last executing test programs: 24.112552614s ago: executing program 0 (id=1428): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000004ac0)=""/115, &(0x7f0000000700)=0x73) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=ANY=[], 0x2f, 0xfffffffffffffffa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000300)={0x990000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) copy_file_range(r1, &(0x7f0000000080)=0xa, r1, 0x0, 0x1, 0x0) add_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="3f1d3fad895151b5d40a1bd781400009b2daa409d0c8cb9f70c994b6bcc9acf96443c442d255e7cd76e3c9ebf3030746d8d15d5be973b3e9e9", 0x39, 0xfffffffffffffffe) socket(0x9, 0x4, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000040), 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x8) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x403282) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500defffffffffffdefffff"], 0x108) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bdb69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337000000000000000000", 0x86}, {&(0x7f0000000400)="316f825a3d29f96a2093a917017b4cd300000000bee74f5a470fd6232f220ff6396a9c0035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae81", 0x4c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1}}], 0x2, 0x4084) r7 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000040)={0x0, 0x7}) 23.467592058s ago: executing program 0 (id=1432): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x0, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000001280)=[{&(0x7f0000001f00)=""/102382, 0x18fee}, {0x0}], 0x2, 0x0, 0xc3e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x1, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000300)={{@host}, @host, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000000)={{@local}, @host, 0xa, 0xfffffffffffffffe, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f00000003c0)={{@host}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8, 0x4}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400"/24, @ANYBLOB="e00000017f000001000000001c", @ANYRES8=0x0, @ANYBLOB="7f000001ac141400000000001c00090000000000000000000701000044"], 0x230}, 0x20040090) syz_emit_ethernet(0xbb, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x4, [0x8f1, 0xea1, 0x879, 0x6cd]}) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="0c010000100001000000000000000000fe8000000000000000000001000000bb00000000000000000000000000000000000000ffffff7f000000000000000000e100bf4c2b000000000000000145c3e962de6f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000002b00000000000000000000000000ffffac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000001c0004000000000000000000ac1e000100"/192], 0x10c}}, 0x0) 18.344626557s ago: executing program 1 (id=1444): ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x5}) r1 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) r2 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="8b160ade8ff0e4725ab7b3c1452168ba319145409d1e9a9196cd470c14153f044bfa5f2efb72b8e14f14945b50056218dffece12d2940526bc8fd6a3b5e022a8e5ef2f8092b16ad82044699e76ef167706c6dcdd0145575334f8a6ba7934c5f7b7a52b339ddf1dc0e7b4ed1497df1f4a3f5ed2ab1f9676e7e0d60d315e", 0x7d, 0xfffffffffffffffc) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000840)) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000580)="769d4012089cadb813e97e9055660e5b1c6edcb5c07bd8de282e68b14517255a3636b6ad37887b57cd313159e437522c27395d923506a20547d1c940dc6f2a4f30f953bad771f6753063f4eca213d4b16736838c922a2d585638f5c3c72039bcc57cd5220d85918a0583d3bcf7341de37538459d7c4fc6f2119976eeecd650b79b72b334bfb6c09e58fab0b2093c82bb505abdd2ac359842aac634ed74ab591ba017e25fda35618609a991c2ac286732575d782ecd04733ece8b022827bea9f8be642430e948597a2ee663", 0xcb, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000780)="32b94c78243b4d1219cbbf745332499ee3dd994f23f5b0adc56aefbb34a2bd570836643def81002336281d43ee79abd0d71c7b8191f90774ceb1bbc4e22d5576f26774c7b3ca4581528af919d30f13dce80f7cce7a062a4b52f1bad5232e001b49c0285ea7eda1d26f139864c718f3943b5ecd1753d9d88b2b6dd0d9f94fce89b1c35138892c5036605d76", 0x8b, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r6, r6}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r2, r4, r5}, &(0x7f0000000500)=""/54, 0x36, &(0x7f00000007c0)={&(0x7f0000000680)={'blake2s-224\x00'}, &(0x7f00000006c0)="f55f3cd86e5f1c84d5236cc2505d7d676c5b8d2051532d31f3ca2579f308876e3fd2c67c86cb3c33c3b469dfe0dfddb01547359170bb607204a3812ed2a9bebff5c1311625a70946705c5e4cfee84de68dad881ecb4536c9ef802b371aed05fb84c5d59b38b6a1e69f8e98ef96c5f1669412e6b519a540886866f418a43a25deccc2a29fd1a15f0be6a7078ba6781a2a4e6c10dc6536d21d4783057cc1adaff348b2b7c8db7a51f2e4dfae415e0fb32352e2c913ee7a4671df811b15b6bc86d206b0bf655b475b399725981bbe00b3f16dabce21ffa43950cde55bd120e8a0ebf5f5ca73b6b772a0979f", 0xea}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100001041300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100697036677265746170000000040002800a0001"], 0x44}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x679cd33d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x2]}) 17.248276312s ago: executing program 1 (id=1445): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xffffff7f, 0x0) 16.268552572s ago: executing program 1 (id=1448): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f00000004c0)=0x84) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x5, 0xf450, 0xfffffffc, r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x40, 0x4002) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000014000800000000000a0000000000000000000000050013ffdf000000050013"], 0x38}}, 0x0) r7 = memfd_create(&(0x7f0000001c80)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xe6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x16=q\x93u\xf1\xde\xef\xac\x171\x13r\xc49\x80\x86\x1a\xbf\xaa&\xf0\xe8Gwm\x80]\xe8\xc2\x90w\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xcbX\x891\xae\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcIv\xe6\xd1\xb5\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfd\x05\x00\x00\x00Q\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89b,8X\xee\rSJQ\x94{}\xd5\xaf\xa9mX0\x94T\x95\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4b\xfc\xf9\xb1\xe0\xdd2\xfd\xda\x84\xbd\xaf\x88\xb3\x91P6t\xf3\xcc\x03\xb8\x9a\x043|A\f\xd4\x1a?h \f\x7f\x92\xb5\x98/J\xd1\x8eW\xfd\xf4o\xd4[\x90\xb3\xc3\xf9\x18\x86\xd1\xeb\x13PIwg\xbe\xbb\"\xfce:\xae\xa9\xc57\xe7\xf6G\x93\xe1X\x9f\xfb\xa5\xe4$>L\xe5]\xc3\x88\xca\xb7\x8b\xfcCn\xcc7>\xa7\xf6mF\xc2\x96q\xc48\xeeP%\x89d\x942\x84r]S\x18{\xd8\xbfT\x0f\xcb\xf7\x84D\xac\x03F+Nj\xd5\x81\x10\xfe\xa6\xf9l\x96N\x1f\xae\xab\xf67\xf1e4v*\x8et\xd3}}\xee\xaf5\x123\x15\xa0\x05\xf4B\x9c\x127\xc42\xab\xf2\xcd\x9a\xcdu\xa9A\xa4\x1f?y\xf0p\x9a\xd7o\xcd\xd0X.\xfa\x15(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xe8\x97\xb7\xb6:\aD\x92\x007\xf0\xe2\x1e\xbf9%\x10\xdb\xd69\xfa6e\xef\xf3\xbf{!H1\xd6+\xde\x7f\xe9\x98\xe4\x1do\xfc\xa3\x9b@z\xe5\xbf\xbce\xdd4d\\\x97\x17\xec\x8c\xc0;\xb9\x17`-\x1d\xc4~\x1f\xbcW\"\xb9\x8e~\xc8|\xeb.\x90\x8f\xe5\xf8\x8fM\x1a\xb3\x12j\xae\xffX\xca\xd3\xa4[]\xfe\xc1\x01\x14\xd7\xcdb\xff\b4`\xcd$\x81R\xe5\xbf\xe1\v\xcf,\xd9&\x1a\xfc\x134\xf40P\xd5J\xec\x15-\f\xf0ls9{\xb1\x8f\xb2\xa5', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r7, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f00000000c0)={0x0, [{}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "be8b6bf8b9c08f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000cecc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000ceec0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000cf0c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000cf2c0)={{0x0, 0x4, 0x1ff, 0x7, 0x7fffffffffffffff, 0x0, 0x7fffffffffffffff, 0x8, 0x8, 0x5, 0x400, 0x3, 0x1, 0x9, 0xd7a}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000cf380)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r11}, {r12, r13}, {r14}], 0x5, "6f852ae94246b1"}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r15, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r16, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r17}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) 15.969370485s ago: executing program 1 (id=1449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60243, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) 10.860223611s ago: executing program 3 (id=1456): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000001392ddefe928ff490000000109022400010000000009040001220500090581030000000000"], 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) read(r0, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c8000c000800d4720bc0040000000000"], 0x11) syz_emit_vhci(0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000029c0)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="682c35dc061c9bdbb685f840", @ANYRES16=r2, @ANYBLOB="000325bd7000fedbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x28044040}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe4e}}, 0x4040001) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{}, "0d54c35538947a23", "1ab9ab66d3cce1a9f43816747889cefb", "a716d7c6", "81b80f4c9a029f04"}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/112, 0x70}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000640)}], 0x7, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000680)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000db9af0ff41080000bf86000000dfffff06080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.744792293s ago: executing program 3 (id=1457): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 7.686368246s ago: executing program 3 (id=1458): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a6d6b740cd060c01f00a010203010902120001000000000904000000b67eb900240656590130415a8100414fae3f279549cfdbcc51166a53d32e4e149f3f01a3e10dff55064ae6cecf99f65361aa45574f678dc4b59dd9fa8797df71216fbf473219716d1d1594cc587860f908272c67bf2c79d9228800"/137], 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 6.011802183s ago: executing program 3 (id=1459): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) getcwd(0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c0538c7701601020301090212000100000000090400000008c53800"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000240)={0x0, 0xa, 0xffffffffffffff9a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x2000680) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="2400000076001f03000000000000000006000074ffffffff0c000d80060003"], 0x24}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_crash_size', 0x22402, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001) ioctl$PPPIOCGFLAGS1(r5, 0x40047452, &(0x7f0000000100)) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16], 0x15) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}}, 0x0) epoll_create1(0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000280)=@e={0xff, 0x7, 0x0, 0x8, @generic}) socket$inet6_dccp(0xa, 0x6, 0x0) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="7e57ddefb8778b8e8f666ebdcf23086d64695a6f8cd0351adee95cf006ed66b69f9d1f6fcd4e7c059464a9127ec946953ab9fed7878634ca2e11ca92c9"], 0x1) open(&(0x7f0000000100)='./file1\x00', 0x480000, 0x21) getsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000000340)={@dev}, &(0x7f0000000380)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 3.092226984s ago: executing program 2 (id=1431): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) pipe2(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.816828318s ago: executing program 4 (id=1463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000600000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 2.816489597s ago: executing program 2 (id=1464): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r1, 0x4b36) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000b30800c6965a34a55f0000954000"/32], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) io_setup(0x0, &(0x7f00000001c0)) io_uring_setup(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$FUSE(r3, &(0x7f000001aa80)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x67}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000002000000feffffff"], 0xc8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001200)={0x290, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x274, 0x33, @probe_request={{{}, {}, @device_b, @device_a, @from_mac=@device_b}, @val={0x0, 0x20, @random="81964b8c59890fae35c903d23d4acb23f04fe67e0e27a6c100765dbff4623190"}, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x5, 0x0, {0x5, 0x6, 0x0, 0x297, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x2, 0x2f}}, @void, [{0xdd, 0xb6, "ac2b9714390027b4a50129abef548535947f6623d10e30f1f06a266dac7e8e2c6e0867b175786182d1f884427b0296e62d9f3793161f3ca75c74bb90c6bef7df7e21b26de9d7bff3f9bb4aefd6b7b48248c3cfb1a0188d62e997700bceb1a06214e10d6e39f728749cad67b98849225a4cc8bbe9266f6a4c8c685510917b5e0d9f30d3532337a2182352a3c077f8a5b1ed3bd6c6f982ed3036a130e4f43fabf4903bebc1ec19f430b8ca03abc224e61c6fe8ff474ad3"}, {0xdd, 0xb6, "1ba6891f269ad7ff6b426f0d93a119d85d05d6f692d53fabed4acb17852931b9ec2d853d1b729ad28094d3c628a331d108ecccd78b72bbc4b0abedf29cb9d0a0be744deb2a9c4b27307e8501eb86ba6a47c642dba5b937dbc107e33b4907dd487b85dc1ac2f5a66fa0dd1b29b30967255407eb32f8e093cea7b2d81854d3497df95caf771af99dcd738ae1fc9da0243a67805f3a7b28db553c489523d8b488e50245747e9da9ca64ff1e40b58c1dbd805454f8ce9386"}, {0xdd, 0x8a, "689bda2d8aee27861da9e2bce3f04b49e2e01e81b400bc688bf6dbe47d14cb9f09d8a04302b439c03615b70f3d4fc9084147ee7839ac477c92bb221c9cb307205623f7721e50a159308b95fa596e0723e1c964c9186bafa5b292d5b116b6fca7e197a98e4f5d942fd0888fa8494a00709a58533308df64e798c11da1a785da8558e06a6121c2097c8c5c"}, {0xdd, 0x1c, "52223b90f3b16e77cfffb9188d0a260ea713d97e5fa980a9867d6fbe"}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x24041885}, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) syz_emit_ethernet(0x7e, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500007000000000000190780a010100ac14140003009078000000004500000000000000002e0000ac1e000100010000861e000000000005369954000e081121c6fc136d24080a7d140005dcc69a071f00ffffffff00000000ac1414aae000000200000000e00000017f000001000000108f82dcf9ff5b29117477f952b5d3c3fb357d0df3b06036fc7084af0dcc6c92861399b9e2607cdb2244b787606dc27eb194158e901b20e6bbfe0812b9d4b855a536"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.779188402s ago: executing program 3 (id=1465): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a6d6b740cd060c01f00a010203010902120001000000000904000000b67eb900240656590130415a8100414fae3f279549cfdbcc51166a53d32e4e149f3f01a3e10dff55064ae6cecf99f65361aa45574f678dc4b59dd9fa8797df71216fbf473219716d1d1594cc587860f908272c67bf2c79d9228800"/137], 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 2.588314328s ago: executing program 4 (id=1466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)='H', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140)="f0", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="363c8f1fca5d66d08e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket(0x1, 0x803, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000680)=ANY=[]) syz_open_dev$vim2m(0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)) 2.433734445s ago: executing program 0 (id=1440): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r2, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='n', 0x1}], 0x1}}, {{&(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000000)="1d1e442e", 0x4}], 0x1, &(0x7f0000000700)=[{0x24, 0x3a, 0x4e3d22fc, "978b16b7bfd7c9a511115be7ec92ef78c28d66983f"}, {0x5c, 0x116, 0xc81, "1fe6361492ae96bc8886152ef24300345f551bfff86ee06b96fe891e1a111dde8eec7a077ce3a9089bc59ff62869519ec3f760a96ff89cb76aadb1945289eb2c2342312b581ef7748cc71ec6ab71"}, {0xe8, 0x111, 0x9, "5a9bd7a29479a777fc126933330f1641176c8bf988cb3b469c51abf301266ebfdb51edee415093b281b3b9a7e66bd74f529865d3dbfac46b4e3796d7c1e95488f43a60534dcb3a6a7f3bf3bb08e2012ad9328d83fef481028afea82b38a5a39f49b702ae777c2ed368b5c7695e4f075b166a42888dd7a15c01f7caaef6d1832acfdac84b46f1d8a2b4312f5ec30a230a888eb0303808135fcac4faefb3ea6f2b649f38a3f6b23830dcc5d55435b91d38cf0b20452dc04ff56ab2a0b326b42f2b368c19ed5c4c99d977717b9d4d848c75517113606b68c41108"}, {0x64, 0x111, 0x9, "67c2332b6982a6ce9557e0090245665a5fd3900e6eb4f14d49cfd8513bd51604b7ed78927c4c360f534094df55989b9161be1e64c96d26ee9ac2c1d72e6586a48d09bda605a07699de92ce35a8d27148dcd0e1ea6ef198"}, {0xb8, 0x114, 0x101, "103a5ba2dca7ead242e86f5e7e0cbf6620c0f62fa4075cfeff0f68fd724cb755a17e885c22dd52b9abd40123115bcba33bf71dbb32cc8117d52d6168eaa7e48a548b2677d5920d24d8fc79f1458bcbc603e9af94a903bbb828cd3975c7f2490676b9408cb35bb3ef15278e481b0d91ccefa616f5a32da529687404479b7b334955d148a26c6800a1d6affa177c930080711f447602f3dbc9c72859c395d1d42e8f4f5c961af529cb6bfdc6"}, {0x84, 0x84, 0xffffffd1, "458346a0e406575e6669c75905eb4ccdad7b44a4efbed7926874b2adaf404d0aded0ea0998a35d8676248ef0f62bcdb407ae0f6e3595fd7ce63d25fa3409f3241c994ab737df1586ad53580c19b8097b36ceba4e1e7ddddb83b3ced54954a3fc3b761c7f75bf232cf21a48c16beba4adaaf2108f6b3128"}, {0xc8, 0x1, 0xe, "6cfa61ae64080ed2187f9e1ab8adacee4abc729c1feba8d9f1b24012491793045bf27065fd5486e7a316ac8eb9615405de18673b01082431bcba86c469b67e86dd4f7724fb0e7733ee96002f9df4166bd6cbc64b0e11a018397a0e1c31d13472043a871c8e31a2584d8962bea0c3b6dc4332c136736632460fce4ad2eea1bf3380d45424303d60026b72ef19a518f9aafbd00f3ce47754c514f2de63bd484bc9c931641048a5c9df1b72c1489f9afc55aa81df461bf3947cf6b229"}], 0x3d0}}, {{&(0x7f0000000380)=@isdn={0x22, 0xf9, 0x7, 0x7f}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="c3580ffa924b85c76cde0e8eb25c32731f442f9468b86d6a6265b7413696519278bed5cb2992a94e208cef213a67d0dcb3d89ca9d1becdf70c9326f5b9ef3c10a3cf396c0050cc8579c792cdfd1eac59474ab5999c12553287f182", 0x5b}, {&(0x7f0000000240)}, {&(0x7f00000004c0)="b68cab72aa8dc9ca51782ad0bcdd7f9081539a0c3f6f3db7a198391b1a5ff32c3366ba171704cb567f557eaf519f993818edcc8832f52e4a25b890064e1f78e0360151451ae66dfd2ba4", 0x4a}, {&(0x7f0000000540)="ac2ca6bef96b8239e8152f084e8d652113d65455a599171981191c404676035891b6bff6317cf37f396d4362465d32e58167ea3fe20e4d8a0fc8f3c0eb7c550dd56b502b96ebdbf5c234fe6499fae933b9d46c6f9134c13b5ee61faecb9adf6e98b9231d5efb465ff8000c11cdcd6544c4a626ccf46fe172963e556bfd5a9fbd0d762168b40199de99585d8ec2841eb64d0d02ae0ca69df5da6742c3ca060a3f9c8f69b0e9f2767c869b40c7e50faad8a160271c93093d994ecc4f0667428bdfc9a0050c22784f", 