last executing test programs: 4m59.206540045s ago: executing program 1 (id=407): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) recvmsg$qrtr(r1, &(0x7f0000001e00)={&(0x7f0000000040), 0xc, &(0x7f0000000780)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000200)=""/186, 0xba}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000400)=""/116, 0x74}, {&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f0000000700)=""/79, 0x4f}], 0xa, &(0x7f0000001880)=[{0xa0, 0x0, 0x0, ""/142}, {0xe8, 0x0, 0x0, ""/215}, {0xf0, 0x0, 0x0, ""/219}, {0x98, 0x0, 0x0, ""/133}, {0x30, 0x0, 0x0, ""/28}, {0xb0, 0x0, 0x0, ""/159}, {0xd8, 0x0, 0x0, ""/195}, {0x80, 0x0, 0x0, ""/107}], 0x548, 0x20}, 0x38, 0x40002003) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 4m59.150991561s ago: executing program 1 (id=408): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000095fe"], 0x48) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001001000000010000580070004"], 0x68}}, 0x0) r4 = socket$kcm(0x10, 0x5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000340)=0x9, 0x4) bind$inet(r6, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r6, @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES64=r4], 0xffffff34) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbb00080045000038000000000073907800000000e000000100000000000890780000000000000000"], 0x0) bind$rds(r5, &(0x7f0000000040)={0xa, 0x4e21, @dev}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x181102, 0x145, 0x20}, 0x18) r8 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) getpeername$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc10c5541, &(0x7f0000000000)=0x2) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10"], 0xa) socket$kcm(0x10, 0x2, 0x0) 4m56.750083903s ago: executing program 1 (id=413): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000495", @ANYRES16=0x0, @ANYBLOB="000000000000ffffffff0200000005003e000900000005003e0026000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="ed93d032", @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x1, @sliced={0xf, [0x9, 0x0, 0x9, 0x6, 0x4, 0xfff, 0x1, 0x258, 0x400, 0x1000, 0x9, 0x3, 0x1, 0x1, 0x2c, 0xe, 0x3, 0x53c8, 0x3, 0x77ab, 0x101, 0x2, 0xaa, 0x6, 0x8, 0x9, 0x7, 0x6, 0xd6a, 0xffff, 0x1ff, 0xc, 0x70, 0xea8b, 0x2, 0x33c, 0x9, 0x4, 0x5, 0x1, 0x1, 0x58e, 0x4, 0xf6f, 0x0, 0x6, 0x3, 0xf616], 0x80000000}}) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) 4m54.846184406s ago: executing program 1 (id=417): r0 = syz_usbip_server_init(0x5) r1 = dup(r0) write$sysctl(r1, &(0x7f0000000000)='7\x00', 0x2) syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x410200) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x410200) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x10}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c081}, 0x4000000) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x10}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c081}, 0x4000000) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={r1, 0x0, 0x0, 0x2000}) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={r1, 0x0, 0x0, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x1000, @local, 0x80}}, [0x6, 0x40, 0xfff, 0x8, 0x4f07, 0x4, 0xfffffffffffffff8, 0x6, 0x400, 0x6, 0xa5f1, 0x9, 0x9, 0xfffffffffffff000, 0x3]}, &(0x7f0000000340)=0x100) close_range(r0, r2, 0x0) syz_open_dev$dri(&(0x7f0000000380), 0xcab, 0x404880) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x8, 0x700, 0x6, 0xe, {{0x1b, 0x4, 0x0, 0x1a, 0x6c, 0x67, 0x0, 0x5, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, {[@noop, @rr={0x7, 0x13, 0x24, [@multicast2, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xdc, 0x0, 0xd, [0x8, 0x9, 0x10001, 0x9, 0x9, 0x80]}, @ssrr={0x89, 0x27, 0x27, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @local, @local, @rand_addr=0x64010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x28, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x190, r5, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_open_dev$video4linux(&(0x7f0000000b40), 0xd, 0x210082) (async) syz_open_dev$video4linux(&(0x7f0000000b40), 0xd, 0x210082) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000b80)="645d228f19a0e005aefd8230a8f6a613bebc4c2e7d3199ee55f2d244b7a0752bb751b1c256113ead7fa8064d790eb019fbbe9f7a31a5fdae0e13265def92b9b05cdfd959b750f540a0a7e23811ac4963fa247b379983be9a437b363d1db647be5a0a0122a672aca57092c01ad19348fa1a2b1c66cfc326fe4bc4b2cad294bf20189135c42f4d8c875b07585836899727", 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x221100, 0x0) write$6lowpan_enable(r1, &(0x7f0000000c80)='0', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000cc0)=0x11) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000cc0)=0x11) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000d00)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000d40)={0xc, r10}) socket$inet(0x2, 0x5, 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000dc0)={r4, 0x20, &(0x7f0000000d80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000e00)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000dc0)={r4, 0x20, &(0x7f0000000d80)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000e00)=0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000e40)=@gcm_256={{0x304}, "ff5275d0658122ff", "ec15e285ad8eff07fc7f123759cb39c924d33fbe9bb193c81353a42f993ddffa", "85b0ec3a", "669ec287ffcf1cc5"}, 0x38) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000e40)=@gcm_256={{0x304}, "ff5275d0658122ff", "ec15e285ad8eff07fc7f123759cb39c924d33fbe9bb193c81353a42f993ddffa", "85b0ec3a", "669ec287ffcf1cc5"}, 0x38) 4m53.899493731s ago: executing program 1 (id=418): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (fail_nth: 3) 4m53.374356802s ago: executing program 1 (id=421): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0xfffffd88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e0300", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r1]) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {}, 0xff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000008851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000e7ffffff9400000000000000360a0264a594e94d2081cbbd4d0000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000e8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, 0x0, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) shmget(0x0, 0x2000, 0x800, &(0x7f00007db000/0x2000)=nil) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) readahead(r9, 0x4, 0x2) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x1, 0xc010, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @private1}, 0x1c) 4m37.016070369s ago: executing program 32 (id=421): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0xfffffd88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e0300", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r1]) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {}, 0xff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000008851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000e7ffffff9400000000000000360a0264a594e94d2081cbbd4d0000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000e8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, 0x0, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) shmget(0x0, 0x2000, 0x800, &(0x7f00007db000/0x2000)=nil) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) readahead(r9, 0x4, 0x2) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x1, 0xc010, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @private1}, 0x1c) 4m12.638276094s ago: executing program 0 (id=485): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 4m11.062472567s ago: executing program 0 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x143742, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r8, &(0x7f0000000080)=[{0xb, 0x0, 0xfe, 0xfd, @tick, {0x1, 0x8}, {0xe}, @result}], 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ff0000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x67, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nullb, r4, &(0x7f0000000240)) 4m8.640543069s ago: executing program 0 (id=490): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) syz_open_procfs$namespace(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) 4m5.619664648s ago: executing program 0 (id=493): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000095fe"], 0x48) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001001000000010000580070004"], 0x68}}, 0x0) r4 = socket$kcm(0x10, 0x5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000340)=0x9, 0x4) bind$inet(r6, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r6, @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES64=r4], 0xffffff34) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbb00080045000038000000000073907800000000e000000100000000000890780000000000000000"], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x181102, 0x145, 0x20}, 0x18) r8 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc10c5541, &(0x7f0000000000)=0x2) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10"], 0xa) socket$kcm(0x10, 0x2, 0x0) 4m4.808556471s ago: executing program 0 (id=498): getpid() r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="83c4ca6544dafee531e0dbcb5eeeb752462442911a6cbba12ad1372b5dbb00576ee184fca728514091f70afc29575b395f4c6c25b6e915c3bd23f9e1acec52dd1de7825310e3f9e0c58fd1af25516f0e7ea741f829c4e6a4525fede51bfc200d76205942bc8fa3ea09ab3e3df731101cef5efbf2a3ec92df0d3c6a7f587aa2821d40001aa1418c24cba8345da53f09b992b02059960e2438ec18e91b1f7db9ae56c4a11de59f63018226100945cdc22a71696afcacf267d31aa7746721414febe54f48637cc03105296c12dee653fcf9c0d48b64126f148965617617783ac1c3ea073c68237a0f2b9bfae7ffffbab4274919e6022fff430382b5ccef4fd19d4921183dbd4f16a4d1f98d6685b20285bf740f7ba264403cb51d53cfb4ebff21b9998a6025436b96fdda276e16ff6a356aa490c4632086c258b0bed20eb3887f9023af356e9ffe0b8e6e610f77801415c4e08051a46829a39d482699b22bbe8742ebe5c92556eff3f6138fc017235db3c258c7bc86ec9bc591c93a8bdb74aa452cc063d69d9816f519960d1269ad6fc4f0d35245fa1aac85f22345ef97207404388ee8caca97cf390f14ca29875b7d0e609a1f68ee8ebba51630d6a16623fa21f7c562d3778800f37a39daf0c3391affffb6ef840b7cb9fcbd654e223c307b259fa10b252ac9bb117f7811642467fe34c38e091187193927d462f7cba000621aee890bb27d57680a2537673e18c736df66ab39847cadca4929208eee8cdfccbb217c83ed0e2607ecaec41a2ba73b34aeb89069a6afeb31f038d6c208eacd93ba6e02d5b0b24c8b5a84989ae77bdc3012799d40f14b9b1679b222e75e5b5ab2bb9989aae5957e670fd47d23f2f8a1e310cd672d76e49211911ec84aba1ed223b421a4ddc463af3edb5789d436b532cfe4a5792d888d87addab23c90efbf55ff4de1d756a656de148d4a82f4f414e8908383dfd0e0f48e7e738c6f02b044837b8b8480f361247e32a6aec16f14989833171155c15577631adf00b6a35a483edc9d1d40b70a254d09ddc76599acc87b3a34b84fc165bc38eef3fe98612d84a220ad8b882f27f6277d3aaafb7200106ec38d8c57f3075f70be3b25ccaccf60591722c5b6f49d003dded07396336cd5e0dbc67bf508e8007d3b91520f3b32a3e2fdf898bfccd1ca29fa5d8c33bec207a482bb0387e8d7dfb28f8fdc3a648a364d7a793391dbfd406140e87340896d105ee07130a8044d4ad5ba1d2d274dd7def7c39da958c853ba50290f6b453660ba89088d58b16940e5ea71968c155ce2e93db15f0755af9b288c923c48144c086fd36bc32d6228fa0f8081b1d5711ba71fd270d36f68a9f636e48275871b3019d3a2373ee34c3c7a4ec043c46fe94d4a8843dd60d7742c5fed8d5933760ec90d07b702cc716f85b124d2d2fb010c5531cd3c7f72c3a01a8cfc8b71fd08c9c1e88801b18048aaf01eb6b2cc936a809cd9240b90ba53ef2a6b8f5f633875ffbc70087b5917d8b43aff19b9399b35c1b86f9d50067b68871b32b2bb8fbb0964745f9aa216c186a2d154eb0351cfbf83fe5ec269be70440f39662e48bcb5c743797c526c2de1256d1558aa0bab6a09012e154cdd1a01eeb496137451c268e14853f41313a67b2d13fe783fec4161e62e4d212e4e4476902d621b8d7044f62e26fcd7bf1a502bfd4846fa373f06455f3072a862218f044cd848be78768f562ff864134802e33d3b9ddf8d884775a03dd1d54eecf65659e3c010a0298c9c9a4d431f027c582783d904fdb9e69b680c7007fd89620604e4a4c716dc8f385f1c7df60169195ec0025294800f1a7bfffd6c0a79066c048d35013c0b159ce8597b55d99535725822a10f1444a1cfaa3f64ef185905aee51876578fbe604d22970101cf6e80ebd885becb29ecd76aa0af8d536b91f802ba4fa149b5cac87b693dfcca32840fcd86f74bc7381699d7ed84e1817312d9d6698ef297190a159589dc1e013d6e04f628a396f7f69c9790afe314781c7af7d7110b3f3afae5c8a23949cd95a4f054c5b00947fe780542ce1d00203093b132253a9484bcd9", 