1a/0x30 [ 477.075073][ T8958] [ 477.078186][ T8958] Kernel Offset: disabled [ 477.082562][ T8958] Rebooting in 86400 seconds..