0xc7}], 0x4}}, {{&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b80)=[{0x6c, 0x109, 0x4, "844caddffe7c3b73db440b717dd0d15d63787f2febf0679b0d57c6b261308b0a42eca6c9b50d9885f30c0cc2126a31cef871409924516edf489dcd79c11623bf37c944cded4ec6a437f3acb2c97408b260fae0bdc99782677e38ee1f1a701ad6"}, {0xd0, 0x113, 0xe58, "e5ec7f370f3c5e04a844cad54232ddaeea8e86413eb5b7800d9393ffeddda1bab0a2f2171bde58d11547d60254d8231e789aa5887cd1be00cee84ed64ada375b9b60e878aa7b3dfb43f37a4e56976bdc4cc1a556b0fbc1aa03b03106479dd9dc72425fdbd84b0af96e750dc97bf71023b6b245dc1341e6c609bf551f1a55e92490c73dffb0b354a2553e784c6e39e6c727839228c367413405d17ab50ccb007dc0ed5ced30bf586dc8468ceb0614c74efd6052b0fd85bf9f28a708344673e112555cbe"}, {0xb8, 0x119, 0x716a, "a24abcc4fa738e529b9497d8a31c9839f75ac1890e5fb45b4bf1486d6f745ff51bc6abcb7c1aa5dfc68ab60c9e1033f0c4707c71f99acf807098d8928233677aa4e3b1b403bc9871eba6103275175e15d4ce68508c40c74800537e7c43ea772601cd8803f6d41b0514ab70fc3d0cddf2e40a36bc3d0d1de6ed9619702948d015be7d4674f1da36fc4f04471bbcdc3083738d99c6926e58e8581c2f61e75ae65393ab13dc7129a452cb03cf4e"}, {0x3c, 0x10e, 0xe, "4b822025259486b4f97726f2272fdb3d96065e5c181288274fa0263101008f0054d8e1f797aaca1dc6f97f6580"}, {0xd4, 0x29, 0x9, "bc3dcac3d8f696726220cca52d2ff204811ba07175d2d3837f3b0554a28b8a9aaa1fcc15eaa3ccbd178540acc0cfa6bf3e9a7ca76f680ddbefcf273654deed4431537e3f2bfb670a0c7bd3e27dbeff40befb075c223aafa8670564a4e554949d99489d54f24d270d06513344deac362e82d50c97ac1d7a8e8ded37462b2e0c5f7fd861c769c0c06b9d6d92e35e1c577df7c8bcecb809a46174780815f446ed2ebc95f68d83d2f6827ac625477af96ac6be09b4cc4f7d127bec7c58090c03a20b8845abc6f235"}, {0xe4, 0xff, 0x7fffffff, "40dd2242b005a97c21cdfb5d802fe69c7222a2302273ceb7e55df5c8f55f49cca55122f3ac0340315b207fd0741d0c7da1d1cb6f794e22fa6b1b41a67ca479011ade05bebda031b83fe6fa165382cbbf1b5125ca7429c2f788738e8953b11e3c47907c2bd7d28f923a4d78c14c67ac9b87ac66c8d5d5227bbb2e4a1b2deba583047cc4ea9b8fb215af1a555ed0549d7d6c0460e0072f0c7fe0d55f43b64140e304614f65dc7aa89be90ce7fa447026dd9795a60cd1d5da7f36a4b69f8e017a46842c448466a03128239f826e4f484167442de552d825"}, {0x4c, 0x115, 0x64871cc4, "6b686d21d658bc9258809a8d7104588f445b7c3ffad44df77ac80c56ceaebdc65048539698ca95b44eab0c030dfc1b2f5f97f3409691f7442d95ee63e2e613"}], 0x434}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000fc0)="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", 0xff}, {&(0x7f00000010c0)="e572ea2be5f165b909fee1e4e9197afa8498b78186a3b6e9f50c3811b5666dbfa9e53f0d5c7e83b28634fff4e77d722a6e17fe849db875df3f4229680c81d4c38bbf83a3ee65883e9ac97469a5264bac82ff5b47a610846d3e81fb098288f302594098e7cf78e55ca69497bde3de07f704dd5ceb434e4c9b30fb8eb6ef65b6f39ccb2f108b8f14ac4a5e277ef385620db49bfc9da79d751adceeb2853a36bf6b27f6661e914eeacfd38a0a3c5f3000a6b08f8a435974499ac33b4188cb1f60ff2ed64c8cb04d25486fc408c00b0b1078a66d052bb4d143", 0xd7}], 0x2, &(0x7f0000001200)=[{0xc4, 0x117, 0x8, "ed3ccb2af4a8f8517f583dc5915bd040259b62bcd51e6316d986fc65363673adb9f6d618dee462e05f97edb2854d4589729081a525716c02bb42d50c52053344f38bfc462e5188780b89b3643a72f296db0a3b4903cf88958db21326791a23029299d3a53ed6356afe9e7819f121aee786d57904a4b98c4669a6401ea5fad133ae12f315bad3dd586a3f8fcdba20f150784dbcda7072aebd889c94f7fcb23a373ee0dd891b1ce6428f55704590a44872f699086a52fc1ef0"}, {0xc, 0x57d65fd7d1249702, 0x5}], 0xd0}}, {{&(0x7f0000001300)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f0000001540)=[{&(0x7f00000041c0)="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", 0x1000}, {&(0x7f0000001380)="073945531b618de87f908c9a7f547696519e5471f61a381cfba809a99a15753e30f61fcc1e875a219ae9156e", 0x2c}, {&(0x7f00000013c0)="655328444a9d7555a9aaaec48eb29106aa40e1b7e3075316b4", 0x19}, {&(0x7f0000001400)="a1181362bef8cb5979e15b4b49f9409fef19edc34484fd06416d76dc49529eca7f815495bcbc5d850c0ad7d0aa31b2452ba3e3494d7afa9b76d575924355089371e687c37caa7fd3644638efc433cb46e6ede3618185c6eab528d944248d451b7790563a87c3fccf7f6c069d900861df7c2965be09604b5909b072fa7cbb3e5de1cb8996c714df0d3ee90b06a65d3554da9c3fa77c389c281e5d47c4b1ced9bac362bb560b36d0aed1f1886bf0e2267c61b9b41e548c29d665524570", 0xbc}, {&(0x7f00000014c0)="6ead8213e6deed64a6721f612f59dbfae60baed338c40f476c682b5d9e8f0faf6ff9e4f3fd3c0c343f611f8a0dd23e19d24dc5835b5fb1a3ea603d9df637b83c7f3d83c26a9391beeb4392b9e306ce12873949db98351d10f4dfd9c8a89f8daeb4ce93d51133c1ceed06d2b8d53b97a7", 0x70}], 0x5, &(0x7f0000001580)=[{0x50, 0x10e, 0x1000, "657908069365bc77a1d4142c495007be892753003aa04e661c0a39aae3d81e5f60884813942597af459403e5b16a2237e25fec81de38682e60984c36fdc0b73e2986"}, {0xc8, 0x119, 0x8, "a84e373938ece2e474c2d72c6cb820f8c007f85844a80def1653e1f9e6967d768cc38e2b1db1dc13b45caa1b2984762d3c33332ca6fb6ad3ef8f72a1cd902332de963b64c1d8c11329c8eb20e720a4d66d9b29a76afdfe870105ead9396d08482da314e8e960301945cd660e3c1b2c9dac3213460390327d8078453bfd4f36a97d15fc843ce1713b3dee72cdd61106a41fa262965bac068ebf71ead37282ebfa11e4a44797574ee408134129e19b0c8d2dd97024ad15672915"}], 0x118}}], 0x6, 0x0) recvmmsg$unix(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000480)=""/10, 0xa, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000002140)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f00000101c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x62000000}, [@alu={0x4, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 1.895478005s ago: executing program 2 (id=1467): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000100)=0x9, 0x5a) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000012c0)={0x41}, 0x10) (async) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)="f697079a16", 0x5}], 0x2, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x100) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x383, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xd7}}, './file0\x00'}) fanotify_mark(r6, 0x80, 0x8001020, 0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00') read$midi(r0, 0x0, 0x49) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x1, 0xd3}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x2, 0x7c}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x0, 0x1, 0x28, 0x6}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42d}}, {0x5, &(0x7f00000001c0)=@string={0x5, 0x3, "ec0765"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x140a}}]}) (async) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) 1.895211391s ago: executing program 4 (id=1468): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x3000, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) 1.394110792s ago: executing program 0 (id=1469): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)=0x4f) 1.260436681s ago: executing program 4 (id=1470): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x9) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000740)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000140)={0x1, r8}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x20000) syz_emit_ethernet(0xfc1, &(0x7f0000002200)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) socket$inet6(0xa, 0x1, 0x5) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.145603117s ago: executing program 0 (id=1471): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x20, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @loopback}}}}, 0x0) 878.888616ms ago: executing program 2 (id=1472): socket$inet(0x2b, 0x801, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380), 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000000), 0x20000000000000a4, 0x0, 0x0, 0x0) 780.165616ms ago: executing program 0 (id=1473): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x2040) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x1a480, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000e00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="330300000000000000001c000000"], 0x14}}, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x2, 0x3}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x45, 0x1, 0x0, "96a34aa4baf8b1af76394464acd7362500"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) writev(r6, &(0x7f0000000040), 0x2) close(r6) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x5, 0xff, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x2}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905fdffffff000000072501"], 0x0) 743.364665ms ago: executing program 3 (id=1474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000774a35f0cc45000000000000000100000300000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000aae8e694a5c020b71a3cd82f97a86b165a351e0775de302753eb308f8fea1c0b4d29c850e4910dd496cdfc421b35f94c663e80ddff60bc3e56ca7d35919d4adbaeb407b12bbda4456ced996829e4be5d35263a9cb88506a29d3cbef1e314a3208ba353523c41a89156116a894c0923d0b968100b6a35770000000010"], 0x54) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r1, 0x6, 0x25, &(0x7f0000000100), 0x4) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="17090000000000000000010000000500070000000000080009000000800008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffe000000106001b004e"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = io_uring_setup(0xa39, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8000000}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x17, 0x20000002, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="f66d000000000000000005000000180001801400020073797a5f74756e0000000000007b7174d803800000"], 0x30}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="070000000000000114001a80100004800c00018008"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000007ee595a1320a4fa6000a54000000060a0b04000000000000000002000000200004801c0001800a0001006c696d69740000000c00028008000440000000010900010073797a30000000000900020073797a32000000000500074057000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e4cb032021042302bdb10102030109022e00010000000009040000000202ff1e052406000005240000000d240f0100f84300000000000005241300b0a8bf91ea6502a592367c82e21d309aeb6b4bcac09e5d7958e39a1370603204b419dae6524d42249457b9b80a94ea22ae4eb607fd72e175e1"], 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x2c0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000180)={r11, 0x1}, &(0x7f00000001c0)=0x8) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) 603.59686ms ago: executing program 2 (id=1475): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x4}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)={'#! ', './file0/file0', [{0x20, '#! e.\x17uj\xff'}], 0xa, "251d5c258693f808b835a06cca0aa09f8bb07fc93d0458f6c678e50f36facb2d39f74482c0bdfe386c00000000ddc3981b75d0a4a4b80a6ad9550c9d0c4b2da9c3a9"}, 0x6c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r12, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r13, @ANYBLOB="04002a000500880000000000060048"], 0x44}}, 0x0) (async) r14 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="b805000000b90d0000000f01c1b805000000b9c7c400000f01c1b9760a0000b8c4480000ba000000000f30b93a000000b800000000ba000000800f3045ae66410f3880b76600000048b800800000000000000f23c80f21f8350c0020000f23f866450f5144f7880f07470f01c8", 0x6d}], 0x1, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000900)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "06c560dc"}]}}, 0x0}, 0x0) 482.694049ms ago: executing program 1 (id=1450): mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/237, 0xed}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003904000000000000000000", @ANYBLOB="e9"], 0x40}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 436.922293ms ago: executing program 4 (id=1476): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xa00100) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 273.435786ms ago: executing program 2 (id=1477): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000000009000200256420ad000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x4048aec9, &(0x7f0000000700)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0xca20}, 0x10, 0x0) accept4(r2, &(0x7f0000000200)=@l2tp6, &(0x7f0000000100)=0x80, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) r8 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r8, 0xc00c55ca, &(0x7f00000000c0)={0x5, 0x3, 0x61a1ecb3}) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/33}, 0x25, 0x2, 0x2800) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 182.226943ms ago: executing program 4 (id=1478): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x24, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="f8", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000004c0)="f8", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000002c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd30700000000000000a414516489f7", 0x24, 0x0, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000002c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd30700000000000000a414516489f7", 0x24, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "a1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1479): mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/237, 0xed}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003904000000000000000000", @ANYBLOB="e9"], 0x40}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0.062399][ T7687] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 400.176495][ T5285] usb 4-1: USB disconnect, device number 46 [ 400.194269][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1216'. [ 400.274893][ T7687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.295376][ T7687] usb 2-1: config 0 has no interfaces? [ 400.300960][ T7687] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 400.331694][ T7687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.369597][ T7687] usb 2-1: config 0 descriptor?? [ 400.417197][T10882] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 400.574085][T10888] atomic_op ffff88802b905998 conn xmit_atomic 0000000000000000 [ 401.721937][T10926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 401.729322][T10926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 402.180248][T10947] FAULT_INJECTION: forcing a failure. [ 402.180248][T10947] name failslab, interval 1, probability 0, space 0, times 0 [ 402.235893][T10947] CPU: 0 UID: 0 PID: 10947 Comm: syz.3.1231 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 402.246839][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 402.256942][T10947] Call Trace: [ 402.260375][T10947] [ 402.263344][T10947] dump_stack_lvl+0x241/0x360 [ 402.268077][T10947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.273326][T10947] ? __pfx__printk+0x10/0x10 [ 402.278164][T10947] ? ref_tracker_alloc+0x332/0x490 [ 402.283330][T10947] should_fail_ex+0x3b0/0x4e0 [ 402.288065][T10947] ? skb_clone+0x20c/0x390 [ 402.292520][T10947] should_failslab+0xac/0x100 [ 402.297254][T10947] ? skb_clone+0x20c/0x390 [ 402.301711][T10947] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 402.307129][T10947] skb_clone+0x20c/0x390 [ 402.311417][T10947] __netlink_deliver_tap+0x3cc/0x7c0 [ 402.316777][T10947] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.322031][T10947] netlink_deliver_tap+0x19d/0x1b0 [ 402.327288][T10947] netlink_sendskb+0x68/0x140 [ 402.332019][T10947] netlink_unicast+0x39d/0x990 [ 402.336828][T10947] ? __asan_memcpy+0x40/0x70 [ 402.341479][T10947] ? __pfx_netlink_unicast+0x10/0x10 [ 402.346825][T10947] netlink_rcv_skb+0x262/0x430 [ 402.351643][T10947] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 402.357149][T10947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.362507][T10947] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.367759][T10947] netlink_unicast+0x7f0/0x990 [ 402.372583][T10947] ? __pfx_netlink_unicast+0x10/0x10 [ 402.377909][T10947] ? __virt_addr_valid+0x183/0x530 [ 402.383071][T10947] ? __check_object_size+0x49c/0x900 [ 402.388394][T10947] ? bpf_lsm_netlink_send+0x9/0x10 [ 402.393558][T10947] netlink_sendmsg+0x8e4/0xcb0 [ 402.398382][T10947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.403724][T10947] ? aa_sock_msg_perm+0x91/0x160 [ 402.408708][T10947] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 402.414040][T10947] ? security_socket_sendmsg+0x87/0xb0 [ 402.419553][T10947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.424890][T10947] __sock_sendmsg+0x221/0x270 [ 402.429632][T10947] sock_write_iter+0x2dd/0x400 [ 402.434451][T10947] ? __pfx_sock_write_iter+0x10/0x10 [ 402.439811][T10947] do_iter_readv_writev+0x60a/0x890 [ 402.445155][T10947] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 402.450934][T10947] ? bpf_lsm_file_permission+0x9/0x10 [ 402.456371][T10947] ? security_file_permission+0x7f/0xa0 [ 402.461978][T10947] ? rw_verify_area+0x1d2/0x6b0 [ 402.466882][T10947] vfs_writev+0x37c/0xbb0 [ 402.471271][T10947] ? __pfx_lock_acquire+0x10/0x10 [ 402.476347][T10947] ? __pfx_vfs_writev+0x10/0x10 [ 402.481237][T10947] ? vfs_write+0x7c4/0xc90 [ 402.485717][T10947] ? __fget_files+0x29/0x470 [ 402.490383][T10947] do_writev+0x1b1/0x350 [ 402.494935][T10947] ? __pfx_do_writev+0x10/0x10 [ 402.499843][T10947] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 402.506485][T10947] ? lockdep_hardirqs_on+0x99/0x150 [ 402.511748][T10947] __do_fast_syscall_32+0xb4/0x110 [ 402.516924][T10947] ? exc_page_fault+0x590/0x8c0 [ 402.521852][T10947] do_fast_syscall_32+0x34/0x80 [ 402.526767][T10947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.533238][T10947] RIP: 0023:0xf7f36579 [ 402.537371][T10947] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 402.557371][T10947] RSP: 002b:00000000f56e657c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 402.565845][T10947] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 402.573868][T10947] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.581890][T10947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.590000][T10947] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 402.598022][T10947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.606055][T10947] [ 402.832372][ T5285] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 402.951882][ T5283] usb 2-1: USB disconnect, device number 77 [ 402.982403][ T5285] usb 5-1: device descriptor read/64, error -71 [ 