0x5c1, 0xfffffffffffffffc) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = accept(r2, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) unshare(0x20000100) sendmmsg(r3, &(0x7f0000004740)=[{{&(0x7f0000000280)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000940)="a284e2f5ee002d09f5f7ea03bcf3dfbe68b1b6bfe885659dee838187b2572155249650970aea03feb169aeb93eea6759f19e7a2e157c4c879751b6efd4d62667cf2a487ad5e1974de011277c6c7cf9465a71987ac629c6a6f664818d749957cb286e89db5b955d7f90778abd1915fb5ae4960e4a39633750256ae33ebb6eec9604c95c17868c0aec3274ce6e69a9a312a4c7f6fe7c68bf8c288ea54d47947546f4c225da3963b3d7da7f125937be2f828d9c0f0679a2bb0b5b3982724e969b55d0257a2ddd196a57669c807e4da5a1b9", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)="e864f1", 0x3}, {&(0x7f0000000a40)="3a52449388be0d1abda6657efb726c75a441be1a6189c9cc38e98b88602abf3658d4de1eb1d961ecc23dd820317e77d247259f4adbeaf7857b15aecdae4c99de6b7580614b38c9744cb7925f97fdd9fc15f2313c105b3805ed07d65133fd8f0183ac3c3f28ecc22e0e8f450a1b724dc1", 0x70}], 0x2, &(0x7f00000049c0)=ANY=[@ANYBLOB="e000000000000000010000000200000034c8872c8ef79128d8c82d7143a2248fb112cd7a9b6eea9dfcb4812913b4770e52e132803d0e3830befc6aa8d9f81f1f5a19b39be1ef2724f9fae427305e2b86286b277805bca88b7a369874d71b2bbcdd8e78de208562d31b6c624d060415cd9770675812951dc55ea9285fa56176601a7067090870da4c175d109359a358dd82fcd9f067fe65a617ffbd2425af7707b7a806e0ea4cb85a0b8d32b6a4a03eb75e76074e0ec9115bad99f9afea3bb8c641bd275ea6d2d9431e195564ad23d23e048d632b914c2fcdf3fbd7f655ec25384f038f000000000000000c31dea62a022d3d382def4ddf641b27c2c93e4e4fa362348db4e82cefc0e421e075490d773081e2537c59f3aacb1691aea5e2a1a3d3049581de67e2ef5b11a26f43594f77093f6722d36f6c6e2dd2f93cdf090800a903a4d5609d017bb136a47c892e1ead8cc224fa4e9aa04131e8578c4aa821a4b2d51efb675a09a8da972574261fd3bcdaf95da7a757f3061f87f30046293516e342054b4f4d054617be82ac7d31"], 0xe0}}, {{&(0x7f0000000c00)=@pppoe={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c80)="ac0061b3c575a73770", 0x9}, {&(0x7f0000000cc0)="15e7fc404960af32114b79f1a5c793cc143447d19ec5f8deadb176e8ea590e1ccd760a9c875036ea3e44cdf0bc67ebf6a847e7c14d920e3126a617646aeecfbf053b34079f8428c51d26c891cb99d92eadb25ed378b72f7149d50e2ef0da03b11a6f9ecedc7b741170520394e721bf5f2e4005415f5f1acddd3cd9f627d0aa48f3ecaf7701c0cc977c9f8bb175a1bb5bf728baa16d40c0ffb7fb9ccb0246395da6de13", 0xa3}, {&(0x7f0000000d80)="eb971ae66e27cdc9c21bceaea78248aad9e0e8b0db7a4a1ae7327a845140b2c1a1ecdbc0f2316d19be466350c3a10061dd347da18ba4fb4878a3647fba4145fca4956a747a249cf6a64b0452ea4d8a6c2406385e4180c694d70589c108c5c65265e0af38e21ddcb1f4db059eb1c87932ec37", 0x72}, {&(0x7f0000000e00)="b04979a6b17eed953494dc", 0xb}, {&(0x7f0000000e40)="2c2949300ff859f7b86e90189cff0399", 0x10}, {&(0x7f0000000e80)="5b31e74c42e1115c0e04246ec8238013795d200bcf60733af4a65a79f81bb5ca1578d6195799748ce207fc3a8cbb23cf6c692397c6c8f6c2fbd2c2cedaa41b8ac175185087060833b2a3013f5d8f4fa770c23f95e6f0a130a1157544a6cf80bd32b2b0f48bb62525494638df1f11144f67e33661819fd8f786add1161e4351959fd3866ba648e43ff62023942c6a3e54596b9f4a0696f0b38eb9c6b6b9721f9893e47ad8b6ca59cb11daad", 0xab}, {&(0x7f0000000f40)="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", 0x1000}], 0x7, &(0x7f0000001fc0)=[{0x28, 0x29, 0x9, "9d45b0a158c48e8a52cf94b816d912e0657a8b"}, {0xf0, 0x10b, 0x2, "0f10b7cd1d7528ec54836e6c0f5232e00ceaa2f28a82097340d94e6b947bbfdd0d444e5a12594457585d1ea9037c87d6e258101f5d4996ba124101f4437331d3092be84b4260b70da576953d1804e5cb2bef8dd75bcbb99ed0947c3e1f6652eae8e0013ac2d69c0b6562acb209c6bf0129b5aa9f31cd36bec72d586ac236ca192e0bbb3a06564d675f6f0e32d62f9c51ecc88a229298ccb9a5d041ddabfdeef719e50686222ab0202122f6cd37059945945cae0901351c83f0028a739b3cbaa29632d4d0f42e38716c3fdd0f45d7d1b3eeab89b2e65d84a9d327a2d3bd309602"}, {0x98, 0x10b, 0x0, "836ed0ed4f90209b129f41f678324e0db38e754474f2d773d963b57c9b8ca2167abfe4906ea07b0133e0b6e35632d26cbc20c45dfeb4fd0d6a69cef4a828838f693a7acbe1801797e6eaf8f04944a4a12a2c4d200b319c09ff5134f72d97454afde0536ccdb3024ffd3f4b3fa2e9109b9b1872b2b27c37ac9b626af4f1999a0e3fe2"}, {0x28, 0x113, 0xb8, "497fe8ab7ee32ab429facabbf17fc33656c9219d135da1f8"}, {0x28, 0x1, 0x7, "344fb85e5f5f33441e54c46836072ddf5d7a"}, {0xc0, 0x104, 0xe1, "29f666d41ac266a8f376107adb5640caf353a0b5d12c043c867d60e6d072778e62ffe7d061ecfba34e0b6e0fe905af56e588c4d0cbc145ea2ec3a51049e7bd3bbfbf10d0162726fc03bca7af72b0c37fcccc9f91c071a598a0209548f112cdbeecf3d2d73987eea398715e244abe90b75b3dbed9d0d44f4849829d2c389280f8b871e2a58fba838f94b5dc978b51b5d7cff771bfe463f91d1202848ad72135fe40deff3ada994ddcc3b91c1bb474"}, {0xf0, 0x107, 0x7f, "9e25e574673172e879d35ec0beedeb2cbbf3d90c5949766728eb2805b90c0d3a1a2805883ad57758bd64104431ab230479c1c74a7e622c3e504c549e298b4fc01b791f7e06079ba91d7ce080a984a2a9959a05e3cee210d5a96f9ad9c48f5e9e154247121407f84bbe62ec9c45334741b7673d1ed9d7fd7132bd00fe3de76bd82e00a7b6be552627656fcebab85fd03549c83bfa08df5db58c48d5b06cba58b1c5a8e48f33b481573f3bcd7b133bcb74f089762a8439fdc90218af0b3add4e21244582cf6864defe107c0967d7d0beaaddcec4515afe7a3ce0"}, {0xa0, 0x113, 0x6, "048403e58385e6035956d091eb65390773add815bb9ee4ca493ac9def79ad3fe0ba6fe6329a0cc086a5990ccd1436d1a8e9ceac1db23f39e4040d584d216b4e32350feeba093750b333755160c8b4f1f32207f1f753810d1ddf734fa2043c50169338ffdc756c2ff061a6137ea23866e1017a015da8c1f5dc02687e583295d9cf6fc1762f8812752c58eed8a285a"}, {0xd0, 0x103, 0x6, "8e946261c7a84ad8fad482ea32c0ea1c5f5d712c8a2cf269debdec3484a1932f697c60baa864908ab8a831d6c48aa70a3c586030692ba1fe255a2608210d1167d2b799b92c5bc1fceeb8e638e59a6404abaf88e8bc300e4a32254eeda3cedb3e4f52069364bb26b6818c19be8a0cf7dab9da4e5fd256c7ce528350cf85144658a8f1f6f02633574bd43299cce793d86cb9ecd23a3c1ce4918fc2023b220370a157b2a2136afd7b009b86555ca381b2ae21d0d58b6169a20599fb1ff55d6078d9"}], 0x520}}, {{&(0x7f0000002500)=@pptp={0x18, 0x2, {0x1, @multicast2}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000002580)="babbee173bf8392d61a00e0572c26791c6823ad61008fad5428a898faeeb", 0x1e}, {&(0x7f00000025c0)="11b4a1760369f540727f8ae4a92c0cd29b27a5515f90fce0c0c38e7efa16f139b766da896f94575c01c03a7f148946ebac3148044c716fe5599652008213d9ee1f0a4f426a74599ab9077f342580ceccb6ff46ac73b3132c5272c784f9adac06ffdb709399e0d5c6b6576ba39a6242931b6116bdd8c409874c7553129c96f6af223bdd2cf621be61eacf4bd3e2a747743200257a3b56010604a70fc0e2c26ce4bd6be1b0aa81cf0d2f62cfff43e3", 0xae}, {&(0x7f0000002680)="f45f829fb4faf4a1004b9e0dd77827714df039c2cc5a9a00913c561490f9c5fb7de07ff7a68a9ce1a27b4463d12fd5e235bdd59ed61d2e461dfc03", 0x3b}, {&(0x7f00000026c0)="e799b288ea3a03df2cc4caaed17a2cc02292537d432a9697c00466ac834c2c20f133e3cb565a27b9f42c131300efdd6362e8a8b2f47092b07cff35fc9e50d80e2634d8aa9f8ad9c8e75ac917fc7e1ba4a7229754ce725d8910fb3322715e433a61d3a233acde607071fdb289a687ea0fbc56df594d6e7efb7ffc6c5c994488420e67c784ba6c93b458b0e81855bffac0b3c0a58e0926b781f5bbd017e64206135769caa06eb7aecaf037af59f2dd1f00a7a49c2bc67960b0280e26b52128b47a059de9c7a3ac9839b64615fd3304ee922f7ef8256dccd1da48e144cf27dc5c297ebbd50817ef445974588b9e3330cd6a4724cdd3a74e492ada6c66b7c29c0cc326c6096814207208b6fa2db0d4703449b722d6cf6c7ccac6e268e7cd1f72d2df6335fd51f944c51cec1ca7e75e316efcf67c944d6d5cf322d9e989738cdaf42eadba843f1564c6c311da1fe510486f93c9144b14a3d9b83a69f55f3bda6310e126e1f8a75dc948a013998be10e5179f14b1575193716d4a1e3f1889632d393bcaae3fc30b9de6a5ebc438aeb56af36c1f9754150f34fc4efb619ea672ddf05e56de508aada7b959ddb8b0dd19afa1bf43361b80d0ae3114983f8b6e47e72acebb7a7eb489f7a8d8c039bd6aaafced4ba79e10e7d6083825eef0eb1b897964682ad9195b5fd32d65826be34576bbed30b4cba9902fe38aea54443a35e81db77419d474a480ffe50502e827b27998408f18191a7ba1295f0803819c92df4b817ca84ab82586e2176be67e2b486daf7ebfa50b0263613c69e5f1d7e59fefbef2a33f7735c134414e690037c65ced75e0ac910e27859deec82f4092fd723606c2d562c7c9c364fa7b9e4ff33a431b606243274795f3cd2f36108a47a460e2e3a716a242fe0cb745ed0c8cdf60488851037f6a55396f0a14b8ee65ef23f293b2fbd5cf5d220e1dacd18ab4a7f31e7e54983ac070439d71c3804a6980fae7f2fdd347cc8d69565eb6b53824636815d6b69816942960039b71d760d8970f86fee3710e3224165c9eaf338db0ed72607789256f942531f9edbb5b4cb14f7d61b9972d12a75175b08b9ad039edcf39d953ca1db1fe6397311c26faf785f54379c4f4efe0e8e6b594b66abcfa7c64d16fd31e24b47497cd0f02440fbbfa0abb1db62372169b526b93d26571f13b7a81d8d2ec9597258c54704618e3ec0fc6a33276ae32230901a4b8c7a51f438ee36e0ac9394b6e479024b09b3196e9b4ce701c4a488e6876871cb588097104e254c61a53f9d3768e7b87c4e276781a9b2576a91637a3ee5b02993ac55670ea0c17ed84f72abc2877041e7c4ba920882a1aabb0b4af62aa98e00ac97a165d8183f24f1bdd0a8ce80913eefcc7bc00c3674ceccb431ff252c4c3ec7b917217c3250145b4f1e25f80a5964915918aee3eff4f93f53e67e77c3de4bfdfa1971528f5722c87016b467058c2d2465ebcbf7869793d81c08e98c92c6d182138b4ffcb31435ffe76b240978f09de8b9cee909bfb57806ae937764f9d8df32ce22fa98217dd5021d9a36436e244f29b876d4fd64575b069f68a60bf6baa30d5603b1df6d437892cdab73d4a3c237d45e226ad12d52b763d464aa5f3b8ffc5aba2a2ad7d57d006ddbbc8f8237388ea8de1e1ff72ecc7e4a5d946ad02fdb43ccc1620ef78426172541ef6d434ec728827198d75b17cf98a138bc9f01ef030d77366c747707b546db72126f299f23ed3c7e8b026d7c9286321ff84213f2af7209632b4b89d92d785751c468f5cb80e32e6905a508db24903d977edc81eddd7a456c2631592e6e26e0259c692a7fc818221a321e17eb9e06a1f74d4a3030db219310d13e4e3ebc18f043858a52ce29c70a3930015c85230ca4ee1e7c082bb95666d3ad07c51897db7f7f40e971a74cf87d0d83d6c6ad1853f09c906c61b8857f57e2657973d958f4f0434044c6f1302eb4cfc6b22a3ec27b15e11baa82630e1b823b09f111987b69b495b7b0f1a9b760ec7ffa25e977812fdcd013ddf9385df1ccce363e32afd6ea0b7827eedc29f423482e4fa1cef4ef5a3f8f25119ed46812b5fcc28d104a4eb04434cd73837bf14f162b4fda0fc3eeb70a7ffbf8f69111ee46bd169c5093c8f42c71bc2faafbab2bc031cbacf53b309709bbcc024da6f4139084d11446c959fddfb0424063f22fc43e00fe2eb3fad82a312b1bc713b98074afc47f0a36570f8fc371a01ccac26ecaee0fd0dd75c20d89cc2143abb79f0df181225bad34ad9a7f5bc3131687628f4baf7f8190f6b911d62f66fdb7ad4ff24af2977fd6651ecfe1c30650f771ede6a9e542ae5d000a6c3011f92ccdd78dc3b3413f1fc2653f74c162810624227201f7d5512413b1c7108117480c1ca9ca88ea2f0e7a9347664c844c7606564b1d8786a942a234a3890add89741f32e597cc01794be02f0e126c8127ea03fab5600b3d71d76794ba6202b284a9df2cae13774c09405527b08dc45b92c60f7e2f2f20b9cd65dc0dca1d111251c0db8d5e853e78ed233fc3311c5356d9f928105115cf7784295b2d2c1661fb359c4f442f67ffa6faaa7575366940b49c439a446736a7bcf33ac6ed87c8de41aebbb3b40f7a34772e1a5b59b7a23b65db918a397737823c5b86c86489593dd716daa0950465dcd5b7d6b0dabe65dff2fbccd028377568146425b597c1032471d9115181274c0f79bab680fc9bbd225d7497837e9c0054ceed72417b48894c19af81fd0f50dcc967ca8259e92c48a3900158317dc3f5c206f8b3e441405fb93d20dce3680ed19dde690fbc160dfb7efb20c9b8e52416c581d140fd0b6ed08e82634394865ec37c8e787ac9792c35ccb7473b59d0d5667363cc04653f9f32bca02ca6a408b68d21ed8804a30ebca0071d8b78afb8b753a886a63dc40eb7217692e5fe0ac7e4ba28847446b66b777ac6a62f020fd3c021b615d24a85843925204b34983b90d67825ed7909d616804fbd0ab36beb5eafbaa5f5a9f9c75195e8394520a793d8df6c4a12c02c9a0e2de3561c87591a048833291ad6b50564d5978f111d1794e3e1b7ea18d8e42fecefd192e7e3792d1c439517fe898a94f5bea946ef7fb7433a1da9f2d6f048207628e208a8ddc3988571df2778e64c124fa33e1ed3f6fe0fdfcdb53fb49e7789495f10417d4471d45456f47b8221176dbc207a2c8ff44c978f73e7c907c0f002634ae292f1036a68b7f95fbb51e09d8e7a413db7e3ff5457029a5e50a2724797aca5ecb6091732fcf0253e13cb302b384698c67e9191abab9450835522d1866cd22124a29e7de9f9bf28eff7995cdcda71ce792d4a4f0e2fbee6386ec05628713511fd81b31243166bc0f732f2525617a13392620ecb8ff949e3ee329318e9bcf86de93e123e49b7e4eeaee3ce3b1b59c6258fde8bb9d79e4a6b87da24c54b2b3bcd164b2c54b75bfc1a8874de539fd2b6b5cd1341a3962e3c96780d4618e4e44c98f90e21800af0ba72a0e54d5cb8aca9cf65ba1f827d589dea4db5de4f9727d1b483301aa0c626475536caa4d9540f4b4d83811a8e95f2fba1656e3539a214097943d8a02678cb3390c7b6b679026c4bed96fb42720179b894c2c786d33987bac2e4cdb93b31d21af85d6448555689d80c5f29d7e6fa9b0ac1c31d7ddaec41464216c29e5a4a91cfaa16042662cf91daa3afa606e2126f5783a47e6f14265607a79a307586a9df05245a9c3ac4bc671067ce9ead59b64bccf8e1e4bbf7f664d3413bafed877a48b09d8c75d9d0ddf7741ae47b241149109b9f16335815f287d041eb360e8ec9aa5e6b219dad6e4acf6561ee627fc4904832753f76eee82ab6530672d7c6ad8ef4def73c6db73fdf357934d13e2ec814e3d026bcb3a679f7c7da8d258242789c81e0d114688b9454fbfc6844954d3134aa08ff404ea3880940fe1de06b6494bbb13591b963f7c0ce98d2b2c033575769b3e8dc829da7fe9978942ef53fd8050a86ea98bb3aadd2e6892bf8e1b7c4b74b10a0d0371203bfdfa0e8e84ddc6e48ba4ff1ff3d463e9547a962c06ea6b6ebf1da04b7741dc5166533dcbc36a0a9704aca68b73ff65f0ca2a197445f7e30cadeab7a6374fd0e825c680cfd1ed7b5e055a7710b0cac15e62f3dfd9ac0cc4199330f9833f2af47603cb01998bd83f90e0a08388b96b09034f064554a6f36851dbd879196d9e2f3d5df80e163e2a174c2dbfb0829a732c944ffcbeae56881a356a6d8d8cc2acf86a0fcd8a36273e47d787ff9d17e0a8befc1d3beec6a6bb13c1916e7ed68ab382dd6c090c913b371ea048d30c491731ea1425ac0f5cb30220ffbc2f848ae9eff7cdca41a30ccc1e1b46248242589c1cffa60ab4348fae814c1565ea871384d9a8a44f9b73eae28fb578ade9365d79adcec57cf2aee6c69686a043ab6f0576d7280e0a95122a6980fcd2eb6246acc6d2a97c882b12073b87913aaea035e2a7ec5c999945c647b1118ba619df9a3d7c8bd53650b34756b26f6beb07b60693428898701277580145c5e278c2a02baaf38191217f21654c83ec3650b7d618cdd0a06c4b78bf80bf07be5bc2ffcc3acec3214a6af3cf0e7b0018ffb2b0ea8f4ea0e6329c0a9d30d259556081e9e56756541039f639871f287de97f5c6881a98e8b262a0e149a300d8a07a4005c475520f0558a677a525f1b77533367b4cbfa504076106ccf8adc667a3f7cf9df0a0f0841b563e5b121e4f020bf0a9c945184ae13c6749f22786d06e7d2b8d5ed73f7985a0d82ede40f61f8244762d8c35e692a5253e64f597cd47ced8cefc26b57047aabb65324e797c03e2d9f06737e29f01ed6a1429314117df16b2917e1e31d59b1a652b97af22bf554633d5d005723dc9dbe9cb7d3206f41dc348953f78ff6c60a67b671fcfaa8a36efba134a19662eb92eccfe2f784aced38a69e834b0d6e618cbd369136658223c6b6eabaf9ada762621e94197021848ed0688b76f51d27fb30096234958fda66dcdf1d7ef3c2d378a68148863db13b109af0ad8a6ffcfc1a52f98439791459eee700e2597fe8d560b2cf1f92e86f78788d359e9f5117755e94d36d1a60697e2932fe8474d7675c96c1a53a2f63b33b581c2e6886829c21697546d2b291cb114f03c1fb945a345c5a724bdcdaeee6f0909d3f42e7ababdf97705c4c780bfb68d9978f1e7c9be1ffe1ee6a93741d769a949c4c48e52af5b0728c3bd6574d5748912c82b74e7ddc6a30de9b4ef709067606e7d418a60ae99d71464b7d5224c5df460872bb3997a2ef0c4cd18fb48c920cd30cffe8742003ed1fa265964c6b2296b428b037d931eb3341196909c02a7c3bd9d4e83280d4c937e4eefde3ca6a2378eb414fc4667eab13cb4db891d2571ce7ebbca2c19631a3ee8e6c381279f55f2687a487370e324615b9eb0355cfa2289518f6a55cb5494c13a423e4197a86a76df378963541503b96b3ff7b0609150d9a4082886f165eccceb2eae1ef2068fac263d605adb4ef1445bff49b70e0c73c0b2ec90b660bf0a1898d4ad7d6445541460c17e062aa9c77963fe7f67cb93796d7df53d6fc084b95f0f823a3ce89253f5b8ab54b46e5797c7a5e9642b06579c5b45f78ff3b8d2bf1c3f28adc1e2ceb18787e3b2f36f1695942b7d3aa21ccbba19a5c3385527da4fea769a7f334b49c14523b00abf65be24a03fbe643b829507ca0982f51c829bc4f44f4e77c2284c25661803d024532e7f8a5d5a37ba5b6fac965551fda93bbe675712e22f43a9edcffb046d75dd7632ca48f817b3c1", 0x1000}, {&(0x7f00000036c0)="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", 0x1000}], 0x5}}], 0x4, 0x404c001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000004880)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_vs\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x8}}, 0x30) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) fremovexattr(r4, &(0x7f00000048c0)=ANY=[@ANYBLOB="6f73322e6970365f76746930001c6a817d611571cb921f83212091e992545e4f3477ac7fd16c60bdf02c698b449f54066d771f4177544a7ef708663f0a1397c2f209acc7c99b5c081b54db1c4dac09581fd0e4b3c30a9f894167648b40d862ea8ddc0e5a54938d9cd1673e6b37664bf136901c8bba6d7f7f67964e4c30ad9452220ec988d68642ca8a8a9d51e063cc1994c05ec19829c64fd28827c41c0f9abf60a0df96a0eb0a480685eb32c33b508ab61bf6236fed69ba16ca2f8552e25d2135ad04d191efd8910c879823f1c286931c2d08934f"]) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 3m58.674996314s ago: executing program 0 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, 0x0) r1 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x88, 0x0, 0x1, 0x6, 0x10000, @value}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x60, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2f, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x4}, @void, @val={0x6, 0x2, 0x7ff}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE={0x4}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) 3m43.398301315s ago: executing program 33 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, 0x0) r1 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x88, 0x0, 0x1, 0x6, 0x10000, @value}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x60, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2f, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x4}, @void, @val={0x6, 0x2, 0x7ff}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE={0x4}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) 4.161701789s ago: executing program 5 (id=1097): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) fadvise64(r0, 0x0, 0x0, 0xc) 3.780159265s ago: executing program 5 (id=1102): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 3.558451087s ago: executing program 5 (id=1104): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x114, &(0x7f0000000140)={0x0, 0xfad2}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc3, 0xaa, 0x37, 0x40, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xab, 0x4, 0x0, 0xac, 0x4, 0x14}}]}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.898038385s ago: executing program 4 (id=1111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x400, 0x8a12, 0x4}}]}, 0x40}}, 0x0) 2.718481686s ago: executing program 4 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0x34}}, 0x40004) 2.709046321s ago: executing program 6 (id=1115): write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0x5, {0x5, 0xf, "0bb3ba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.678190228s ago: executing program 4 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x4, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x2, 0x2, 0x41, 0x64, 0x0, 0x8, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}, {0x17, 0x5, 0x0, @rand_addr=0x64010102, "69b2cc17f58995c73cb1714070a678ee0be0949d86f6ded4b812e08dea4bec41cc3c33c0ea"}}}}, 0x4f) 2.511136428s ago: executing program 3 (id=1118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 2.445941148s ago: executing program 2 (id=1119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e"], 0x8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000480)}}], 0x1, 0x4044891) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xc, 0x8, 0x6, '\x00', 0x9}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.400561403s ago: executing program 4 (id=1120): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x6669cc1368519859, 0x0, {0x9, 0x21, 0x5, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.350965544s ago: executing program 3 (id=1121): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff00f500140600fe80000000000000000000000017e0962619"], 0x0) 2.245457999s ago: executing program 3 (id=1122): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(0x0) 2.150496467s ago: executing program 2 (id=1123): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) 1.980289686s ago: executing program 5 (id=1124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x400, 0x8a12, 0x4}}]}, 0x40}}, 0x0) 1.906487602s ago: executing program 2 (id=1125): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) fadvise64(r0, 0x0, 0x0, 0xc) 1.794463615s ago: executing program 5 (id=1126): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.690194332s ago: executing program 2 (id=1127): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r0, &(0x7f0000000600), 0xfec8) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.683303913s ago: executing program 5 (id=1128): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x6d42, &(0x7f0000000280)={0x0, 0x32c8, 0x4}, &(0x7f0000c57000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.458488144s ago: executing program 2 (id=1129): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1.359017004s ago: executing program 2 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="83", 0x1) 1.112186258s ago: executing program 3 (id=1131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 798.510695ms ago: executing program 6 (id=1132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 658.757247ms ago: executing program 3 (id=1133): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000164000/0x1000)=nil, &(0x7f0000673000/0x1000)=nil, 0x0, &(0x7f0000000180), 0x0, 0x29a, 0x50, 0x0, 0x20}) open(&(0x7f0000000000)='./file0\x00', 0x801, 0x4) 629.768303ms ago: executing program 6 (id=1134): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004084) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 423.606187ms ago: executing program 4 (id=1135): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) 345.944733ms ago: executing program 6 (id=1136): r0 = memfd_create(0x0, 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001a80)={0x0, 0x0, 0x9, 0x2}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 185.783026ms ago: executing program 6 (id=1137): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 104.588387ms ago: executing program 4 (id=1138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x2, 0x46, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x17, 0x70, 0x9, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r3, 0x2f, 0xa, 0x12, 0x1, 0x3e, @dev={0xfe, 0x80, '\x00', 0x36}, @private1, 0x20, 0x10, 0x9, 0x8}}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)=""/237, 0xed}], 0x8}, 0x10020) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x0, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x89, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x19, '\x00', 0x3, 0x8000000000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.325066ms