403.292398][ T5285] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 403.452438][ T5285] usb 5-1: device descriptor read/64, error -71 [ 403.572825][ T5285] usb usb5-port1: attempt power cycle [ 403.823409][T11000] fuse: Unknown parameter 'f' [ 403.882693][ T7684] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 404.002505][ T5285] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 404.064172][ T5285] usb 5-1: device descriptor read/8, error -71 [ 404.102524][ T7684] usb 1-1: Using ep0 maxpacket: 32 [ 404.114967][ T7684] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 404.128412][ T7684] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 404.140649][ T7684] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 404.152885][ T7684] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 404.167090][ T7684] usb 1-1: config 0 interface 0 has no altsetting 0 [ 404.178926][ T7684] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 404.191624][ T7684] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 404.205024][ T7684] usb 1-1: Product: syz [ 404.209687][ T7684] usb 1-1: Manufacturer: syz [ 404.215983][ T7684] usb 1-1: SerialNumber: syz [ 404.226916][ T7684] usb 1-1: config 0 descriptor?? [ 404.237504][ T7684] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 404.264468][ T7684] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 404.372523][ T5285] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 404.452075][ T5285] usb 5-1: device descriptor read/8, error -71 [ 404.576583][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1245'. [ 404.594834][ T5285] usb usb5-port1: unable to enumerate USB device [ 404.932465][ T5285] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 404.962544][ T5242] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 404.971711][ T5242] Bluetooth: hci3: Injecting HCI hardware error event [ 404.981141][ T5240] Bluetooth: hci3: hardware error 0x00 [ 405.102391][ T5285] usb 2-1: device descriptor read/64, error -71 [ 405.270443][T11037] netlink: 'syz.3.1251': attribute type 21 has an invalid length. [ 405.287535][T11037] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1251'. [ 405.394611][ T5285] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 405.474534][T11036] Cannot find del_set index 0 as target [ 405.571239][ T5285] usb 2-1: device descriptor read/64, error -71 [ 405.682560][ T5283] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 405.708848][ T5285] usb usb2-port1: attempt power cycle [ 405.899263][ T5283] usb 4-1: string descriptor 0 read error: -22 [ 405.905825][ T5283] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 405.915335][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.926707][ T5283] usb 4-1: config 0 descriptor?? [ 405.937931][ T5283] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 405.948302][ T5283] usb 4-1: No valid video chain found. [ 406.114219][ T1193] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 406.162455][ T5285] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 406.204496][ T5285] usb 2-1: device descriptor read/8, error -71 [ 406.235219][ T5283] usb 4-1: USB disconnect, device number 47 [ 406.303159][ T1193] usb 3-1: Using ep0 maxpacket: 16 [ 406.310646][ T1193] usb 3-1: config 0 has an invalid interface number: 89 but max is 1 [ 406.319573][ T1193] usb 3-1: config 0 has an invalid interface number: 96 but max is 1 [ 406.328246][ T1193] usb 3-1: config 0 has no interface number 0 [ 406.336550][ T1193] usb 3-1: config 0 has no interface number 1 [ 406.343053][ T1193] usb 3-1: config 0 interface 89 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 406.356061][ T1193] usb 3-1: config 0 interface 89 altsetting 1 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 406.368008][ T1193] usb 3-1: config 0 interface 89 altsetting 1 endpoint 0x84 has invalid wMaxPacketSize 0 [ 406.378136][ T1193] usb 3-1: config 0 interface 89 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 406.389237][ T1193] usb 3-1: config 0 interface 96 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 406.400453][ T1193] usb 3-1: config 0 interface 89 has no altsetting 0 [ 406.407819][ T1193] usb 3-1: config 0 interface 96 has no altsetting 0 [ 406.415075][ T1193] usb 3-1: New USB device found, idVendor=03eb, idProduct=7615, bcdDevice= 4.1f [ 406.429913][ T1193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.441214][ T1193] usb 3-1: config 0 descriptor?? [ 406.502345][ T5285] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 406.533691][ T5285] usb 2-1: device descriptor read/8, error -71 [ 406.657260][ T5285] usb usb2-port1: unable to enumerate USB device [ 406.740768][ T47] usb 1-1: USB disconnect, device number 49 [ 406.805857][ T47] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 407.043498][ T5240] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 407.069001][T11065] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1258'. [ 407.392451][ T25] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 407.568778][ T1193] usb 3-1: string descriptor 0 read error: -71 [ 407.614533][ T25] usb 4-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 407.636017][ T1193] usb 3-1: USB disconnect, device number 48 [ 407.651069][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.685539][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 407.762688][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.771859][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.792146][ T4971] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 407.804863][ T25] usb 4-1: Product: syz [ 407.817891][ T25] usb 4-1: Manufacturer: syz [ 407.823030][ T25] usb 4-1: SerialNumber: syz [ 407.983292][ T4971] usb 1-1: Using ep0 maxpacket: 32 [ 408.034253][ T4971] usb 1-1: config index 0 descriptor too short (expected 13595, got 27) [ 408.066307][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.072491][ T4971] usb 1-1: config 215 has too many interfaces: 47, using maximum allowed: 32 [ 408.100529][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.122308][ T4971] usb 1-1: config 215 has 0 interfaces, different from the descriptor's value: 47 [ 408.156880][ T25] usb 4-1: 0:2 : does not exist [ 408.176235][ T4971] usb 1-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 408.188967][ T4971] usb 1-1: New USB device strings: Mfr=29, Product=2, SerialNumber=3 [ 408.225425][ T25] usb 4-1: USB disconnect, device number 48 [ 408.238146][ T4971] usb 1-1: Product: syz [ 408.251212][ T4971] usb 1-1: Manufacturer: syz [ 408.272389][ T4971] usb 1-1: SerialNumber: syz [ 408.302321][ T1193] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 408.516164][ T1193] usb 2-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 408.548670][ T1193] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.584282][ T1193] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 408.624215][ T1193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.652415][ T1193] usb 2-1: SerialNumber: syz [ 408.999268][T11094] batman_adv: batadv0: Adding interface: erspan1 [ 409.030810][T11094] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 409.186839][ T1193] usb 2-1: 0:2 : does not exist [ 409.191856][ T1193] usb 2-1: unit 255 not found! [ 409.225129][ T1193] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 409.245094][ T1193] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 409.280268][ T1193] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 409.312757][ T1193] usb 2-1: 5:0: cannot get min/max values for control 15 (id 5) [ 409.357910][ T1193] usb 2-1: 5:0: cannot get min/max values for control 16 (id 5) [ 409.392601][ T1193] usb 2-1: 5:0: cannot get min/max values for control 17 (id 5) [ 409.435264][ T1193] usb 2-1: 5:0: cannot get min/max values for control 18 (id 5) [ 409.522921][ T1193] usb 2-1: USB disconnect, device number 82 [ 409.685536][ T7687] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 409.753869][ T8252] udevd[8252]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.862415][ T7687] usb 4-1: device descriptor read/64, error -71 [ 410.136622][T11112] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1272'. [ 410.152548][ T7687] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 410.322673][ T7687] usb 4-1: device descriptor read/64, error -71 [ 410.443138][ T5285] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 410.462665][ T7687] usb usb4-port1: attempt power cycle [ 410.624153][ T4971] usb 1-1: USB disconnect, device number 50 [ 410.683102][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 410.714825][ T5285] usb 3-1: config 0 has an invalid interface number: 89 but max is 1 [ 410.725360][ T5285] usb 3-1: config 0 has an invalid interface number: 96 but max is 1 [ 410.742938][ T5285] usb 3-1: config 0 has no interface number 0 [ 410.763676][ T5285] usb 3-1: config 0 has no interface number 1 [ 410.781227][ T5285] usb 3-1: config 0 interface 89 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 410.799377][ T5285] usb 3-1: config 0 interface 89 altsetting 1 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 410.827771][ T5285] usb 3-1: config 0 interface 89 altsetting 1 endpoint 0x84 has invalid wMaxPacketSize 0 [ 410.863543][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1276'. [ 410.870883][ T5285] usb 3-1: config 0 interface 89 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 410.883794][ T7687] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 410.890631][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 410.910423][T11127] batman_adv: batadv0: Adding interface: erspan1 [ 410.912520][ T5285] usb 3-1: config 0 interface 96 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 410.917878][T11127] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 410.938487][ T7687] usb 4-1: device descriptor read/8, error -71 [ 410.951151][ T5285] usb 3-1: config 0 interface 89 has no altsetting 0 [ 410.968967][ T5285] usb 3-1: config 0 interface 96 has no altsetting 0 [ 410.982333][ T5285] usb 3-1: New USB device found, idVendor=03eb, idProduct=7615, bcdDevice= 4.1f [ 410.992748][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.003562][ T5285] usb 3-1: config 0 descriptor?? [ 411.023380][T11129] kernel read not supported for file /#! [ 411.023380][T11129] ~uƾ j-ox}jj!9Lp}aRhE (pid: 11129 comm: syz.0.1278) [ 411.042352][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 411.042373][ T29] audit: type=1800 audit(1722610587.312:345): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1278" name=2321200AC87E7580C6BE0C6A06ECA62D6F787DD16ADD086A21391C4C707D8B61929D1252681B84C245 dev="mqueue" ino=52454 res=0 errno=0 [ 411.110889][T11131] FAULT_INJECTION: forcing a failure. [ 411.110889][T11131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.152367][T11131] CPU: 1 UID: 0 PID: 11131 Comm: syz.4.1279 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 411.163295][T11131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 411.173473][T11131] Call Trace: [ 411.176784][T11131] [ 411.179749][T11131] dump_stack_lvl+0x241/0x360 [ 411.184482][T11131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.189727][T11131] ? __pfx__printk+0x10/0x10 [ 411.194366][T11131] ? snprintf+0xda/0x120 [ 411.198656][T11131] should_fail_ex+0x3b0/0x4e0 [ 411.203489][T11131] _copy_to_user+0x2f/0xb0 [ 411.207968][T11131] simple_read_from_buffer+0xca/0x150 [ 411.213414][T11131] proc_fail_nth_read+0x1e9/0x250 [ 411.218504][T11131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.224099][T11131] ? rw_verify_area+0x520/0x6b0 [ 411.228998][T11131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.234659][T11131] vfs_read+0x204/0xbc0 [ 411.238860][T11131] ? __pfx_lock_release+0x10/0x10 [ 411.243933][T11131] ? do_sock_setsockopt+0x3e2/0x720 [ 411.249199][T11131] ? __pfx_vfs_read+0x10/0x10 [ 411.253910][T11131] ? ipv6_setsockopt+0xe5/0x1a0 [ 411.258801][T11131] ? __fget_files+0x29/0x470 [ 411.263426][T11131] ? __fget_files+0x3f6/0x470 [ 411.268190][T11131] ksys_read+0x1a0/0x2c0 [ 411.272500][T11131] ? __pfx_ksys_read+0x10/0x10 [ 411.277302][T11131] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 411.283918][T11131] ? lockdep_hardirqs_on+0x99/0x150 [ 411.289149][T11131] __do_fast_syscall_32+0xb4/0x110 [ 411.294292][T11131] ? exc_page_fault+0x590/0x8c0 [ 411.299171][T11131] do_fast_syscall_32+0x34/0x80 [ 411.304070][T11131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.310414][T11131] RIP: 0023:0xf742d579 [ 411.314512][T11131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 411.334220][T11131] RSP: 002b:00000000f57465b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 411.342829][T11131] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5746630 [ 411.350816][T11131] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000 [ 411.358795][T11131] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 411.366787][T11131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.374785][T11131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.382787][T11131] [ 411.389614][ T7687] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 411.463723][ T7687] usb 4-1: device descriptor read/8, error -71 [ 411.593948][ T7687] usb usb4-port1: unable to enumerate USB device [ 411.922592][ T5242] Bluetooth: hci1: command 0x0406 tx timeout [ 412.221271][ T7687] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 412.345684][T11156] input: syz1 as /devices/virtual/input/input28 [ 412.428047][ T7687] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 412.462508][ T7687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.480654][ T5285] usb 3-1: string descriptor 0 read error: -71 [ 412.502379][ T7687] usb 1-1: Product: syz [ 412.506630][ T7687] usb 1-1: Manufacturer: syz [ 412.511262][ T7687] usb 1-1: SerialNumber: syz [ 412.544060][ T5285] usb 3-1: USB disconnect, device number 49 [ 412.560781][ T7687] usb 1-1: config 0 descriptor?? [ 412.580407][ T7687] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 412.599277][ T7687] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 412.636509][ T7687] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 412.652135][ T7687] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 412.681873][ T7687] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 412.694077][ T7687] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 412.743135][ T7687] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 412.763649][ T7687] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 412.789759][ T7687] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 412.802537][ T1193] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 413.035126][ T1193] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 413.038508][ T7687] usb 1-1: USB disconnect, device number 51 [ 413.061473][ T1193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.071561][ T7687] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 413.106031][ T7687] keyspan 1-1:0.0: device disconnected [ 413.110320][ T1193] usb 2-1: config 0 descriptor?? [ 413.354023][T11156] openvswitch: netlink: Flow actions attr not present in new flow. [ 413.600302][ T1193] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 413.637441][ T1193] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 413.672600][ T1193] usb 2-1: USB disconnect, device number 83 [ 413.722955][ T5282] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 413.813707][T11187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.952412][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 413.968226][ T5282] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.982845][ T5282] usb 3-1: config 0 has no interface number 0 [ 413.989252][ T5282] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 414.009472][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.046994][ T5282] usb 3-1: config 0 descriptor?? [ 414.075169][ T5282] gspca_main: spca501-2.14.0 probing 0000:0000 [ 414.355752][ T5282] gspca_spca501: reg write: error -71 [ 414.394452][ T5282] spca501 3-1:0.1: Reg write failed for 0x02,0x0f,0x05 [ 414.424745][ T5282] spca501 3-1:0.1: probe with driver spca501 failed with error -22 [ 414.474072][ T5282] usb 3-1: USB disconnect, device number 50 [ 414.842717][ T7687] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 414.959384][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1303'. [ 415.056665][ T7687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.087847][ T7687] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.132637][ T7687] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.169099][ T7687] usb 5-1: config 1 interface 1 has no altsetting 0 [ 415.191470][ T7687] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.221136][ T7687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.241725][ T7687] usb 5-1: Product: syz [ 415.247731][ T7687] usb 5-1: Manufacturer: syz [ 415.262457][ T7687] usb 5-1: SerialNumber: syz [ 415.291777][ T7687] cdc_ncm 5-1:1.0: skipping garbage [ 415.314627][ T7687] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 415.341659][ T7687] cdc_ncm 5-1:1.0: bind() failure [ 415.515694][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.548991][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.595169][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.615350][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.699251][ T7687] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 415.740748][ T7687] usb 5-1: USB disconnect, device number 50 [ 415.787587][T11218] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1307'. [ 415.812103][T11220] FAULT_INJECTION: forcing a failure. [ 415.812103][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 415.841589][T11220] CPU: 0 UID: 0 PID: 11220 Comm: syz.1.1308 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 415.852437][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 415.859722][T11221] fuse: Unknown parameter ' ' [ 415.862508][T11220] Call Trace: [ 415.870576][T11220] [ 415.873556][T11220] dump_stack_lvl+0x241/0x360 [ 415.878288][T11220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.883539][T11220] ? __pfx__printk+0x10/0x10 [ 415.888181][T11220] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 