ago: executing program 3 (id=1139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0xfffffffffffffe6d, {0x0, 0x4000}}, "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", "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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x10, &(0x7f0000000340)=[@cr4={0x1, 0x2000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=1140): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) writev(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): syz [ 332.261199][ T2148] usb 5-1: SerialNumber: syz [ 332.262468][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 332.317034][ T5925] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.337430][ T5925] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 332.403734][ T5925] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 332.478716][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.494042][ T5925] usb 3-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 332.519216][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.542815][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.578991][ T7794] netlink: 'syz.3.508': attribute type 10 has an invalid length. [ 332.586901][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.589990][ T5925] usb 3-1: config 0 descriptor?? [ 332.626338][ T5925] usb 3-1: can't set config #0, error -71 [ 332.715935][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 332.715974][ T5925] usb 3-1: USB disconnect, device number 18 [ 332.969451][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.508'. [ 338.128632][ T2148] usb 5-1: 0:2 : does not exist [ 338.220371][ T2148] usb 5-1: USB disconnect, device number 11 [ 338.453290][ T7822] binder: 7817:7822 ioctl 4018620d 0 returned -22 [ 338.943240][ T6161] udevd[6161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.551723][ T7829] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 342.752372][ T5934] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 343.584510][ T5934] usb 6-1: config index 0 descriptor too short (expected 292, got 36) [ 343.593112][ T5934] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 343.601415][ T5934] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 344.357775][ T5934] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 141, changing to 11 [ 344.369213][ T5934] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.379175][ T5934] usb 6-1: config 0 interface 0 has no altsetting 0 [ 344.386413][ T5934] usb 6-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 344.395592][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.459475][ T5934] usb 6-1: config 0 descriptor?? [ 346.356670][ T5934] usb 6-1: can't set config #0, error -71 [ 346.396634][ T7860] binder: 7856:7860 ioctl 4018620d 0 returned -22 [ 346.545208][ T5934] usb 6-1: USB disconnect, device number 2 [ 349.802426][ T1202] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 352.036760][ T7879] binder: BINDER_SET_CONTEXT_MGR already set [ 352.042814][ T7879] binder: 7875:7879 ioctl 4018620d 20000040 returned -16 [ 354.142231][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.520820][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.767157][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.921214][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.930613][ T5836] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 354.938417][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.007563][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 356.523110][ T5934] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 356.542723][ T1202] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 356.764692][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 356.789479][ T1202] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.139319][ T5836] Bluetooth: hci6: command tx timeout [ 357.203208][ T1202] usb 3-1: config 0 has no interface number 0 [ 357.209387][ T1202] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 357.227041][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 357.299439][ T5934] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 357.332332][ T1202] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0xA has an invalid bInterval 45, changing to 9 [ 357.370667][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.390975][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.427295][ T1202] usb 3-1: config 0 interface 1 altsetting 3 bulk endpoint 0xD has invalid maxpacket 1023 [ 357.442685][ T5934] usb 4-1: Product: syz [ 357.446900][ T5934] usb 4-1: Manufacturer: syz [ 357.453948][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.494907][ T7885] bridge_slave_0: entered allmulticast mode [ 357.513426][ T5934] usb 4-1: SerialNumber: syz [ 357.522291][ T1202] usb 3-1: config 0 interface 1 has no altsetting 0 [ 357.551161][ T5934] usb 4-1: config 0 descriptor?? [ 357.561421][ T7885] bridge_slave_0: entered promiscuous mode [ 357.573201][ T1202] usb 3-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=f1.71 [ 357.602440][ T5877] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 357.629041][ T5934] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 357.641515][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.652368][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.691717][ T5934] usb 4-1: Detected SIO [ 357.708150][ T1202] usb 3-1: Product: syz [ 357.712684][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.719947][ T7885] bridge_slave_1: entered allmulticast mode [ 357.728855][ T5934] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 357.743135][ T1202] usb 3-1: Manufacturer: syz [ 357.747847][ T1202] usb 3-1: SerialNumber: syz [ 357.789008][ T5934] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 357.801728][ T5877] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 357.827806][ T7885] bridge_slave_1: entered promiscuous mode [ 357.839028][ T1202] usb 3-1: config 0 descriptor?? [ 357.853947][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.878993][ T5934] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 357.897957][ T5877] usb 5-1: config 0 descriptor?? [ 357.973027][ T7915] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 358.050581][ T5877] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 358.061059][ T5934] usb 4-1: USB disconnect, device number 28 [ 358.088807][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.100100][ T5934] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 358.113625][ T5934] ftdi_sio 4-1:0.0: device disconnected [ 358.126192][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.209817][ T1202] appledisplay 3-1:0.1: Could not find int-in endpoint [ 358.218574][ T1202] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 358.248215][ T1202] usb 3-1: USB disconnect, device number 19 [ 358.398778][ T7657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.527793][ T7657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.597363][ T7885] team0: Port device team_slave_0 added [ 358.637104][ T7885] team0: Port device team_slave_1 added [ 358.673083][ T7926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.767237][ T5877] gspca_sn9c2028: read1 error -71 [ 358.772514][ T5877] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 358.790159][ T5877] usb 5-1: USB disconnect, device number 13 [ 358.969470][ T7657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.021407][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.146664][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.216889][ T5836] Bluetooth: hci6: command tx timeout [ 359.915447][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.964471][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.263019][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.292321][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.397560][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.549'. [ 360.860844][ T7657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.343273][ T7953] netlink: 2716 bytes leftover after parsing attributes in process `syz.5.554'. [ 362.042334][ T5836] Bluetooth: hci6: command tx timeout [ 362.450929][ T7885] hsr_slave_0: entered promiscuous mode [ 362.470532][ T7885] hsr_slave_1: entered promiscuous mode [ 362.516094][ T7885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.548007][ T7885] Cannot create hsr debugfs directory [ 362.982311][ T7657] bridge_slave_1: left allmulticast mode [ 362.988314][ T7657] bridge_slave_1: left promiscuous mode [ 363.044585][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.011055][ T7657] bridge_slave_0: left allmulticast mode [ 364.022357][ T7657] bridge_slave_0: left promiscuous mode [ 364.062469][ T5836] Bluetooth: hci6: command tx timeout [ 364.072569][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.272967][ T5877] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 364.484586][ T5877] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 364.494223][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.642327][ T5879] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 364.794322][ T5879] usb 5-1: config index 0 descriptor too short (expected 292, got 36) [ 364.806462][ T5879] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 364.826584][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 364.853944][ T5879] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 141, changing to 11 [ 364.877194][ T5879] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.901410][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.924588][ T5879] usb 5-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 364.966463][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.008694][ T5879] usb 5-1: config 0 descriptor?? [ 365.897396][ T5879] wacom 0003:056A:00B4.0008: unknown main item tag 0x0 [ 365.947707][ T5877] usb 4-1: config 0 descriptor?? [ 365.954950][ T5877] cp210x 4-1:0.0: cp210x converter detected [ 365.972691][ T5879] wacom 0003:056A:00B4.0008: unknown main item tag 0x0 [ 366.011670][ T5879] wacom 0003:056A:00B4.0008: unknown main item tag 0x0 [ 366.037403][ T5879] wacom 0003:056A:00B4.0008: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 366.099715][ T5879] wacom 0003:056A:00B4.0008: hidraw0: USB HID v0.00 Device [HID 056a:00b4] on usb-dummy_hcd.4-1/input0 [ 366.146419][ T5879] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B4.0008/input/input25 [ 366.166251][ T5877] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 366.183875][ T5877] cp210x 4-1:0.0: querying part number failed [ 366.199156][ T5877] usb 4-1: cp210x converter now attached to ttyUSB0 [ 366.240562][ T5879] usb 5-1: USB disconnect, device number 14 [ 366.400275][ T5877] usb 4-1: USB disconnect, device number 29 [ 366.426261][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 367.272886][ T5877] cp210x 4-1:0.0: device disconnected [ 368.926813][ T7997] netlink: 2716 bytes leftover after parsing attributes in process `syz.5.566'. [ 369.889425][ T7657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.932466][ T7657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.970645][ T7657] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 369.990806][ T7657] veth1_vlan: left allmulticast mode [ 370.025297][ T7657] bond0 (unregistering): Released all slaves [ 370.308562][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 370.507681][ T5877] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 370.674380][ T5877] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 370.703164][ T5877] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 370.953148][ T8023] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 371.701207][ T5877] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 373.504636][ T5877] usb 5-1: unable to read config index 3 descriptor/start: -71 [ 373.522344][ T5877] usb 5-1: can't read configurations, error -71 [ 373.802759][ T29] audit: type=1326 audit(1734417446.197:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 373.900244][ T29] audit: type=1326 audit(1734417446.197:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 373.993746][ T29] audit: type=1326 audit(1734417446.197:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 374.091770][ T29] audit: type=1326 audit(1734417446.197:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 374.186285][ T29] audit: type=1326 audit(1734417446.197:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 374.273469][ T29] audit: type=1326 audit(1734417446.197:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 374.366555][ T29] audit: type=1326 audit(1734417446.197:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 374.771754][ T29] audit: type=1326 audit(1734417446.197:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 374.802021][ T29] audit: type=1326 audit(1734417446.197:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 374.831732][ T29] audit: type=1326 audit(1734417446.197:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8028 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 374.940263][ T8040] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 375.042674][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 375.052808][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.576'. [ 375.209397][ T8046] netlink: 2716 bytes leftover after parsing attributes in process `syz.4.577'. [ 377.395539][ T5828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 377.956982][ T5828] usb 6-1: config 213 has too many interfaces: 113, using maximum allowed: 32 [ 377.974766][ T5828] usb 6-1: config 213 has an invalid descriptor of length 184, skipping remainder of the config [ 378.044285][ T5828] usb 6-1: config 213 has 0 interfaces, different from the descriptor's value: 113 [ 378.097095][ T5828] usb 6-1: string descriptor 0 read error: -71 [ 378.154690][ T7885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.591517][ T8081] FAULT_INJECTION: forcing a failure. [ 378.591517][ T8081] name failslab, interval 1, probability 0, space 0, times 0 [ 378.604577][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.4.583 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 378.615226][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 378.625336][ T8081] Call Trace: [ 378.628653][ T8081] [ 378.631619][ T8081] dump_stack_lvl+0x241/0x360 [ 378.636363][ T8081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.641621][ T8081] ? __pfx__printk+0x10/0x10 [ 378.646287][ T8081] should_fail_ex+0x3b0/0x4e0 [ 378.651017][ T8081] should_failslab+0xac/0x100 [ 378.655751][ T8081] __kmalloc_cache_noprof+0x70/0x390 [ 378.661089][ T8081] ? __hw_addr_add_ex+0x1a8/0x610 [ 378.666194][ T8081] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.672581][ T8081] __hw_addr_add_ex+0x1a8/0x610 [ 378.677491][ T8081] dev_addr_init+0x143/0x230 [ 378.682128][ T8081] ? __pfx_dev_addr_init+0x10/0x10 [ 378.687305][ T8081] ? sized_strscpy+0x9a/0x2b0 [ 378.692032][ T8081] alloc_netdev_mqs+0x2ae/0x1080 [ 378.697022][ T8081] ? __pfx_tun_setup+0x10/0x10 [ 378.701843][ T8081] tun_set_iff+0x542/0xe80 [ 378.706325][ T8081] ? tun_get+0x27d/0x2f0 [ 378.710629][ T8081] __tun_chr_ioctl+0x863/0x2400 [ 378.715547][ T8081] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 378.720901][ T8081] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 378.726060][ T8081] __se_sys_ioctl+0xf5/0x170 [ 378.730708][ T8081] do_syscall_64+0xf3/0x230 [ 378.735271][ T8081] ? clear_bhb_loop+0x35/0x90 [ 378.739998][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.745945][ T8081] RIP: 0033:0x7f5098185d19 [ 378.750406][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.770066][ T8081] RSP: 002b:00007f5098f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.778541][ T8081] RAX: ffffffffffffffda RBX: 00007f5098376160 RCX: 00007f5098185d19 [ 378.786565][ T8081] RDX: 0000000020000180 RSI: 00000000400454ca RDI: 000000000000000d [ 378.794608][ T8081] RBP: 00007f5098f9d090 R08: 0000000000000000 R09: 0000000000000000 [ 378.802630][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.810651][ T8081] R13: 0000000000000000 R14: 00007f5098376160 R15: 00007ffd30d3b438 [ 378.818715][ T8081] [ 378.824712][ T7885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 379.112312][ T5828] usb 6-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 379.121462][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 379.133075][ T5828] usb 6-1: can't set config #213, error -71 [ 379.140550][ T5828] usb 6-1: USB disconnect, device number 3 [ 379.367393][ T8072] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.579'. [ 379.383706][ T8072] netlink: zone id is out of range [ 379.388913][ T8072] netlink: zone id is out of range [ 379.430110][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.436643][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.594294][ T7885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 379.648703][ T7657] hsr_slave_0: left promiscuous mode [ 379.671004][ T7657] hsr_slave_1: left promiscuous mode [ 379.810133][ T8088] affs: No valid root block on device loop5 [ 379.823615][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.831146][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.881771][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.193225][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.325561][ T7657] veth1_macvtap: left promiscuous mode [ 380.331674][ T7657] veth0_macvtap: left promiscuous mode [ 380.338276][ T7657] veth1_vlan: left promiscuous mode [ 380.344134][ T7657] veth0_vlan: left promiscuous mode [ 380.722090][ T8097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.263458][ T8102] netlink: 'syz.3.588': attribute type 10 has an invalid length. [ 381.331739][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 381.420629][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 384.203563][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 385.889642][ T7657] team0 (unregistering): Port device team_slave_1 removed [ 385.956187][ T7657] team0 (unregistering): Port device team_slave_0 removed [ 386.635171][ T8126] ======================================================= [ 386.635171][ T8126] WARNING: The mand mount option has been deprecated and [ 386.635171][ T8126] and is ignored by this kernel. Remove the mand [ 386.635171][ T8126] option from the mount to silence this warning. [ 386.635171][ T8126] ======================================================= [ 387.298544][ T8128] FAULT_INJECTION: forcing a failure. [ 387.298544][ T8128] name failslab, interval 1, probability 0, space 0, times 0 [ 387.311595][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.4.593 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 387.322332][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 387.332409][ T8128] Call Trace: [ 387.335709][ T8128] [ 387.338640][ T8128] dump_stack_lvl+0x241/0x360 [ 387.343337][ T8128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.348549][ T8128] ? __pfx__printk+0x10/0x10 [ 387.353171][ T8128] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 387.358576][ T8128] ? __pfx___might_resched+0x10/0x10 [ 387.363905][ T8128] should_fail_ex+0x3b0/0x4e0 [ 387.368609][ T8128] should_failslab+0xac/0x100 [ 387.373314][ T8128] __kmalloc_node_noprof+0xe1/0x4d0 [ 387.378531][ T8128] ? __kvmalloc_node_noprof+0x72/0x190 [ 387.384011][ T8128] __kvmalloc_node_noprof+0x72/0x190 [ 387.389315][ T8128] io_ring_ctx_alloc+0x715/0x1990 [ 387.394357][ T8128] io_uring_create+0x40/0xc00 [ 387.399048][ T8128] __se_sys_io_uring_setup+0x2ba/0x330 [ 387.404527][ T8128] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 387.410564][ T8128] ? do_syscall_64+0x100/0x230 [ 387.415358][ T8128] ? do_syscall_64+0xb6/0x230 [ 387.420057][ T8128] do_syscall_64+0xf3/0x230 [ 387.424582][ T8128] ? clear_bhb_loop+0x35/0x90 [ 387.429274][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.435203][ T8128] RIP: 0033:0x7f5098185d19 [ 387.439648][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.459284][ T8128] RSP: 002b:00007f5098fdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 387.467719][ T8128] RAX: ffffffffffffffda RBX: 00007f5098375fa0 RCX: 00007f5098185d19 [ 387.475712][ T8128] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000002554 [ 387.483698][ T8128] RBP: 00007f5098fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 387.491709][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.499692][ T8128] R13: 0000000000000001 R14: 00007f5098375fa0 R15: 00007ffd30d3b438 [ 387.507690][ T8128] [ 387.578850][ T7885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.615027][ T8095] netlink: 132 bytes leftover after parsing attributes in process `syz.5.586'. [ 387.628366][ T8095] FAULT_INJECTION: forcing a failure. [ 387.628366][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 387.648751][ T8095] CPU: 0 UID: 0 PID: 8095 Comm: syz.5.586 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 387.659436][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 387.669535][ T8095] Call Trace: [ 387.672831][ T8095] [ 387.675796][ T8095] dump_stack_lvl+0x241/0x360 [ 387.680521][ T8095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.685760][ T8095] ? __pfx__printk+0x10/0x10 [ 387.690386][ T8095] ? lockdep_hardirqs_on+0x99/0x150 [ 387.695620][ T8095] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 387.701543][ T8095] should_fail_ex+0x3b0/0x4e0 [ 387.706241][ T8095] should_failslab+0xac/0x100 [ 387.710949][ T8095] kmem_cache_alloc_node_noprof+0x77/0x380 [ 387.716769][ T8095] ? __alloc_skb+0x1c3/0x440 [ 387.721380][ T8095] __alloc_skb+0x1c3/0x440 [ 387.725810][ T8095] ? atomic_notifier_call_chain+0x26/0x180 [ 387.731632][ T8095] ? __pfx___alloc_skb+0x10/0x10 [ 387.736589][ T8095] ? notifier_call_chain+0x3cc/0x3f0 [ 387.741890][ T8095] __neigh_notify+0x81/0x140 [ 387.746505][ T8095] __neigh_update+0xd57/0x24c0 [ 387.751308][ T8095] neigh_add+0xa4d/0xdc0 [ 387.755577][ T8095] ? __pfx_neigh_add+0x10/0x10 [ 387.760390][ T8095] ? __pfx_neigh_add+0x10/0x10 [ 387.765175][ T8095] rtnetlink_rcv_msg+0x73f/0xcf0 [ 387.770133][ T8095] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 387.775272][ T8095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.780758][ T8095] ? ref_tracker_free+0x643/0x7e0 [ 387.785802][ T8095] netlink_rcv_skb+0x1e3/0x430 [ 387.790584][ T8095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.796060][ T8095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.801375][ T8095] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.806587][ T8095] netlink_unicast+0x7f6/0x990 [ 387.811379][ T8095] ? __pfx_netlink_unicast+0x10/0x10 [ 387.816680][ T8095] ? __virt_addr_valid+0x45f/0x530 [ 387.821807][ T8095] ? __phys_addr_symbol+0x2f/0x70 [ 387.826848][ T8095] ? __check_object_size+0x47a/0x730 [ 387.832161][ T8095] netlink_sendmsg+0x8e4/0xcb0 [ 387.836958][ T8095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.842267][ T8095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.847563][ T8095] __sock_sendmsg+0x221/0x270 [ 387.852261][ T8095] ____sys_sendmsg+0x52a/0x7e0 [ 387.857043][ T8095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.862346][ T8095] ? __fget_files+0x2a/0x410 [ 387.866949][ T8095] ? __fget_files+0x2a/0x410 [ 387.871565][ T8095] __sys_sendmsg+0x269/0x350 [ 387.876174][ T8095] ? __pfx_lock_release+0x10/0x10 [ 387.881219][ T8095] ? __pfx___sys_sendmsg+0x10/0x10 [ 387.886360][ T8095] ? __pfx_vfs_write+0x10/0x10 [ 387.891165][ T8095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 387.897509][ T8095] ? do_syscall_64+0x100/0x230 [ 387.902305][ T8095] ? do_syscall_64+0xb6/0x230 [ 387.907021][ T8095] do_syscall_64+0xf3/0x230 [ 387.911544][ T8095] ? clear_bhb_loop+0x35/0x90 [ 387.916235][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.922148][ T8095] RIP: 0033:0x7f4ddc385d19 [ 387.926584][ T8095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.946202][ T8095] RSP: 002b:00007f4ddd266038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.954633][ T8095] RAX: ffffffffffffffda RBX: 00007f4ddc575fa0 RCX: 00007f4ddc385d19 [ 387.962617][ T8095] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000004 [ 387.970599][ T8095] RBP: 00007f4ddd266090 R08: 0000000000000000 R09: 0000000000000000 [ 387.978579][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.986565][ T8095] R13: 0000000000000000 R14: 00007f4ddc575fa0 R15: 00007fffb75c4668 [ 387.994562][ T8095] [ 388.293701][ T8138] FAULT_INJECTION: forcing a failure. [ 388.293701][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 388.382732][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.2.596 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 388.393427][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 388.403539][ T8138] Call Trace: [ 388.406874][ T8138] [ 388.409848][ T8138] dump_stack_lvl+0x241/0x360 [ 388.414590][ T8138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.419850][ T8138] ? __pfx__printk+0x10/0x10 [ 388.424494][ T8138] ? kmem_cache_alloc_noprof+0x48/0x380 [ 388.430082][ T8138] ? __pfx___might_resched+0x10/0x10 [ 388.435421][ T8138] should_fail_ex+0x3b0/0x4e0 [ 388.440145][ T8138] should_failslab+0xac/0x100 [ 388.444891][ T8138] ? mas_alloc_nodes+0x25b/0x7e0 [ 388.449885][ T8138] kmem_cache_alloc_noprof+0x70/0x380 [ 388.455360][ T8138] mas_alloc_nodes+0x25b/0x7e0 [ 388.460200][ T8138] mas_preallocate+0x575/0x8d0 [ 388.465032][ T8138] ? __pfx_mas_preallocate+0x10/0x10 [ 388.470383][ T8138] ? __raw_spin_lock_init+0x45/0x100 [ 388.475726][ T8138] ? __mas_set_range+0x133/0x3c0 [ 388.480708][ T8138] __mmap_region+0x1b89/0x2cd0 [ 388.485545][ T8138] ? __pfx___mmap_region+0x10/0x10 [ 388.490772][ T8138] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 388.497437][ T8138] ? mm_get_unmapped_area+0xa8/0xd0 [ 388.502698][ T8138] ? cap_mmap_addr+0x163/0x2c0 [ 388.507506][ T8138] mmap_region+0x1d0/0x2c0 [ 388.511959][ T8138] ? security_mmap_addr+0x6f/0x250 [ 388.517121][ T8138] do_mmap+0x8f0/0x1000 [ 388.521337][ T8138] ? __pfx_do_mmap+0x10/0x10 [ 388.525963][ T8138] ? __pfx_down_write_killable+0x10/0x10 [ 388.531633][ T8138] ? __fget_files+0x2a/0x410 [ 388.536266][ T8138] vm_mmap_pgoff+0x1dd/0x3d0 [ 388.540912][ T8138] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 388.546062][ T8138] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 388.552523][ T8138] ? do_syscall_64+0x100/0x230 [ 388.557306][ T8138] ? ksys_mmap_pgoff+0xdf/0x720 [ 388.562180][ T8138] ? __x64_sys_mmap+0x7f/0x140 [ 388.566969][ T8138] do_syscall_64+0xf3/0x230 [ 388.571494][ T8138] ? clear_bhb_loop+0x35/0x90 [ 388.576183][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.582096][ T8138] RIP: 0033:0x7f7790385d19 [ 388.586526][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.606257][ T8138] RSP: 002b:00007f77911ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 388.614696][ T8138] RAX: ffffffffffffffda RBX: 00007f7790575fa0 RCX: 00007f7790385d19 [ 388.622679][ T8138] RDX: 000000000300000a RSI: 0000000000fbe000 RDI: 0000000020000000 [ 388.630660][ T8138] RBP: 00007f77911ca090 R08: ffffffffffffffff R09: 0000000000000000 [ 388.638643][ T8138] R10: 0000000000004031 R11: 0000000000000246 R12: 0000000000000001 [ 388.646625][ T8138] R13: 0000000000000000 R14: 00007f7790575fa0 R15: 00007ffdc9f511b8 [ 388.654623][ T8138] [ 388.683602][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.773259][ T8147] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 389.149737][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.188874][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.196112][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.285081][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.292297][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.572380][ T5877] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 389.853211][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 389.864339][ T5877] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 389.874148][ T5877] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 389.885176][ T5877] usb 5-1: config 1 has no interface number 1 [ 389.891622][ T5877] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 391.088836][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 391.198270][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.302541][ T5877] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.322403][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.330476][ T5877] usb 5-1: Product: syz [ 391.352412][ T5877] usb 5-1: Manufacturer: syz [ 391.357706][ T5877] usb 5-1: SerialNumber: syz [ 391.695761][ T5877] usb 5-1: can't set config #1, error -71 [ 391.703881][ T5877] usb 5-1: USB disconnect, device number 17 [ 393.113284][ T5878] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 393.666540][ T7657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.860701][ T8200] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 394.114024][ T7657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.175198][ T5878] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.184388][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.195941][ T5878] usb 3-1: config 0 descriptor?? [ 394.203069][ T5878] cp210x 3-1:0.0: cp210x converter detected [ 395.254052][ T7657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.302324][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 395.501742][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.532310][ T5878] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 395.539966][ T5878] cp210x 3-1:0.0: querying part number failed [ 395.560661][ T5878] usb 3-1: cp210x converter now attached to ttyUSB0 [ 395.571872][ T5878] usb 3-1: USB disconnect, device number 20 [ 395.680549][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.694331][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 395.704015][ T5878] cp210x 3-1:0.0: device disconnected [ 395.745228][ T8221] openvswitch: netlink: IP tunnel dst address not specified [ 395.856613][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 395.975327][ T7657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.994729][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.006096][ T8225] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 396.030174][ T25] usb 5-1: config 0 descriptor?? [ 396.056656][ T8225] netlink: 244 bytes leftover after parsing attributes in process `syz.2.611'. [ 396.226386][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.612'. [ 396.817558][ T7885] veth0_vlan: entered promiscuous mode [ 396.955039][ T7885] veth1_vlan: entered promiscuous mode [ 397.290431][ T7885] veth0_macvtap: entered promiscuous mode [ 397.385104][ T7885] veth1_macvtap: entered promiscuous mode [ 397.449245][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.480520][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.522507][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.584524][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.640710][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.674884][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.712601][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.749053][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.844370][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.855555][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.868533][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.879798][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.891933][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.902091][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.982522][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.004361][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.040366][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.074785][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.086997][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.100889][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.114153][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.125956][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.158252][ T7657] team0: left allmulticast mode [ 398.166577][ T7657] team_slave_0: left allmulticast mode [ 398.173819][ T7657] team_slave_1: left allmulticast mode [ 398.193404][ T7657] team0: left promiscuous mode [ 398.196947][ T5879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 398.241313][ T7657] team_slave_0: left promiscuous mode [ 398.287920][ T5879] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 398.298268][ T7657] team_slave_1: left promiscuous mode [ 398.315228][ T7657] bridge0: port 3(team0) entered disabled state [ 398.394206][ T25] usb 5-1: string descriptor 0 read error: -71 [ 398.429822][ T25] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 398.441967][ T7657] bridge_slave_1: left allmulticast mode [ 398.463743][ T25] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 398.471879][ T25] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 398.528428][ T7657] bridge_slave_1: left promiscuous mode [ 398.536751][ T25] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 398.561383][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.583096][ T25] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 398.755765][ T25] usb 5-1: USB disconnect, device number 18 [ 398.816855][ T7657] bridge_slave_0: left allmulticast mode [ 399.293615][ T7657] bridge_slave_0: left promiscuous mode [ 399.299521][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.222444][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 400.222466][ T29] audit: type=1800 audit(1734417471.937:32): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.619" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 400.677516][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 