415.893785][T11220] ? __pfx___might_resched+0x10/0x10 [ 415.899134][T11220] should_fail_ex+0x3b0/0x4e0 [ 415.903964][T11220] ? vm_area_dup+0x61/0x290 [ 415.908520][T11220] should_failslab+0xac/0x100 [ 415.913257][T11220] ? vm_area_dup+0x61/0x290 [ 415.917811][T11220] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 415.923244][T11220] vm_area_dup+0x61/0x290 [ 415.927649][T11220] copy_vma+0x442/0x910 [ 415.932028][T11220] ? __pfx_copy_vma+0x10/0x10 [ 415.936746][T11220] ? mtree_load+0x1ef/0x940 [ 415.941303][T11220] move_vma+0x6a1/0x19a0 [ 415.945613][T11220] ? __pfx_move_vma+0x10/0x10 [ 415.950338][T11220] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 415.956299][T11220] ? bpf_lsm_mmap_addr+0x9/0x10 [ 415.961210][T11220] ? security_mmap_addr+0x77/0x90 [ 415.967884][T11220] ? __get_unmapped_area+0x2f0/0x360 [ 415.973253][T11220] __se_sys_mremap+0x134b/0x1980 [ 415.973313][T11220] ? __pfx___se_sys_mremap+0x10/0x10 [ 415.973347][T11220] ? __fget_files+0x3f6/0x470 [ 415.973394][T11220] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 415.973432][T11220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 415.973474][T11220] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 415.973506][T11220] ? __ia32_sys_mremap+0x20/0xc0 [ 416.012499][T11220] __do_fast_syscall_32+0xb4/0x110 [ 416.012538][T11220] ? exc_page_fault+0x590/0x8c0 [ 416.012567][T11220] do_fast_syscall_32+0x34/0x80 [ 416.012600][T11220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.012622][T11220] RIP: 0023:0xf73ed579 [ 416.012640][T11220] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 416.012658][T11220] RSP: 002b:00000000f570657c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 416.012681][T11220] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 0000000000002000 [ 416.012697][T11220] RDX: 0000000005000000 RSI: 0000000000000003 RDI: 0000000020ffd000 [ 416.012710][T11220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.012723][T11220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 416.012736][T11220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.012766][T11220] [ 416.012920][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.525294][T11229] fuse: Bad value for 'rootmode' [ 417.173720][T11245] FAULT_INJECTION: forcing a failure. [ 417.173720][T11245] name failslab, interval 1, probability 0, space 0, times 0 [ 417.173761][T11245] CPU: 0 UID: 0 PID: 11245 Comm: syz.1.1315 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 417.173789][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 417.173804][T11245] Call Trace: [ 417.173815][T11245] [ 417.173826][T11245] dump_stack_lvl+0x241/0x360 [ 417.173867][T11245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.173906][T11245] ? __pfx__printk+0x10/0x10 [ 417.173939][T11245] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 417.173968][T11245] ? __pfx___might_resched+0x10/0x10 [ 417.174004][T11245] should_fail_ex+0x3b0/0x4e0 [ 417.174047][T11245] should_failslab+0xac/0x100 [ 417.174083][T11245] ? ovs_flow_tbl_init+0x3f0/0x890 [ 417.174116][T11245] __kmalloc_cache_noprof+0x6c/0x2c0 [ 417.174150][T11245] ovs_flow_tbl_init+0x3f0/0x890 [ 417.174188][T11245] ovs_dp_cmd_new+0x246/0xc10 [ 417.174235][T11245] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 417.174276][T11245] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 417.174312][T11245] genl_rcv_msg+0xb14/0xec0 [ 417.174333][T11245] ? mark_lock+0x9a/0x350 [ 417.174378][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.174432][T11245] ? __pfx_lock_acquire+0x10/0x10 [ 417.174463][T11245] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 417.174505][T11245] ? __pfx___might_resched+0x10/0x10 [ 417.174548][T11245] netlink_rcv_skb+0x1e3/0x430 [ 417.174581][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.174607][T11245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.174654][T11245] ? __netlink_deliver_tap+0x77e/0x7c0 [ 417.174703][T11245] genl_rcv+0x28/0x40 [ 417.174725][T11245] netlink_unicast+0x7f0/0x990 [ 417.174765][T11245] ? __pfx_netlink_unicast+0x10/0x10 [ 417.174791][T11245] ? __virt_addr_valid+0x183/0x530 [ 417.174818][T11245] ? __check_object_size+0x49c/0x900 [ 417.174841][T11245] ? bpf_lsm_netlink_send+0x9/0x10 [ 417.174875][T11245] netlink_sendmsg+0x8e4/0xcb0 [ 417.174926][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.174963][T11245] ? aa_sock_msg_perm+0x91/0x160 [ 417.174993][T11245] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.175023][T11245] ? security_socket_sendmsg+0x87/0xb0 [ 417.175059][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.175090][T11245] __sock_sendmsg+0x221/0x270 [ 417.175124][T11245] ____sys_sendmsg+0x525/0x7d0 [ 417.175159][T11245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.175203][T11245] __sys_sendmsg+0x2b0/0x3a0 [ 417.175231][T11245] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.175252][T11245] ? vfs_write+0x7c4/0xc90 [ 417.175339][T11245] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 417.175370][T11245] ? lockdep_hardirqs_on+0x99/0x150 [ 417.175401][T11245] __do_fast_syscall_32+0xb4/0x110 [ 417.175434][T11245] ? exc_page_fault+0x590/0x8c0 [ 417.175466][T11245] do_fast_syscall_32+0x34/0x80 [ 417.175497][T11245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.175524][T11245] RIP: 0023:0xf73ed579 [ 417.175545][T11245] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 417.175566][T11245] RSP: 002b:00000000f570657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 417.175593][T11245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 417.175611][T11245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.175625][T11245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.175641][T11245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 417.175657][T11245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.175690][T11245] [ 417.452380][ T7687] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 417.465024][ T1193] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 417.634957][ T7687] usb 4-1: Using ep0 maxpacket: 8 [ 417.639906][ T7687] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.639941][ T7687] usb 4-1: config 0 has no interface number 0 [ 417.639993][ T7687] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 417.640021][ T7687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.642378][ T1193] usb 5-1: Using ep0 maxpacket: 32 [ 417.642996][ T7687] usb 4-1: config 0 descriptor?? [ 417.647038][ T1193] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 417.647314][ T7687] gspca_main: spca501-2.14.0 probing 0000:0000 [ 417.649635][ T1193] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 417.649670][ T1193] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 417.649696][ T1193] usb 5-1: Product: syz [ 417.649715][ T1193] usb 5-1: Manufacturer: syz [ 417.649735][ T1193] usb 5-1: SerialNumber: syz [ 417.652791][ T1193] usb 5-1: config 0 descriptor?? [ 417.655643][T11244] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 417.828120][T11255] netlink: 'syz.2.1319': attribute type 3 has an invalid length. [ 417.887674][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 417.888080][ T4971] usb 5-1: USB disconnect, device number 51 [ 418.152531][ T7687] gspca_spca501: reg write: error -110 [ 418.152556][ T7687] spca501 4-1:0.1: Reg write failed for 0x02,0x0f,0x05 [ 418.152760][ T7687] spca501 4-1:0.1: probe with driver spca501 failed with error -22 [ 418.502476][ T4971] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 418.697638][ T4971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.750112][ T4971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.782449][ T4971] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice=18.00 [ 418.791584][ T4971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.833724][ T4971] usb 5-1: config 0 descriptor?? [ 418.912338][ T7687] usb 4-1: USB disconnect, device number 53 [ 419.258387][ T4971] wacom 0003:056A:00D0.0018: unknown main item tag 0x0 [ 419.289914][ T4971] wacom 0003:056A:00D0.0018: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 419.316528][ T4971] wacom 0003:056A:00D0.0018: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 419.363095][ T4971] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0018/input/input29 [ 419.451873][T11244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.502902][T11244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.672816][ T4971] usb 5-1: USB disconnect, device number 52 [ 419.760825][T11300] FAULT_INJECTION: forcing a failure. [ 419.760825][T11300] name failslab, interval 1, probability 0, space 0, times 0 [ 419.807801][T11300] CPU: 0 UID: 0 PID: 11300 Comm: syz.0.1334 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 419.818664][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 419.828849][T11300] Call Trace: [ 419.832146][T11300] [ 419.835094][T11300] dump_stack_lvl+0x241/0x360 [ 419.839803][T11300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.845028][T11300] ? __pfx__printk+0x10/0x10 [ 419.849729][T11300] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 419.855749][T11300] ? __pfx___might_resched+0x10/0x10 [ 419.861057][T11300] should_fail_ex+0x3b0/0x4e0 [ 419.865786][T11300] should_failslab+0xac/0x100 [ 419.870591][T11300] ? __alloc_skb+0x1c3/0x440 [ 419.875207][T11300] kmem_cache_alloc_node_noprof+0x71/0x320 [ 419.881035][T11300] __alloc_skb+0x1c3/0x440 [ 419.885469][T11300] ? __pfx_validate_chain+0x10/0x10 [ 419.890679][T11300] ? __pfx___alloc_skb+0x10/0x10 [ 419.895637][T11300] ? validate_chain+0x11e/0x5900 [ 419.900585][T11300] ? __pfx_validate_chain+0x10/0x10 [ 419.905793][T11300] alloc_skb_with_frags+0xc3/0x770 [ 419.910930][T11300] ? post_alloc_hook+0x206/0x230 [ 419.915892][T11300] sock_alloc_send_pskb+0x91a/0xa60 [ 419.921205][T11300] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 419.926938][T11300] ? __lock_acquire+0x137a/0x2040 [ 419.932421][T11300] ? __pfx___might_resched+0x10/0x10 [ 419.937726][T11300] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 419.943812][T11300] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 419.950162][T11300] unix_stream_sendmsg+0x51a/0xf80 [ 419.955306][T11300] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 419.960956][T11300] ? aa_sock_msg_perm+0x91/0x160 [ 419.965908][T11300] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 419.971217][T11300] ? security_socket_sendmsg+0x87/0xb0 [ 419.976709][T11300] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 419.982363][T11300] __sock_sendmsg+0x221/0x270 [ 419.987069][T11300] ____sys_sendmsg+0x525/0x7d0 [ 419.991854][T11300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.997166][T11300] __sys_sendmmsg+0x4af/0x740 [ 420.001895][T11300] ? __pfx___sys_sendmmsg+0x10/0x10 [ 420.007110][T11300] ? __pfx_lock_acquire+0x10/0x10 [ 420.012250][T11300] ? get_pid_task+0x23/0x1f0 [ 420.016951][T11300] ? __pfx_lock_release+0x10/0x10 [ 420.021993][T11300] ? kstrtouint_from_user+0x128/0x190 [ 420.027416][T11300] ? __pfx_lock_release+0x10/0x10 [ 420.032472][T11300] ? __mutex_unlock_slowpath+0x21d/0x750 [ 420.038127][T11300] ? __fget_files+0x3f6/0x470 [ 420.042833][T11300] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.048920][T11300] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 420.055291][T11300] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 420.060878][T11300] __do_fast_syscall_32+0xb4/0x110 [ 420.066024][T11300] ? exc_page_fault+0x590/0x8c0 [ 420.070910][T11300] do_fast_syscall_32+0x34/0x80 [ 420.075888][T11300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 420.082252][T11300] RIP: 0023:0xf743d579 [ 420.086356][T11300] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 420.106070][T11300] RSP: 002b:00000000f575657c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 420.114601][T11300] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000780 [ 420.122590][T11300] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 420.130574][T11300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.138555][T11300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 420.146542][T11300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.154566][T11300] [ 420.157850][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.307510][T11309] kernel read not supported for file /#! [ 420.307510][T11309] ~uƾ j-ox}jj!9Lp}aRhE:j<5AJ.ͬB [ 420.307510][T11309] (pid: 11309 comm: syz.2.1337) [ 420.337708][ T29] audit: type=1800 audit(1722610596.612:346): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1337" name=2321200AC87E7580C6BE0C6A06ECA62D6F787DD16ADD086A21391C4C707D8B61929D1252681B84C245E0EFAFE2E6E73AD86A3CF59235AB0EACBB414AF92EC3CDAC420A dev="mqueue" ino=51720 res=0 errno=0 [ 420.368920][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.387158][T11311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.542575][ T1193] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 420.637772][T11316] trusted_key: encrypted_key: master key parameter 'd\+9C;!edalt' is invalid [ 420.677906][T11316] FAULT_INJECTION: forcing a failure. [ 420.677906][T11316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.698482][T11316] CPU: 1 UID: 0 PID: 11316 Comm: syz.2.1339 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 420.709303][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 420.719401][T11316] Call Trace: [ 420.722720][T11316] [ 420.725688][T11316] dump_stack_lvl+0x241/0x360 [ 420.730416][T11316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.735663][T11316] ? __pfx__printk+0x10/0x10 [ 420.740304][T11316] should_fail_ex+0x3b0/0x4e0 [ 420.745035][T11316] _copy_from_user+0x2f/0xe0 [ 420.749673][T11316] copy_uabi_to_xstate+0x403/0xb30 [ 420.754843][T11316] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 420.760540][T11316] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 420.766323][T11316] ? __might_fault+0xaa/0x120 [ 420.771059][T11316] ? __might_fault+0xc6/0x120 [ 420.775794][T11316] fpu__restore_sig+0xdce/0x11b0 [ 420.780787][T11316] ? fpu__restore_sig+0xc1c/0x11b0 [ 420.785959][T11316] ? __pfx_fpu__restore_sig+0x10/0x10 [ 420.791408][T11316] ? __might_fault+0xc6/0x120 [ 420.796144][T11316] ia32_restore_sigcontext+0x583/0x910 [ 420.801665][T11316] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 420.807703][T11316] ? lockdep_hardirqs_on+0x99/0x150 [ 420.812950][T11316] ? _raw_spin_unlock_irq+0x2e/0x50 [ 420.818280][T11316] ? __set_current_blocked+0x310/0x380 [ 420.823802][T11316] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.829936][T11316] __do_compat_sys_rt_sigreturn+0x162/0x230 [ 420.835989][T11316] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 420.842481][T11316] ? lockdep_hardirqs_on+0x99/0x150 [ 420.847744][T11316] ? do_int80_emulation+0xe8/0x200 [ 420.852909][T11316] do_int80_emulation+0x11f/0x200 [ 420.858017][T11316] ? clear_bhb_loop+0x35/0x90 [ 420.862713][T11316] ? clear_bhb_loop+0x35/0x90 [ 420.867409][T11316] asm_int80_emulation+0x1a/0x20 [ 420.872374][T11316] RIP: 0023:0xf745d579 [ 420.876450][T11316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 420.896106][T11316] RSP: 002b:00000000f575557c EFLAGS: 00000206 [ 420.902234][T11316] RAX: 00000000ffffffea RBX: 0000000020000140 RCX: 0000000020000180 [ 420.910235][T11316] RDX: 0000000020000100 RSI: 00000000000000ca RDI: 00000000fffffffe [ 420.918221][T11316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 420.926324][T11316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 420.934366][T11316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.942383][T11316] [ 421.004767][ T1193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.053335][ T1193] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 421.071873][ T1193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.086729][ T1193] usb 1-1: config 0 descriptor?? [ 421.217557][T11330] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 421.225676][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 421.268997][T11335] FAULT_INJECTION: forcing a failure. [ 421.268997][T11335] name failslab, interval 1, probability 0, space 0, times 0 [ 421.311681][T11335] CPU: 0 UID: 0 PID: 11335 Comm: syz.3.1345 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 421.322539][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 421.332641][T11335] Call Trace: [ 421.335960][T11335] [ 421.338927][T11335] dump_stack_lvl+0x241/0x360 [ 421.343652][T11335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.348903][T11335] ? __pfx__printk+0x10/0x10 [ 421.353544][T11335] ? __kmalloc_noprof+0xb0/0x400 [ 421.358525][T11335] ? __pfx___might_resched+0x10/0x10 [ 421.363869][T11335] should_fail_ex+0x3b0/0x4e0 [ 421.368580][T11335] ? iovec_from_user+0x87/0x240 [ 421.373444][T11335] should_failslab+0xac/0x100 [ 421.378170][T11335] ? iovec_from_user+0x87/0x240 [ 421.383063][T11335] __kmalloc_noprof+0xd8/0x400 [ 421.387856][T11335] iovec_from_user+0x87/0x240 [ 421.392589][T11335] __import_iovec+0x132/0x820 [ 421.397321][T11335] import_iovec+0xeb/0x120 [ 421.401800][T11335] get_compat_msghdr+0x500/0x730 [ 421.406804][T11335] ? __pfx_get_compat_msghdr+0x10/0x10 [ 421.412320][T11335] ? __fget_files+0x3f6/0x470 [ 421.417051][T11335] do_recvmmsg+0x52a/0xae0 [ 421.421496][T11335] ? mark_lock+0x9a/0x350 [ 421.425867][T11335] ? __pfx_do_recvmmsg+0x10/0x10 [ 421.430869][T11335] ? vfs_write+0x7c4/0xc90 [ 421.435331][T11335] ? get_old_timespec32+0x18b/0x280 [ 421.440580][T11335] __sys_recvmmsg+0x13e/0x270 [ 421.445296][T11335] ? __pfx___sys_recvmmsg+0x10/0x10 [ 421.450522][T11335] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.456884][T11335] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 421.463103][T11335] __do_fast_syscall_32+0xb4/0x110 [ 421.468259][T11335] ? exc_page_fault+0x590/0x8c0 [ 421.473139][T11335] do_fast_syscall_32+0x34/0x80 [ 421.478029][T11335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.484391][T11335] RIP: 0023:0xf7f36579 [ 421.488480][T11335] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 421.508120][T11335] RSP: 002b:00000000f56e657c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 421.516594][T11335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200037c0 [ 421.518453][ T1193] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 421.524588][T11335] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000020003700 [ 421.524611][T11335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.524625][T11335] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.524640][T11335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.524671][T11335] [ 421.524838][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.546689][ T1193] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0019/input/input32 [ 421.549257][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.591770][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.642806][ T4971] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 421.671054][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.693755][ T1193] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 421.853078][ T4971] usb 5-1: Using ep0 maxpacket: 32 [ 421.869914][ T4971] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 421.873733][ T29] audit: type=1326 audit(1722610598.152:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.3.1347" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x0 [ 421.892293][ T4971] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 421.899879][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.967275][ T4971] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 422.001520][ T4971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.019848][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.036933][T11348] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.052780][ T4971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 422.053796][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.085804][T11348] FAULT_INJECTION: forcing a failure. [ 422.085804][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 422.098625][T11348] CPU: 1 UID: 0 PID: 11348 Comm: syz.1.1348 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 422.100385][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.109410][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 422.109454][T11348] Call Trace: [ 422.109467][T11348] [ 422.109478][T11348] dump_stack_lvl+0x241/0x360 [ 422.109520][T11348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.109552][T11348] ? __pfx__printk+0x10/0x10 [ 422.123886][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.127959][T11348] should_fail_ex+0x3b0/0x4e0 [ 422.163079][T11348] should_failslab+0xac/0x100 [ 422.167834][T11348] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 422.174218][T11348] ? nf_ct_ext_add+0x1a2/0x3e0 [ 422.179052][T11348] krealloc_noprof+0x7d/0x120 [ 422.183785][T11348] nf_ct_ext_add+0x1a2/0x3e0 [ 422.188435][T11348] init_conntrack+0x8bf/0x1310 [ 422.193264][T11348] ? __pfx_init_conntrack+0x10/0x10 [ 422.198513][T11348] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 422.204544][T11348] ? __local_bh_enable_ip+0x168/0x200 [ 422.209974][T11348] nf_conntrack_in+0xd59/0x1880 [ 422.214914][T11348] ? __pfx_nf_conntrack_in+0x10/0x10 [ 422.220275][T11348] ? ipt_do_table+0x312/0x1860 [ 422.225100][T11348] ? __pfx_ipt_do_table+0x10/0x10 [ 422.230197][T11348] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 422.230230][T11348] ? ip_sabotage_in+0x55/0x290 [ 422.230268][T11348] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 422.230296][T11348] nf_hook_slow+0xc3/0x220 [ 422.230326][T11348] ? __pfx_ip_rcv_finish+0x10/0x10 [ 422.230359][T11348] ? __pfx_ip_rcv_finish+0x10/0x10 [ 422.230393][T11348] NF_HOOK+0x29e/0x450 [ 422.230431][T11348] ? NF_HOOK+0x9a/0x450 [ 422.230465][T11348] ? __pfx_NF_HOOK+0x10/0x10 [ 422.230496][T11348] ? ip_rcv_core+0x801/0xd10 [ 422.230540][T11348] ? __pfx_ip_rcv_finish+0x10/0x10 [ 422.230584][T11348] ? __pfx_ip_rcv+0x10/0x10 [ 422.230619][T11348] __netif_receive_skb+0x2bf/0x650 [ 422.230652][T11348] ? __pfx_lock_acquire+0x10/0x10 [ 422.230684][T11348] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 422.230714][T11348] ? __pfx___netif_receive_skb+0x10/0x10 [ 422.230740][T11348] ? __kasan_slab_alloc+0x66/0x80 [ 422.230778][T11348] ? read_tsc+0x9/0x20 [ 422.230806][T11348] ? timekeeping_get_ns+0x2c0/0x420 [ 422.230845][T11348] ? netif_receive_skb+0x131/0x890 [ 422.230871][T11348] ? netif_receive_skb+0x131/0x890 [ 422.230899][T11348] netif_receive_skb+0x1e8/0x890 [ 422.230926][T11348] ? tun_rx_batched+0x160/0x8f0 [ 422.230951][T11348] ? __pfx_netif_receive_skb+0x10/0x10 [ 422.230993][T11348] ? tun_rx_batched+0x160/0x8f0 [ 422.231016][T11348] tun_rx_batched+0x1b7/0x8f0 [ 422.231040][T11348] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.231079][T11348] ? __pfx_lock_acquire+0x10/0x10 [ 422.231112][T11348] ? __pfx_tun_rx_batched+0x10/0x10 [ 422.231160][T11348] tun_get_user+0x2f84/0x4720 [ 422.231184][T11348] ? tun_get_user+0x2a78/0x4720 [ 422.231223][T11348] ? __lock_acquire+0x137a/0x2040 [ 422.231265][T11348] ? __pfx_tun_get_user+0x10/0x10 [ 422.231313][T11348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 422.231340][T11348] ? tun_get+0x1e/0x2f0 [ 422.231363][T11348] ? __pfx_lock_release+0x10/0x10 [ 422.231415][T11348] ? tun_get+0x1e/0x2f0 [ 422.231435][T11348] ? tun_get+0x27d/0x2f0 [ 422.231460][T11348] tun_chr_write_iter+0x113/0x1f0 [ 422.231501][T11348] vfs_write+0xa72/0xc90 [ 422.231543][T11348] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 422.231582][T11348] ? __pfx_vfs_write+0x10/0x10 [ 422.231639][T11348] ksys_write+0x1a0/0x2c0 [ 422.231677][T11348] ? __pfx_ksys_write+0x10/0x10 [ 422.231711][T11348] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 422.231743][T11348] ? lockdep_hardirqs_on+0x99/0x150 [ 422.231775][T11348] __do_fast_syscall_32+0xb4/0x110 [ 422.231808][T11348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.231844][T11348] ? lockdep_hardirqs_on+0x99/0x150 [ 422.231877][T11348] do_fast_syscall_32+0x34/0x80 [ 422.231909][T11348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.231935][T11348] RIP: 0023:0xf73ed579 [ 422.231957][T11348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 422.231978][T11348] RSP: 002b:00000000f56c4540 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 422.232004][T11348] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000540 [ 422.232022][T11348] RDX: 0000000000000036 RSI: 00000000f73dcff4 RDI: 0000000000000000 [ 422.232038][T11348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.232053][T11348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 422.232068][T11348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.232102][T11348] [ 422.238116][ T4971] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 422.597538][ T4971] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 422.598356][ T7687] usb 1-1: USB disconnect, device number 52 [ 422.606746][ T4971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.628869][ T4971] usb 5-1: config 0 descriptor?? [ 422.861076][ T4971] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 422.930450][ T4971] usb 5-1: USB disconnect, device number 53 [ 422.988812][ T4971] usblp0: removed [ 423.462467][ T4971] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 423.695070][ T4971] usb 5-1: Using ep0 maxpacket: 32 [ 423.705169][ T4971] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 423.715584][ T4971] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 423.734856][ T4971] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 423.790977][ T4971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 423.818356][ T4971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 423.828552][ T4971] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 423.856848][ T4971] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 423.877971][ T4971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.891055][ T4971] usb 5-1: config 0 descriptor?? [ 424.010758][T11384] trusted_key: encrypted_key: master key parameter 'd\+9C;!edalt' is invalid [ 424.108446][ T4971] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 424.153876][ T5283] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 424.377955][ T29] audit: type=1326 audit(1722610600.652:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.4.1346" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 424.401708][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 424.409726][ T5283] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.420990][ T5283] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.433498][ T5283] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.442876][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.450922][ T5283] usb 3-1: Product: syz [ 424.456215][ T5283] usb 3-1: Manufacturer: syz [ 424.460950][ T5283] usb 3-1: SerialNumber: syz [ 424.483962][ C1] usblp0: nonzero read bulk status received: -71 [ 424.492535][ T5282] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 424.492557][ T4971] usb 5-1: USB disconnect, device number 54 [ 424.508193][T11336] usblp0: removed [ 424.602758][ T47] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 424.612640][ T7687] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 424.676958][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.687714][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.703705][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 424.712901][ T5282] usb 1-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=f2.28 [ 424.722019][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.740965][ T5282] usb 1-1: Product: syz [ 424.747313][ T5282] usb 1-1: Manufacturer: syz [ 424.752264][ T5282] usb 1-1: SerialNumber: syz [ 424.759716][ T5282] usb 1-1: config 0 descriptor?? [ 424.768346][ T5282] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 424.775913][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1361'. [ 424.788802][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 424.800295][ T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=b0c5, bcdDevice=61.c8 [ 424.804114][ T7687] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.811319][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.829946][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.839243][ T7687] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.853689][ T47] usb 4-1: Product: syz [ 424.859054][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.868705][ T47] usb 4-1: Manufacturer: syz [ 424.875319][ T7687] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.875581][ T47] usb 4-1: SerialNumber: syz [ 424.893282][ T7687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.899180][ T47] usb 4-1: config 0 descriptor?? [ 424.906745][ T4971] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 424.913417][ T7687] usb 2-1: SerialNumber: syz [ 424.952739][ T5283] usb 3-1: 0:2 : does not exist [ 424.983103][ T5283] usb 3-1: USB disconnect, device number 51 [ 425.122767][ T4971] usb 5-1: Using ep0 maxpacket: 32 [ 425.144445][ T4971] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 425.155053][ T7687] usb 2-1: 0:2 : does not exist [ 425.169741][ T4971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.195827][ T4971] usb 5-1: Product: syz [ 425.200067][ T4971] usb 5-1: Manufacturer: syz [ 425.227190][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.229110][ T7687] usb 2-1: USB disconnect, device number 84 [ 425.249144][ T4971] usb 5-1: SerialNumber: syz [ 425.252171][ T8252] udevd[8252]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.281532][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.303116][ T5285] usb 1-1: USB disconnect, device number 53 [ 425.305922][ T4971] usb 5-1: config 0 descriptor?? [ 425.325327][ T4971] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 425.474229][ T5282] usb 4-1: USB disconnect, device number 54 [ 425.525092][ T8201] udevd[8201]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.741042][T11409] tc_dump_action: action bad kind [ 426.073127][ T5282] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 426.242376][ T5282] usb 3-1: device descriptor read/64, error -71 [ 426.340696][ T4971] gspca_stk1135: reg_w 0x7 err -71 [ 426.355266][ T4971] gspca_stk1135: serial bus timeout: status=0x00 [ 426.387062][ T4971] gspca_stk1135: Sensor write failed [ 426.405597][ T4971] gspca_stk1135: serial bus timeout: status=0x00 [ 426.421703][ T4971] gspca_stk1135: Sensor write failed [ 426.427307][ T4971] gspca_stk1135: serial bus timeout: status=0x00 [ 426.441699][ T4971] gspca_stk1135: Sensor read failed [ 426.454831][T11429] netlink: 'syz.3.1373': attribute type 21 has an invalid length. [ 426.463492][ T4971] gspca_stk1135: serial bus timeout: status=0x00 [ 426.472492][T11429] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1373'. [ 426.489368][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 426.499385][ T4971] gspca_stk1135: Sensor read failed [ 426.515359][ T4971] gspca_stk1135: Detected sensor type unknown (0x0) [ 426.515368][ T5282] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 426.538886][ T4971] gspca_stk1135: serial bus timeout: status=0x00 [ 426.548228][ T4971] gspca_stk1135: Sensor read failed [ 426.554909][ T4971] gspca_stk1135: serial bus timeout: status=0x00 [ 426.561865][ T4971] gspca_stk1135: Sensor read failed [ 426.575679][ T4971] gspca_stk1135: serial bus timeout: status=0x00 [ 426.582165][ T4971] gspca_stk1135: Sensor write failed [ 426.617840][ T4971] gspca_stk1135: serial bus timeout: status=0x00 [ 426.650783][ T4971] gspca_stk1135: Sensor write failed [ 426.663344][ T4971] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 426.665687][ T5282] usb 3-1: device descriptor read/64, error -71 [ 426.675789][ T4971] usb 5-1: USB disconnect, device number 55 [ 426.856564][ T5282] usb usb3-port1: attempt power cycle [ 426.982735][ T1193] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 427.197375][ T1193] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 427.208003][ T1193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.216326][ T1193] usb 2-1: Product: syz [ 427.220960][ T1193] usb 2-1: Manufacturer: syz [ 427.225712][ T1193] usb 2-1: SerialNumber: syz [ 427.241401][ T1193] usb 2-1: config 0 descriptor?? [ 427.249999][ T1193] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 427.258652][ T1193] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 427.268653][ T1193] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 427.276826][ T4971] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 427.282759][ T5282] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 427.284790][ T1193] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 427.304989][ T1193] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 427.313393][ T1193] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 427.321771][ T1193] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 427.329878][ T1193] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 427.339609][ T1193] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 427.345221][ T5282] usb 3-1: device descriptor read/8, error -71 [ 427.482339][ T4971] usb 5-1: Using ep0 maxpacket: 32 [ 427.490334][ T4971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.508964][ T4971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.521368][ T4971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.528373][ T7687] usb 2-1: USB disconnect, device number 85 [ 427.537160][ T4971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.558811][ T4971] usb 5-1: Product: syz [ 427.563996][ T7687] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 427.567124][ T4971] usb 5-1: Manufacturer: syz [ 427.578520][ T4971] usb 5-1: SerialNumber: syz [ 427.580989][ T7687] keyspan 2-1:0.0: device disconnected [ 427.632481][ T5282] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 427.663546][ T5282] usb 3-1: device descriptor read/8, error -71 [ 427.787154][ T5282] usb usb3-port1: unable to enumerate USB device [ 427.818703][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.873160][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.906752][T11440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1377'. [ 427.930906][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.952821][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.984427][T11451] FAULT_INJECTION: forcing a failure. [ 427.984427][T11451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.030669][T11451] CPU: 1 UID: 0 PID: 11451 Comm: syz.0.1381 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 428.041519][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 428.051625][T11451] Call Trace: [ 428.054951][T11451] [ 428.057923][T11451] dump_stack_lvl+0x241/0x360 [ 428.062660][T11451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.067920][T11451] ? __pfx__printk+0x10/0x10 [ 428.072559][T11451] ? __pfx_lock_release+0x10/0x10 [ 428.077644][T11451] should_fail_ex+0x3b0/0x4e0 [ 428.082385][T11451] _copy_to_iter+0x1f6/0x1960 [ 428.087110][T11451] ? __virt_addr_valid+0x183/0x530 [ 428.092275][T11451] ? __pfx_lock_release+0x10/0x10 [ 428.097338][T11451] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.103439][T11451] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.109821][T11451] ? __pfx__copy_to_iter+0x10/0x10 [ 428.114963][T11451] ? __virt_addr_valid+0x183/0x530 [ 428.120235][T11451] ? __virt_addr_valid+0x183/0x530 [ 428.125365][T11451] ? __virt_addr_valid+0x45f/0x530 [ 428.130494][T11451] ? __phys_addr_symbol+0x2f/0x70 [ 428.135548][T11451] ? __check_object_size+0x49c/0x900 [ 428.140851][T11451] __skb_datagram_iter+0x384/0x890 [ 428.145988][T11451] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 428.151647][T11451] skb_copy_datagram_iter+0xd1/0x250 [ 428.156954][T11451] tcp_recvmsg_locked+0x9a0/0x2640 [ 428.162194][T11451] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 428.167815][T11451] ? tcp_recvmsg+0x23c/0x920 [ 428.172441][T11451] tcp_recvmsg+0x25d/0x920 [ 428.176914][T11451] ? __pfx_tcp_recvmsg+0x10/0x10 [ 428.181906][T11451] ? sock_rps_record_flow+0x1a/0x400 [ 428.187235][T11451] ? inet_recvmsg+0xde/0x2d0 [ 428.191945][T11451] ? __pfx_tcp_recvmsg+0x10/0x10 [ 428.196916][T11451] inet_recvmsg+0x150/0x2d0 [ 428.201447][T11451] ? __pfx_inet_recvmsg+0x10/0x10 [ 428.206609][T11451] ? aa_sock_msg_perm+0x91/0x160 [ 428.211569][T11451] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 428.216890][T11451] ? security_socket_recvmsg+0x90/0xb0 [ 428.222376][T11451] sock_recvmsg+0x1ae/0x280 [ 428.226994][T11451] __sys_recvfrom+0x256/0x3e0 [ 428.231701][T11451] ? __pfx___sys_recvfrom+0x10/0x10 [ 428.236961][T11451] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.243435][T11451] __ia32_compat_sys_recvfrom+0xe4/0x100 [ 428.249112][T11451] __do_fast_syscall_32+0xb4/0x110 [ 428.254259][T11451] ? exc_page_fault+0x590/0x8c0 [ 428.259139][T11451] do_fast_syscall_32+0x34/0x80 [ 428.264029][T11451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.270379][T11451] RIP: 0023:0xf743d579 [ 428.274465][T11451] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 428.294286][T11451] RSP: 002b:00000000f573557c EFLAGS: 00000206 ORIG_RAX: 0000000000000173 [ 428.302891][T11451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 428.310899][T11451] RDX: 00000000fffffd0b RSI: 0000000000000000 RDI: 0000000000000000 [ 428.318906][T11451] RBP: 00000000fffffd25 R08: 0000000000000000 R09: 0000000000000000 [ 428.327078][T11451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 428.335267][T11451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.343451][T11451] [ 428.398601][ T4971] usb 5-1: 0:2 : does not exist [ 428.472169][ T4971] usb 5-1: USB disconnect, device number 56 [ 428.493162][ T5282] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 428.699152][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.710478][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.720569][ T5282] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 428.743673][ T8252] udevd[8252]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.759614][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.788640][ T5282] usb 4-1: config 0 descriptor?? [ 429.030087][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1386'. [ 429.182519][ T7687] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 429.360013][ T5282] hid-retrode 0003:0403:97C1.001A: unknown main item tag 0x0 [ 429.371573][ T5282] hid-retrode 0003:0403:97C1.001A: unknown main item tag 0x0 [ 429.384503][ T7687] usb 3-1: Using ep0 maxpacket: 32 [ 429.400231][ T5282] hid-retrode 0003:0403:97C1.001A: unknown main item tag 0x0 [ 429.419074][ T7687] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 429.432377][ T7687] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 429.450340][ T5282] hid-retrode 0003:0403:97C1.001A: unknown main item tag 0x0 [ 429.459812][ T7687] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 429.474530][ T5282] hid-retrode 0003:0403:97C1.001A: unknown main item tag 0x0 [ 429.508736][ T7687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.540562][ T7687] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 429.551344][ T5282] hid-retrode 0003:0403:97C1.001A: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 429.595588][ T7687] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 429.628587][ T7687] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 429.662421][ T7687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.702841][ T7687] usb 3-1: config 0 descriptor?? [ 429.759426][T11473] netlink: 'syz.1.1389': attribute type 21 has an invalid length. [ 429.767859][T11473] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1389'. [ 429.805124][ T5240] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 429.811759][ T5240] Bluetooth: Wrong link type (-22) [ 429.818938][ T5240] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 429.825947][ T5240] Bluetooth: Wrong link type (-22) [ 429.831424][ T5240] Bluetooth: hci2: link tx timeout [ 429.837918][ T5240] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.858132][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 429.886490][T11472] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1387'. [ 429.898376][T11472] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1387'. [ 429.927946][ T7687] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 429.980841][ T7687] usb 3-1: USB disconnect, device number 56 [ 430.017156][ T7687] usblp0: removed [ 430.430196][T11480] overlayfs: missing 'lowerdir' [ 430.441667][T11482] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1393'. [ 430.502423][ T47] usb 4-1: USB disconnect, device number 55 [ 430.572589][ T7687] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 430.782373][ T7687] usb 3-1: Using ep0 maxpacket: 32 [ 430.790238][ T7687] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 430.812346][ T7687] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 430.848602][ T7687] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 430.850355][T11491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 430.867994][ T7687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 430.885216][ T7687] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 430.971514][ T7687] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 430.975841][T11491] geneve2: entered promiscuous mode [ 430.985287][ T7687] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 430.999996][ T7687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.010328][T11491] geneve2: entered allmulticast mode [ 431.017988][ T7687] usb 3-1: config 0 descriptor?? [ 431.244198][ T7687] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 431.548928][ T29] audit: type=1326 audit(1722610607.812:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11459 comm="syz.2.1385" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x0 [ 431.637943][ C1] usblp0: nonzero read bulk status received: -71 [ 431.639407][ T7684] usb 3-1: USB disconnect, device number 57 [ 431.661390][T11460] usblp0: error -71 reading from printer [ 431.684766][ T1193] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 431.690032][T11460] usblp0: removed [ 431.892467][ T1193] usb 4-1: Using ep0 maxpacket: 8 [ 431.902729][ T1193] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 431.916891][ T1193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.929756][T11512] netlink: 'syz.0.1401': attribute type 21 has an invalid length. [ 431.938079][T11512] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1401'. [ 431.951878][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 431.960143][ T1193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.973260][ T1193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 431.992495][ T1193] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 432.003142][ T1193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.026370][ T1193] usb 4-1: config 0 descriptor?? [ 432.092581][ T7684] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 432.302524][ T7684] usb 3-1: Using ep0 maxpacket: 32 [ 432.303203][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.333952][ T7684] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 432.362522][ T7684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.381863][ T7684] usb 3-1: Product: syz [ 432.389907][ T7684] usb 3-1: Manufacturer: syz [ 432.403264][ T7684] usb 3-1: SerialNumber: syz [ 432.419095][ T7684] usb 3-1: config 0 descriptor?? [ 432.432827][ T7684] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 432.451609][ T1193] apple 0003:05AC:0246.001B: report_id 0 is invalid [ 432.493456][ T1193] apple 0003:05AC:0246.001B: item 0 1 1 8 parsing failed [ 432.501343][ T1193] apple 0003:05AC:0246.001B: parse failed [ 432.511819][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.532370][ T1193] apple 0003:05AC:0246.001B: probe with driver apple failed with error -22 [ 432.746216][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.791897][ T1193] usb 4-1: USB disconnect, device number 56 [ 432.823904][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 432.895025][ T11] bridge0: port 3(netdevsim0) entered disabled state [ 432.945662][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 432.969680][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 432.981228][ T11] bridge0: port 3(netdevsim0) entered disabled state [ 432.995699][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.065879][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.074393][ T4971] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 433.089125][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.098718][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.110441][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.125167][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 433.135412][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.232596][ T11] bridge_slave_1: left allmulticast mode [ 433.238326][ T11] bridge_slave_1: left promiscuous mode [ 433.244630][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.255753][ T11] bridge_slave_0: left allmulticast mode [ 433.265293][ T11] bridge_slave_0: left promiscuous mode [ 433.271117][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.295773][ T4971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.307941][ T4971] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 433.322318][ T4971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.343713][ T4971] usb 1-1: config 0 descriptor?? [ 433.745521][ T5240] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 433.745640][ T5240] Bluetooth: hci1: Dropping invalid advertising data [ 433.760395][ T5240] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 433.760429][ T5240] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 433.769054][ T5240] Bluetooth: hci1: Malformed LE Event: 0x02 [ 433.857958][ T29] audit: type=1326 audit(1722610610.132:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.1.1408" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 433.888013][T11460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.900880][T11460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.937743][T11532] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 434.022662][ T7684] gspca_stk1135: reg_w 0xf err -71 [ 434.040030][ T7684] gspca_stk1135: serial bus timeout: status=0x00 [ 434.072357][ T7684] gspca_stk1135: Sensor write failed [ 434.093502][ T7684] gspca_stk1135: serial bus timeout: status=0x00 [ 434.120608][ T7684] gspca_stk1135: Sensor write failed [ 434.131262][ T7684] gspca_stk1135: serial bus timeout: status=0x00 [ 434.138155][ T7684] gspca_stk1135: Sensor read failed [ 434.152392][ T7684] gspca_stk1135: serial bus timeout: status=0x00 [ 434.158777][ T7684] gspca_stk1135: Sensor read failed [ 434.173631][ T7684] gspca_stk1135: Detected sensor type unknown (0x0) [ 434.180308][ T7684] gspca_stk1135: serial bus timeout: status=0x00 [ 434.220740][ T7684] gspca_stk1135: Sensor read failed [ 434.232545][ T7684] gspca_stk1135: serial bus timeout: status=0x00 [ 434.254563][ T7684] gspca_stk1135: Sensor read failed [ 434.259856][ T7684] gspca_stk1135: serial bus timeout: status=0x00 [ 434.267542][ T7684] gspca_stk1135: Sensor write failed [ 434.273658][ T7684] gspca_stk1135: serial bus timeout: status=0x00 [ 434.280025][ T7684] gspca_stk1135: Sensor write failed [ 434.285492][ T7684] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 434.314850][ T7684] usb 3-1: USB disconnect, device number 58 [ 434.403119][ T4971] ath6kl: Failed to submit usb control message: -110 [ 434.420650][ T4971] ath6kl: unable to send the bmi data to the device: -110 [ 434.430655][ T4971] ath6kl: Unable to send get target info: -110 [ 434.446688][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.448786][ T4971] ath6kl: Failed to init ath6kl core: -110 [ 434.482309][ T4971] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 434.488652][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.519339][ T11] bond0 (unregistering): Released all slaves [ 434.588775][T11518] ɶƣ0GCTw: entered promiscuous mode [ 434.752975][ T7687] usb 1-1: USB disconnect, device number 54 [ 435.202466][ T5240] Bluetooth: hci2: command tx timeout [ 435.512474][ T11] hsr_slave_0: left promiscuous mode [ 435.532444][ T11] hsr_slave_1: left promiscuous mode [ 435.582660][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.593383][T11580] xt_limit: Overflow, try lower: 0/0 [ 435.626407][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.644683][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.680948][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.822753][ T11] veth1_macvtap: left promiscuous mode [ 435.838642][ T11] veth0_macvtap: left promiscuous mode [ 435.853017][ T11] veth1_vlan: left promiscuous mode [ 435.872181][ T11] veth0_vlan: left promiscuous mode [ 437.292274][ T5240] Bluetooth: hci2: command tx timeout [ 437.369979][ T11] team0 (unregistering): Port device team_slave_1 removed [ 437.396312][ T5283] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 437.446487][ T11] team0 (unregistering): Port device team_slave_0 removed [ 437.590285][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.625436][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.645852][ T5283] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 437.655702][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.686921][ T5283] usb 4-1: config 0 descriptor?? [ 437.946346][ T5283] usbhid 4-1:0.0: can't add hid device: -71 [ 437.961998][ T5283] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 438.008966][ T5283] usb 4-1: USB disconnect, device number 57 [ 438.489831][ T5283] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 438.709427][ T5283] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 438.728107][ T5283] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 438.751871][ T5283] usb 4-1: config 0 has no interface number 0 [ 438.767912][ T5283] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.800164][ T5283] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 438.849477][ T5283] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 438.880103][ T5283] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 438.914180][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.938290][ T5283] usb 4-1: config 0 descriptor?? [ 439.021431][T11612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.111575][T11521] chnl_net:caif_netlink_parms(): no params data found [ 439.157648][T11622] fuse: Bad value for 'user_id' [ 439.177131][T11622] fuse: Bad value for 'user_id' [ 439.362652][ T5240] Bluetooth: hci2: command tx timeout [ 439.544573][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 439.612850][T11521] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.618915][ T5283] usb 4-1: USB disconnect, device number 58 [ 439.622531][ T5285] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 439.652415][T11521] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.659723][T11521] bridge_slave_0: entered allmulticast mode [ 439.707029][T11521] bridge_slave_0: entered promiscuous mode [ 439.735694][T11521] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.787810][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.800984][T11521] bridge_slave_1: entered allmulticast mode [ 439.820007][T11521] bridge_slave_1: entered promiscuous mode [ 439.903544][ T5285] usb 2-1: unable to get BOS descriptor or descriptor too short [ 439.935441][ T5285] usb 2-1: not running at top speed; connect to a high speed hub [ 439.957722][ T5285] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.983592][ T5285] usb 2-1: config 1 interface 0 altsetting 243 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.019573][T11521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.022371][ T5285] usb 2-1: config 1 interface 0 has no altsetting 0 [ 440.058872][ T5285] usb 2-1: string descriptor 0 read error: -22 [ 440.082423][ T5285] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.083500][T11521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.112043][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.162959][ T5285] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 440.180234][ T5285] cdc_ncm 2-1:1.1: bind() failure [ 440.291100][T11521] team0: Port device team_slave_0 added [ 440.349090][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.362475][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.371312][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.390862][T11521] team0: Port device team_slave_1 added [ 440.396991][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.406762][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 440.414262][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.566715][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.574145][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.614559][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.632093][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.652449][ T5285] usb 2-1: USB disconnect, device number 86 [ 440.666713][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.680711][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.703104][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.768558][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.837152][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.867736][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.880215][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.900190][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.911711][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.922637][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 440.930631][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.985422][ C1] sd 0:0:1:0: [sda] tag#3306 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 440.995949][ C1] sd 0:0:1:0: [sda] tag#3306 CDB: Write(6) 0a 00 00 00 ff ff ff ff 00 00 00 00 [ 441.139151][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.315586][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.404162][T11521] hsr_slave_0: entered promiscuous mode [ 441.442435][ T5240] Bluetooth: hci2: command tx timeout [ 441.449991][T11521] hsr_slave_1: entered promiscuous mode [ 441.482982][T11521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.503861][T11521] Cannot create hsr debugfs directory [ 441.556535][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.762339][ T7687] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 441.953308][ T7687] usb 4-1: Using ep0 maxpacket: 16 [ 441.962623][ T7687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.974053][ T7687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.985920][ T7687] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 441.995244][ T7687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.015534][ T7687] usb 4-1: config 0 descriptor?? [ 442.307173][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.440918][ T7687] usbhid 4-1:0.0: can't add hid device: -71 [ 442.457311][ T7687] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 442.487219][ T7687] usb 4-1: USB disconnect, device number 59 [ 442.493655][ T5240] Bluetooth: hci1: command tx timeout [ 442.661269][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.730326][T11645] chnl_net:caif_netlink_parms(): no params data found [ 442.789523][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.883451][T11653] chnl_net:caif_netlink_parms(): no params data found [ 442.916414][ T5285] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 442.936910][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.046198][ T5240] Bluetooth: hci4: command tx timeout [ 443.103081][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 443.121883][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.148955][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.177382][ T5285] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 443.189519][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.200892][ T5285] usb 2-1: config 0 descriptor?? [ 443.323395][ T7687] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 443.361717][T11645] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.369574][T11645] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.377409][T11645] bridge_slave_0: entered allmulticast mode [ 443.387679][T11645] bridge_slave_0: entered promiscuous mode [ 443.485561][T11645] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.495154][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.503160][T11645] bridge_slave_1: entered allmulticast mode [ 443.511282][T11645] bridge_slave_1: entered promiscuous mode [ 443.528207][ T7687] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 443.551339][ T7687] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 443.576278][ T7687] usb 4-1: config 0 has no interface number 0 [ 443.592403][ T7687] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.592727][T11653] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.623751][ T7687] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 443.631619][T11653] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.644488][T11653] bridge_slave_0: entered allmulticast mode [ 443.652595][ T7687] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 443.654043][T11653] bridge_slave_0: entered promiscuous mode [ 443.664320][ T7687] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 443.679437][ T7687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.687936][ T5285] usbhid 2-1:0.0: can't add hid device: -71 [ 443.694283][ T5285] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 443.701815][T11653] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.714706][ T7687] usb 4-1: config 0 descriptor?? [ 443.720014][ T5285] usb 2-1: USB disconnect, device number 87 [ 443.720515][T11698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 443.735696][T11653] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.754620][T11653] bridge_slave_1: entered allmulticast mode [ 443.767138][T11653] bridge_slave_1: entered promiscuous mode [ 443.811809][T11645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.875913][T11645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.903367][T11653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.916908][T11653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.927414][ T11] bridge_slave_1: left allmulticast mode [ 443.935095][ T11] bridge_slave_1: left promiscuous mode [ 443.940925][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.950684][ T11] bridge_slave_0: left allmulticast mode [ 443.957106][ T11] bridge_slave_0: left promiscuous mode [ 443.963578][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.995322][ T11] bridge_slave_1: left allmulticast mode [ 444.001031][ T11] bridge_slave_1: left promiscuous mode [ 444.007252][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.023843][ T11] bridge_slave_0: left allmulticast mode [ 444.029549][ T11] bridge_slave_0: left promiscuous mode [ 444.036879][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.322077][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 444.562676][ T5240] Bluetooth: hci1: command tx timeout [ 444.747274][ T11] batman_adv: batadv0: Removing interface: erspan1 [ 445.123288][ T5240] Bluetooth: hci4: command tx timeout [ 445.287269][ T11]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.300474][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.312577][ T11]  (unregistering): Released all slaves [ 445.499620][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.512580][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.530133][ T11] bond0 (unregistering): Released all slaves [ 445.709760][T11645] team0: Port device team_slave_0 added [ 445.717044][ T7687] usb 4-1: USB disconnect, device number 60 [ 445.739527][T11645] team0: Port device team_slave_1 added [ 445.787917][ T11] ɶƣ0GCTw: left promiscuous mode [ 445.847255][T11653] team0: Port device team_slave_0 added [ 445.922911][T11645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.930022][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.956692][T11645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.980444][T11653] team0: Port device team_slave_1 added [ 446.018615][T11645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.029258][T11645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.056823][T11645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.122531][T11653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.129673][T11653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.156545][T11653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.336000][T11653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.372603][T11653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.400859][T11653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.416537][T11521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 446.430468][T11521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 446.502141][T11645] hsr_slave_0: entered promiscuous mode [ 446.511158][T11645] hsr_slave_1: entered promiscuous mode [ 446.518432][T11645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.532690][T11645] Cannot create hsr debugfs directory [ 446.550550][T11521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 446.569436][T11521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 446.652545][ T5240] Bluetooth: hci1: command tx timeout [ 446.841309][T11653] hsr_slave_0: entered promiscuous mode [ 446.849022][T11653] hsr_slave_1: entered promiscuous mode [ 446.858582][T11653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.868022][T11653] Cannot create hsr debugfs directory [ 447.100410][ T11] hsr_slave_0: left promiscuous mode [ 447.116764][ T11] hsr_slave_1: left promiscuous mode [ 447.140045][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.147908][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.163573][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.171228][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.202675][ T5240] Bluetooth: hci4: command tx timeout [ 447.202756][ T11] hsr_slave_0: left promiscuous mode [ 447.237352][ T11] hsr_slave_1: left promiscuous mode [ 447.259127][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.272986][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.296278][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.309766][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.451049][ T11] veth1_macvtap: left promiscuous mode [ 447.462409][ T11] veth0_macvtap: left promiscuous mode [ 447.468183][ T11] veth1_vlan: left promiscuous mode [ 447.492487][ T11] veth0_vlan: left promiscuous mode [ 447.503793][ T11] veth1_macvtap: left promiscuous mode [ 447.509396][ T11] veth0_macvtap: left promiscuous mode [ 447.542797][ T11] veth1_vlan: left promiscuous mode [ 447.548191][ T11] veth0_vlan: left promiscuous mode [ 447.631473][T11729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 447.737409][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.749076][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.760239][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.770279][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.778803][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 447.786936][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.471400][ T11] team0 (unregistering): Port device team_slave_1 removed [ 448.534973][ T11] team0 (unregistering): Port device team_slave_0 removed [ 448.732667][ T5242] Bluetooth: hci1: command tx timeout [ 449.282695][ T5242] Bluetooth: hci4: command tx timeout [ 449.657647][ T11] team0 (unregistering): Port device team_slave_1 removed [ 449.715157][ T11] team0 (unregistering): Port device team_slave_0 removed [ 449.842881][ T5242] Bluetooth: hci0: command tx timeout [ 450.989277][T11521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.280016][T11521] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.354260][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.361641][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.441729][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.449024][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.500067][T11734] chnl_net:caif_netlink_parms(): no params data found [ 451.857940][T11645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.945424][ T5242] Bluetooth: hci0: command tx timeout [ 451.951120][T11645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.040311][ T11] IPVS: stop unused estimator thread 0... [ 452.059014][ T11] IPVS: stop unused estimator thread 0... [ 452.146978][T11734] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.154981][T11734] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.164576][T11734] bridge_slave_0: entered allmulticast mode [ 452.171839][T11734] bridge_slave_0: entered promiscuous mode [ 452.179491][T11645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.236471][T11734] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.245617][T11734] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.259337][T11734] bridge_slave_1: entered allmulticast mode [ 452.267314][T11734] bridge_slave_1: entered promiscuous mode [ 452.285674][T11645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.391995][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.402572][ T5282] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 452.440973][T11734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.454842][T11734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.519795][ T5644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.579087][ T5282] usb 4-1: device descriptor read/64, error -71 [ 452.637513][ T5644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.666295][T11734] team0: Port device team_slave_0 added [ 452.708727][T11734] team0: Port device team_slave_1 added [ 452.749484][ T5644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.771980][T11521] veth0_vlan: entered promiscuous mode [ 452.828268][T11734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.837658][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.852878][ T5282] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 452.873989][T11734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.888725][T11734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.896259][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.923512][T11734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.986753][ T5644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.004918][T11521] veth1_vlan: entered promiscuous mode [ 453.017266][T11653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.028911][T11653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.040976][ T5282] usb 4-1: device descriptor read/64, error -71 [ 453.058198][T11653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.107007][T11653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.134452][T11734] hsr_slave_0: entered promiscuous mode [ 453.141052][T11734] hsr_slave_1: entered promiscuous mode [ 453.150838][T11734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.158697][T11734] Cannot create hsr debugfs directory [ 453.173102][ T5282] usb usb4-port1: attempt power cycle [ 453.420492][T11521] veth0_macvtap: entered promiscuous mode [ 453.448378][T11645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.506392][T11521] veth1_macvtap: entered promiscuous mode [ 453.527334][ T5644] bridge_slave_1: left allmulticast mode [ 453.533169][ T5644] bridge_slave_1: left promiscuous mode [ 453.539071][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.550581][ T5644] bridge_slave_0: left allmulticast mode [ 453.558022][ T5644] bridge_slave_0: left promiscuous mode [ 453.564452][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.592584][ T5282] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 453.634018][ T5282] usb 4-1: device descriptor read/8, error -71 [ 453.770531][ T5644] batman_adv: batadv0: Removing interface: erspan1 [ 453.928708][ T5282] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 453.977302][ T5282] usb 4-1: device descriptor read/8, error -71 [ 454.004050][ T5242] Bluetooth: hci0: command tx timeout [ 454.051866][ T5644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.066424][ T5644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.078461][ T5644] bond0 (unregistering): Released all slaves [ 454.108375][ T5282] usb usb4-port1: unable to enumerate USB device [ 454.180962][T11645] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.226163][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.233447][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.344108][ T4971] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.351878][ T4971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.412718][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.431737][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.443029][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.453888][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.463777][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.474363][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.488037][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.578005][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.589521][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.601555][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.612325][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.622487][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.633681][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.646060][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.726441][ T5644] hsr_slave_0: left promiscuous mode [ 454.734847][ T5644] hsr_slave_1: left promiscuous mode [ 454.740855][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.748605][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.757263][ T5644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.764864][ T5644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.791678][ T5644] veth1_macvtap: left promiscuous mode [ 454.798541][ T5644] veth0_macvtap: left promiscuous mode [ 454.804648][ T5644] veth1_vlan: left promiscuous mode [ 454.810017][ T5644] veth0_vlan: left promiscuous mode [ 455.495737][ T5644] team0 (unregistering): Port device team_slave_1 removed [ 455.553170][ T5644] team0 (unregistering): Port device team_slave_0 removed [ 455.592931][ T5282] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 455.778472][ T5282] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 455.787931][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.800322][ T5282] usb 4-1: Product: syz [ 455.805091][ T5282] usb 4-1: Manufacturer: syz [ 455.810869][ T5282] usb 4-1: SerialNumber: syz [ 455.826591][ T5282] usb 4-1: config 0 descriptor?? [ 455.835261][ T5282] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 455.851539][ T5282] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 455.861762][ T5282] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 455.871354][ T5282] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 455.879714][ T5282] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 455.887768][ T5282] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 455.896096][ T5282] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 455.904458][ T5282] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 455.926252][ T5282] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 456.092678][ T5242] Bluetooth: hci0: command tx timeout [ 456.273864][T11521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.283234][T11521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.295441][ T4971] usb 4-1: USB disconnect, device number 65 [ 456.321234][T11521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.340277][T11521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.351828][ T4971] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 456.373436][ T4971] keyspan 4-1:0.0: device disconnected [ 456.409805][T11653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.466590][T11645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.616909][T11653] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.800066][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.807365][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.885217][T11645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.913355][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.920553][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.005343][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.032269][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.102849][ T29] audit: type=1326 audit(1722610633.362:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.136515][ T29] audit: type=1326 audit(1722610633.362:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.147613][T11734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.167701][ T29] audit: type=1326 audit(1722610633.372:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.190350][ T29] audit: type=1326 audit(1722610633.372:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.218631][ T29] audit: type=1326 audit(1722610633.372:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.275920][ T29] audit: type=1326 audit(1722610633.372:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.299230][T11734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.314766][ T29] audit: type=1326 audit(1722610633.372:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.319202][T11734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.338827][ T29] audit: type=1326 audit(1722610633.372:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.383493][ T5285] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 457.394716][ T29] audit: type=1326 audit(1722610633.372:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.421425][ T29] audit: type=1326 audit(1722610633.372:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11784 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36579 code=0x7ffc0000 [ 457.431579][T11734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.455302][ T5644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.463627][ T5644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.541261][T11645] veth0_vlan: entered promiscuous mode [ 457.575656][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 457.589958][ T5285] usb 4-1: New USB device found, idVendor=054c, idProduct=c738, bcdDevice=16.70 [ 457.621841][T11645] veth1_vlan: entered promiscuous mode [ 457.628322][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.659682][ T5285] usb 4-1: Product: syz [ 457.673296][ T5285] usb 4-1: Manufacturer: syz [ 457.677971][ T5285] usb 4-1: SerialNumber: syz [ 457.719704][ T5285] usb 4-1: config 0 descriptor?? [ 457.778368][T11653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.843792][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 457.925764][T11645] veth0_macvtap: entered promiscuous mode [ 457.966465][T11645] veth1_macvtap: entered promiscuous mode [ 458.084447][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.100177][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.112682][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.128327][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.149010][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.165226][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.192741][T11645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.245084][T11653] veth0_vlan: entered promiscuous mode [ 458.325958][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.340825][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.352717][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.363916][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.375020][T11645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.386168][T11645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.399659][T11645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.454756][T11645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.469315][T11645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.490026][T11645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.519413][T11645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.536579][T11653] veth1_vlan: entered promiscuous mode [ 458.560370][T11734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.674511][T11734] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.711486][T11809] netlink: 'syz.3.1459': attribute type 3 has an invalid length. [ 458.776239][T11653] veth0_macvtap: entered promiscuous mode [ 458.794136][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.801376][ T7687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.829741][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.837007][ T7687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.890593][T11653] veth1_macvtap: entered promiscuous mode [ 459.007747][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.043815][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.086459][T11653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.098315][T11653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.112094][T11653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.124417][T11653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.153403][T11653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.174491][T11653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.203148][T11653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.222343][T11653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.244635][T11653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.275862][T11653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.306164][T11653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.322114][T11653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.341244][T11653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.351616][T11653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.382292][T11653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.418363][T11653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.449542][T11653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.473566][T11653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.557513][T11653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.575671][T11653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.596073][T11653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.619065][T11653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.664382][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.702038][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.760612][T11734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.985458][T11734] veth0_vlan: entered promiscuous mode [ 460.077128][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.089865][T11734] veth1_vlan: entered promiscuous mode [ 460.099804][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.142363][ T4971] usb 4-1: USB disconnect, device number 66 [ 460.327817][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.351678][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.380884][T11734] veth0_macvtap: entered promiscuous mode [ 460.434735][T11734] veth1_macvtap: entered promiscuous mode [ 460.586764][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.630221][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.655822][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.677853][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.687939][ T4971] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 460.712656][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.746145][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.775884][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.814027][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.876807][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.905578][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.906476][ T4971] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 460.918198][T11734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.980638][ T4971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.016997][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.021004][ T4971] usb 4-1: Product: syz [ 461.064494][ T4971] usb 4-1: Manufacturer: syz [ 461.084873][ T4971] usb 4-1: SerialNumber: syz [ 461.088482][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.112353][ T4971] usb 4-1: config 0 descriptor?? [ 461.124830][ T4971] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 461.143247][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.159183][ T4971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 461.171874][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.200403][ T4971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 461.219817][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.237009][ T4971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 461.252324][ T4971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 461.260079][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.280769][ T4971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 461.292669][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.315535][ T4971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 461.330327][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.351952][ T4971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 461.370542][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.381653][ T4971] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 461.393393][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.431119][T11734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.489307][T11864] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 461.550159][T11734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.559891][ T1193] usb 4-1: USB disconnect, device number 67 [ 461.599022][T11734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.599770][ T1193] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 461.632054][T11734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.660289][ T1193] keyspan 4-1:0.0: device disconnected [ 461.666172][T11734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.010631][ T5644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.022572][ T5644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.251641][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.290869][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.449003][ T47] IPVS: starting estimator thread 0... [ 462.582862][T11897] IPVS: using max 18 ests per chain, 43200 per kthread [ 462.682467][ T7684] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 462.822446][ T47] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 462.872818][T11912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1477'. [ 462.887086][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.920273][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.923443][ T7684] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 462.971655][ T7684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 463.007691][ T7684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 463.052996][ T7684] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 463.062355][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 463.075879][ T7684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.088602][ T47] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 463.108338][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.117834][ T7684] usb 1-1: config 0 descriptor?? [ 463.131105][T11890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 463.132033][ T47] usb 4-1: Product: syz [ 463.148006][ T47] usb 4-1: Manufacturer: syz [ 463.153279][ T5283] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 463.164874][ T7684] gspca_main: spca561-2.14.0 probing abcd:cdee [ 463.170267][ T47] usb 4-1: SerialNumber: syz [ 463.196094][T11912] jump_label: Fatal kernel bug, unexpected op at preempt_notifier_register+0x10/0xe0 [ffffffff8163e7c0] (eb 12 90 48 c7 != 66 90 0f 1f 00)) size:2 type:1 [ 463.200054][ T47] usb 4-1: config 0 descriptor?? [ 463.232652][T11912] ------------[ cut here ]------------ [ 463.238261][T11912] kernel BUG at arch/x86/kernel/jump_label.c:73! [ 463.264355][T11912] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 463.271366][T11912] CPU: 1 UID: 0 PID: 11912 Comm: syz.2.1477 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 463.282142][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 463.292221][T11912] RIP: 0010:__jump_label_patch+0x463/0x490 [ 463.298149][T11912] Code: e8 22 82 5f 00 48 c7 c7 60 4f 05 8c 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 a2 90 7e 0a 48 83 c4 08 90 <0f> 0b e8 c6 8f 81 0a e8 f1 81 5f 00 90 0f 0b e8 e9 81 5f 00 90 0f [ 463.317964][T11912] RSP: 0018:ffffc90003a27a00 EFLAGS: 00010296 [ 463.324140][T11912] RAX: 0000000000000097 RBX: 0000000000000085 RCX: 597f5d65158dad00 [ 463.332145][T11912] RDX: ffffc9000a3c9000 RSI: 0000000000023a1b RDI: 0000000000023a1c [ 463.340174][T11912] RBP: ffffc90003a27b28 R08: ffffffff8173dfac R09: 1ffff92000744ee0 [ 463.348250][T11912] R10: dffffc0000000000 R11: fffff52000744ee1 R12: 0000000000000001 [ 463.356411][T11912] R13: ffffffff8c056d81 R14: ffffffff931088c0 R15: ffffffff8c056d81 [ 463.364511][T11912] FS: 0000000000000000(0000) GS:ffff8880b9300000(0063) knlGS:00000000f56e6b40 [ 463.373479][T11912] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 463.380087][T11912] CR2: 0000560c4bcee008 CR3: 0000000078a2a000 CR4: 00000000003526f0 [ 463.388089][T11912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.396086][T11912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.404073][T11912] Call Trace: [ 463.407358][T11912] [ 463.410293][T11912] ? __die_body+0x88/0xe0 [ 463.414651][T11912] ? die+0xcf/0x110 [ 463.418476][T11912] ? do_trap+0x15a/0x3a0 [ 463.422730][T11912] ? __jump_label_patch+0x463/0x490 [ 463.427945][T11912] ? do_error_trap+0x1dc/0x2c0 [ 463.432723][T11912] ? __jump_label_patch+0x463/0x490 [ 463.437934][T11912] ? __pfx_do_error_trap+0x10/0x10 [ 463.443062][T11912] ? report_bug+0x3e8/0x500 [ 463.447588][T11912] ? handle_invalid_op+0x34/0x40 [ 463.452542][T11912] ? __jump_label_patch+0x463/0x490 [ 463.457756][T11912] ? exc_invalid_op+0x38/0x50 [ 463.462533][T11912] ? asm_exc_invalid_op+0x1a/0x20 [ 463.467583][T11912] ? __wake_up_klogd+0xcc/0x110 [ 463.472453][T11912] ? __jump_label_patch+0x463/0x490 [ 463.477752][T11912] ? preempt_notifier_register+0x10/0xe0 [ 463.483419][T11912] ? __pfx___jump_label_patch+0x10/0x10 [ 463.489008][T11912] ? preempt_notifier_register+0x10/0xe0 [ 463.494680][T11912] ? preempt_notifier_register+0x1f/0xe0 [ 463.500328][T11912] ? preempt_notifier_register+0x12/0xe0 [ 463.505978][T11912] ? __static_key_slow_dec_cpuslocked+0x21c/0x410 [ 463.512506][T11912] ? __pfx___mutex_lock+0x10/0x10 [ 463.517551][T11912] arch_jump_label_transform_queue+0x68/0x100 [ 463.523646][T11912] __jump_label_update+0x177/0x3a0 [ 463.528782][T11912] __static_key_slow_dec_cpuslocked+0x250/0x410 [ 463.535144][T11912] ? __pfx___static_key_slow_dec_cpuslocked+0x10/0x10 [ 463.541927][T11912] static_key_slow_dec+0x51/0xa0 [ 463.546880][T11912] kvm_put_kvm+0xf3b/0x1300 [ 463.551402][T11912] kvm_vm_release+0x46/0x50 [ 463.555917][T11912] ? __pfx_kvm_vm_release+0x10/0x10 [ 463.561210][T11912] __fput+0x24a/0x8a0 [ 463.565207][T11912] task_work_run+0x24f/0x310 [ 463.569811][T11912] ? __pfx_task_work_run+0x10/0x10 [ 463.574936][T11912] ? syscall_exit_to_user_mode+0xa3/0x370 [ 463.580846][T11912] syscall_exit_to_user_mode+0x168/0x370 [ 463.586492][T11912] __do_fast_syscall_32+0xc4/0x110 [ 463.591632][T11912] ? exc_page_fault+0x590/0x8c0 [ 463.596503][T11912] do_fast_syscall_32+0x34/0x80 [ 463.601375][T11912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.607725][T11912] RIP: 0023:0xf7f35579 [ 463.611809][T11912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 463.631446][T11912] RSP: 002b:00000000f56e657c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 463.639904][T11912] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 463.647897][T11912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.655880][T11912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 463.663861][T11912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 463.671838][T11912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.679842][T11912] [ 463.682868][T11912] Modules linked in: [ 463.738414][ T7684] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 463.739832][ T47] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 463.747862][T11912] ---[ end trace 0000000000000000 ]--- [ 463.758058][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.778236][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.789375][ T47] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 463.796848][ T7684] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.825742][T11912] RIP: 0010:__jump_label_patch+0x463/0x490 [ 463.840551][ T5283] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 463.865623][ T47] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 463.872491][T11912] Code: e8 22 82 5f 00 48 c7 c7 60 4f 05 8c 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 a2 90 7e 0a 48 83 c4 08 90 <0f> 0b e8 c6 8f 81 0a e8 f1 81 5f 00 90 0f 0b e8 e9 81 5f 00 90 0f [ 463.896993][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.905203][ T7684] usb 1-1: MIDIStreaming interface descriptor not found [ 463.929861][ T47] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 463.985600][ T7684] usb 1-1: USB disconnect, device number 55 [ 464.010756][ T47] usb 4-1: USB disconnect, device number 68 [ 464.033229][ T5283] usb 5-1: config 0 descriptor?? [ 464.052493][T11912] RSP: 0018:ffffc90003a27a00 EFLAGS: 00010296 [ 464.058836][T11912] RAX: 0000000000000097 RBX: 0000000000000085 RCX: 597f5d65158dad00 [ 464.134188][T11912] RDX: ffffc9000a3c9000 RSI: 0000000000023a1b RDI: 0000000000023a1c [ 464.195337][ T8248] udevd[8248]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.252092][T11912] RBP: ffffc90003a27b28 R08: ffffffff8173dfac R09: 1ffff92000744ee0 [ 464.261993][T11912] R10: dffffc0000000000 R11: fffff52000744ee1 R12: 0000000000000001 [ 464.310154][T11912] R13: ffffffff8c056d81 R14: ffffffff931088c0 R15: ffffffff8c056d81 [ 464.415483][T11912] FS: 0000000000000000(0000) GS:ffff8880b9300000(0063) knlGS:00000000f56e6b40 [ 464.493876][T11912] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 464.500580][T11912] CR2: 00005595626f1131 CR3: 0000000078a2a000 CR4: 00000000003526f0 [ 464.538405][T11912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.556878][T11912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.571143][T11912] Kernel panic - not syncing: Fatal exception [ 464.577603][T11912] Kernel Offset: disabled [ 464.582105][T11912] Rebooting in 86400 seconds..