402.545272][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 403.462316][ T1202] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 403.612286][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 403.619400][ T1202] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 403.630752][ T1202] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 403.762401][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 403.942431][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 403.960070][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.032298][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.081501][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 404.121573][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.129718][ T1202] usb 3-1: Product: syz [ 404.134165][ T1202] usb 3-1: Manufacturer: syz [ 404.138801][ T1202] usb 3-1: SerialNumber: syz [ 404.151563][ T1202] usb 3-1: config 0 descriptor?? [ 404.157907][ T25] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 404.185991][ T1202] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 404.189348][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.195026][ T1202] usb 3-1: Detected FT232R [ 404.230465][ T25] usb 5-1: config 0 descriptor?? [ 404.332496][ T7657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.355121][ T7657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.430350][ T1202] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 404.443345][ T7657] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 404.465178][ T7657] bond0 (unregistering): Released all slaves [ 404.609886][ T7885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.676061][ T7885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.685455][ T7885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.696701][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.705319][ T7885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.736624][ T25] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 404.761790][ T25] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 404.786138][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.815840][ T25] shield 0003:0955:7214.000B: item fetching failed at offset 2/5 [ 404.843047][ T25] shield 0003:0955:7214.000B: Parse failed [ 404.859279][ T25] shield 0003:0955:7214.000B: probe with driver shield failed with error -22 [ 404.908973][ T1202] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 404.999575][ T1202] usb 5-1: USB disconnect, device number 19 [ 405.102656][ T25] usb 3-1: USB disconnect, device number 21 [ 405.190008][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 405.222885][ T25] ftdi_sio 3-1:0.0: device disconnected [ 405.400829][ T7657] hsr_slave_0: left promiscuous mode [ 405.442341][ T7657] hsr_slave_1: left promiscuous mode [ 405.448964][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.463045][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.482803][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.499521][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.554206][ T7657] veth1_macvtap: left promiscuous mode [ 405.580352][ T7657] veth0_macvtap: left promiscuous mode [ 405.602631][ T7657] veth1_vlan: left promiscuous mode [ 405.608080][ T7657] veth0_vlan: left promiscuous mode [ 407.292408][ T5878] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 407.481116][ T5878] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.498789][ T5878] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.524307][ T5878] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.537187][ T5878] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 407.557173][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.589018][ T8337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 407.651691][ T7657] team0 (unregistering): Port device team_slave_1 removed [ 407.717369][ T7657] team0 (unregistering): Port device team_slave_0 removed [ 407.851467][ T8344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.633'. [ 408.468530][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.512527][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.635180][ T3123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.656856][ T3123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.946504][ T8346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.023708][ T8358] usb usb1: usbfs: process 8358 (syz.5.635) did not claim interface 0 before use [ 411.036819][ T8346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.909918][ T5878] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 411.933962][ T5878] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input28 [ 411.983469][ T5134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.131784][ T8376] QAT: Device 10 not found [ 412.336946][ T5134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.362364][ T5134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.375305][ T5878] usb 5-1: USB disconnect, device number 20 [ 412.381358][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 412.434035][ T5134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.444384][ T5134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.452924][ T5134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.295584][ T8385] binder: BINDER_SET_CONTEXT_MGR already set [ 413.301615][ T8385] binder: 8384:8385 ioctl 4018620d 20000040 returned -16 [ 413.461302][ T2148] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 413.491986][ T2148] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 414.141224][ T7657] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.328112][ T5836] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 414.403634][ T7657] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.886702][ T5134] Bluetooth: hci1: command tx timeout [ 415.850520][ T7657] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.485520][ T8426] trusted_key: encrypted_key: master key parameter '' is invalid [ 416.787370][ T5134] Bluetooth: hci5: command 0x0406 tx timeout [ 416.945575][ T5134] Bluetooth: hci1: command tx timeout [ 417.014590][ T8436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.652'. [ 417.032141][ T8369] chnl_net:caif_netlink_parms(): no params data found [ 417.044428][ T29] audit: type=1326 audit(1734417489.487:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8435 comm="syz.2.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7790385d19 code=0x0 [ 418.569505][ T5836] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 418.579661][ T5836] Bluetooth: hci2: Injecting HCI hardware error event [ 418.589100][ T5836] Bluetooth: hci2: hardware error 0x00 [ 418.746561][ T8446] PM: Enabling pm_trace changes system date and time during resume. [ 418.746561][ T8446] PM: Correct system time has to be restored manually after resume. [ 419.022638][ T5134] Bluetooth: hci1: command tx timeout [ 419.035694][ T7657] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.182610][ T2148] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 421.483324][ T5134] Bluetooth: hci1: command tx timeout [ 421.612679][ T5836] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 421.832497][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.839709][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.876899][ T2148] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 421.884696][ T2148] usb 6-1: can't read configurations, error -71 [ 421.963906][ T8369] bridge_slave_0: entered allmulticast mode [ 422.115051][ T8369] bridge_slave_0: entered promiscuous mode [ 422.125518][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.132744][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.139995][ T8369] bridge_slave_1: entered allmulticast mode [ 422.147378][ T8369] bridge_slave_1: entered promiscuous mode [ 422.471915][ T29] audit: type=1326 audit(1734417494.757:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8473 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b0785d19 code=0x7ffc0000 [ 422.520473][ T29] audit: type=1326 audit(1734417494.757:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8473 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f96b0785d19 code=0x7ffc0000 [ 422.575958][ T8481] FAULT_INJECTION: forcing a failure. [ 422.575958][ T8481] name failslab, interval 1, probability 0, space 0, times 0 [ 422.589817][ T8481] CPU: 1 UID: 0 PID: 8481 Comm: syz.5.659 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 422.600463][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 422.610567][ T8481] Call Trace: [ 422.612062][ T29] audit: type=1326 audit(1734417494.757:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8473 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b0785d19 code=0x7ffc0000 [ 422.613858][ T8481] [ 422.613871][ T8481] dump_stack_lvl+0x241/0x360 [ 422.613913][ T8481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.648055][ T8481] ? __pfx__printk+0x10/0x10 [ 422.652701][ T8481] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 422.658728][ T8481] ? __pfx___might_resched+0x10/0x10 [ 422.664080][ T8481] should_fail_ex+0x3b0/0x4e0 [ 422.668812][ T8481] should_failslab+0xac/0x100 [ 422.673557][ T8481] kmem_cache_alloc_node_noprof+0x77/0x380 [ 422.679414][ T8481] ? alloc_vmap_area+0x74b/0x2400 [ 422.681855][ T29] audit: type=1326 audit(1734417494.757:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8473 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f96b0785d19 code=0x7ffc0000 [ 422.684464][ T8481] alloc_vmap_area+0x74b/0x2400 [ 422.684515][ T8481] ? __pfx_alloc_vmap_area+0x10/0x10 [ 422.715983][ T8481] ? __kasan_kmalloc+0x98/0xb0 [ 422.720813][ T8481] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 422.726989][ T8481] ? __get_vm_area_node+0x132/0x2d0 [ 422.732255][ T8481] ? copy_process+0x5d1/0x3d50 [ 422.737084][ T8481] __get_vm_area_node+0x1c8/0x2d0 [ 422.742181][ T8481] __vmalloc_node_range_noprof+0x344/0x1380 [ 422.748131][ T8481] ? copy_process+0x5d1/0x3d50 [ 422.752963][ T8481] ? mod_objcg_state+0x125/0x930 [ 422.757362][ T29] audit: type=1326 audit(1734417494.757:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8473 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b0785d19 code=0x7ffc0000 [ 422.757947][ T8481] ? percpu_ref_get_many+0x19/0x140 [ 422.784447][ T8481] ? __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 422.790575][ T8481] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 422.796959][ T8481] ? arch_dup_task_struct+0x44/0xa0 [ 422.802208][ T8481] dup_task_struct+0x444/0x8c0 [ 422.807114][ T8481] ? copy_process+0x5d1/0x3d50 [ 422.811939][ T8481] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.812252][ T29] audit: type=1326 audit(1734417494.757:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8473 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b0785d19 code=0x7ffc0000 [ 422.817166][ T8481] copy_process+0x5d1/0x3d50 [ 422.817210][ T8481] ? get_pid_task+0x23/0x1f0 [ 422.847681][ T8481] ? __pfx_lock_release+0x10/0x10 [ 422.852755][ T8481] ? kstrtouint_from_user+0x128/0x190 [ 422.858368][ T8481] ? __pfx_copy_process+0x10/0x10 [ 422.863458][ T8481] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 422.869420][ T8481] kernel_clone+0x223/0x870 [ 422.873975][ T8481] ? __pfx_kernel_clone+0x10/0x10 [ 422.879060][ T8481] __x64_sys_clone+0x258/0x2a0 [ 422.883892][ T8481] ? __pfx___x64_sys_clone+0x10/0x10 [ 422.889250][ T8481] ? do_syscall_64+0x100/0x230 [ 422.894074][ T8481] ? do_syscall_64+0xb6/0x230 [ 422.898814][ T8481] do_syscall_64+0xf3/0x230 [ 422.903368][ T8481] ? clear_bhb_loop+0x35/0x90 [ 422.908080][ T8481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.914116][ T8481] RIP: 0033:0x7f4ddc385d19 [ 422.918566][ T8481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.938217][ T8481] RSP: 002b:00007f4ddd244fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 422.946687][ T8481] RAX: ffffffffffffffda RBX: 00007f4ddc576080 RCX: 00007f4ddc385d19 [ 422.954698][ T8481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 422.962708][ T8481] RBP: 00007f4ddd245090 R08: 0000000000000000 R09: 0000000000000000 [ 422.970721][ T8481] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 422.978739][ T8481] R13: 0000000000000000 R14: 00007f4ddc576080 R15: 00007fffb75c4668 [ 422.986771][ T8481] [ 423.140458][ T8489] netlink: 1275 bytes leftover after parsing attributes in process `syz.2.661'. [ 423.157373][ T8369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.189062][ T8369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.205597][ T8489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.330597][ T8369] team0: Port device team_slave_0 added [ 423.343160][ T8369] team0: Port device team_slave_1 added [ 423.551048][ T8497] team0: entered promiscuous mode [ 423.556589][ T8497] team_slave_0: entered promiscuous mode [ 423.572978][ T8497] team_slave_1: entered promiscuous mode [ 423.590517][ T8497] geneve0: entered promiscuous mode [ 423.882742][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.889767][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.074398][ T8369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.253200][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.260305][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.643533][ T1202] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 424.984744][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 425.027182][ T8369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.061454][ T1202] usb 3-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 425.097735][ T1202] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 425.120071][ T1202] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.150993][ T1202] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 425.172470][ T1202] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 425.189513][ T7657] bridge_slave_1: left allmulticast mode [ 425.199443][ T7657] bridge_slave_1: left promiscuous mode [ 425.212809][ T1202] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 425.232744][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.264653][ T1202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 425.274065][ T7657] bridge_slave_0: left allmulticast mode [ 425.279765][ T7657] bridge_slave_0: left promiscuous mode [ 425.287567][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.297135][ T1202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 425.308564][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.317791][ T1202] usb 3-1: SerialNumber: syz [ 425.334069][ T8515] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.341424][ T8515] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.351100][ T1202] usb 3-1: bad CDC descriptors [ 425.609912][ T8514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.617380][ T8514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 427.718649][ T8533] trusted_key: encrypted_key: insufficient parameters specified [ 428.426548][ T8534] trusted_key: encrypted_key: insufficient parameters specified [ 428.629995][ T7657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.642369][ T7657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.653325][ T7657] bond0 (unregistering): Released all slaves [ 428.743518][ T1202] cdc_subset 3-1:1.0 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, Linux Device, 7e:4e:31:07:8c:1e [ 428.789201][ T8369] hsr_slave_0: entered promiscuous mode [ 428.832687][ T1202] usb 3-1: USB disconnect, device number 22 [ 428.863916][ T1202] cdc_subset 3-1:1.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, Linux Device [ 428.922953][ T8369] hsr_slave_1: entered promiscuous mode [ 428.980895][ T8369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.001512][ T8369] Cannot create hsr debugfs directory [ 429.025282][ T8537] loop2: detected capacity change from 0 to 7 [ 429.052480][ T8537] Dev loop2: unable to read RDB block 7 [ 429.059436][ T8537] loop2: unable to read partition table [ 429.082646][ T8537] loop2: partition table beyond EOD, truncated [ 429.088933][ T8537] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 429.096563][ T8545] Invalid ELF header len 5 [ 429.252520][ T5195] Dev loop2: unable to read RDB block 7 [ 429.258205][ T5195] loop2: unable to read partition table [ 429.292518][ T5195] loop2: partition table beyond EOD, truncated [ 429.322636][ T5925] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 429.472536][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 429.490033][ T5925] usb 6-1: config 1 has an invalid interface number: 6 but max is 0 [ 429.512371][ T5925] usb 6-1: config 1 has no interface number 0 [ 429.527128][ T5925] usb 6-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 429.538727][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.552628][ T5925] usb 6-1: Product: syz [ 429.572451][ T5925] usb 6-1: Manufacturer: syz [ 429.592288][ T1202] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 429.592458][ T5925] usb 6-1: SerialNumber: syz [ 429.695611][ T7657] hsr_slave_0: left promiscuous mode [ 429.733383][ T7657] hsr_slave_1: left promiscuous mode [ 429.771495][ T1202] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 429.794206][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 429.817749][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.836401][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.846343][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.862412][ T1202] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 429.880303][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.889988][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.901594][ T1202] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 429.921649][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.952499][ T5828] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 429.971096][ T7657] veth1_macvtap: left promiscuous mode [ 429.978772][ T1202] usb 3-1: config 0 descriptor?? [ 429.992068][ T7657] veth0_macvtap: left promiscuous mode [ 430.022012][ T7657] veth1_vlan: left promiscuous mode [ 430.058134][ T7657] veth0_vlan: left promiscuous mode [ 430.123867][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 430.178437][ T5925] usb 6-1: palm_os_4_probe - error -71 getting connection info [ 430.186842][ T5925] visor 6-1:1.6: Handspring Visor / Palm OS converter detected [ 430.198580][ T5925] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 430.209045][ T5828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 430.209334][ T5925] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 430.227581][ T5925] usb 6-1: USB disconnect, device number 6 [ 430.340044][ T5925] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 430.679620][ T5925] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 430.854191][ T5925] visor 6-1:1.6: device disconnected [ 431.010182][ T1202] uclogic 0003:28BD:0055.000D: interface is invalid, ignoring [ 431.033695][ T5828] usb 5-1: config 1 has an invalid interface number: 26 but max is 1 [ 431.041872][ T5828] usb 5-1: config 1 has an invalid interface number: 89 but max is 1 [ 431.059870][ T1202] usb 3-1: USB disconnect, device number 23 [ 431.084412][ T5828] usb 5-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 431.109592][ T5828] usb 5-1: config 1 has no interface number 0 [ 431.130237][ T5828] usb 5-1: config 1 has no interface number 1 [ 431.158328][ T5828] usb 5-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 431.234926][ T5828] usb 5-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.280513][ T5828] usb 5-1: config 1 interface 26 has no altsetting 0 [ 431.296287][ T5828] usb 5-1: config 1 interface 89 has no altsetting 0 [ 431.526918][ T5828] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 431.536254][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.544955][ T5828] usb 5-1: Product: syz [ 431.549197][ T5828] usb 5-1: Manufacturer: syz [ 431.554109][ T5828] usb 5-1: SerialNumber: syz [ 431.817995][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.949333][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.266518][ T5828] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 432.308358][ T5828] usb 5-1: 26:2 : does not exist [ 432.328917][ T5828] usb 5-1: unknown interface protocol 0x13, assuming v1 [ 432.466382][ T5828] usb 5-1: 89:2 : does not exist [ 432.492508][ T5925] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 432.652483][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 432.667866][ T5925] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 432.687568][ T5925] usb 4-1: config 0 has no interface number 0 [ 432.697154][ T5925] usb 4-1: config 0 interface 252 has no altsetting 0 [ 432.747417][ T8598] trusted_key: encrypted_key: insufficient parameters specified [ 432.775933][ T5828] usb 5-1: USB disconnect, device number 21 [ 432.782337][ T5925] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8 [ 432.836338][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.956723][ T5925] usb 4-1: Product: syz [ 432.990148][ T5925] usb 4-1: Manufacturer: syz [ 433.075565][ T5925] usb 4-1: SerialNumber: syz [ 433.089290][ T5925] usb 4-1: config 0 descriptor?? [ 433.126528][ T5925] pcwd_usb: This driver only supports 1 device [ 433.987506][ T6161] udevd[6161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.247441][ T7657] team0 (unregistering): Port device team_slave_1 removed [ 434.322675][ T7657] team0 (unregistering): Port device team_slave_0 removed [ 436.535996][ T2148] usb 4-1: USB disconnect, device number 30 [ 436.753607][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 437.772252][ T5828] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 437.936848][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 437.946119][ T5828] usb 4-1: config 0 has no interfaces? [ 437.957653][ T5828] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 437.969970][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.184817][ T5828] usb 4-1: Product: syz [ 438.267882][ T5828] usb 4-1: Manufacturer: syz [ 438.283939][ T5828] usb 4-1: SerialNumber: syz [ 438.350623][ T5925] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 439.178878][ T8642] syz.5.698: attempt to access beyond end of device [ 439.178878][ T8642] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 439.187477][ T5836] Bluetooth: hci1: command tx timeout [ 439.416689][ T5828] usb 4-1: config 0 descriptor?? [ 439.704370][ T8369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.704946][ T5877] usb 4-1: USB disconnect, device number 31 [ 439.757634][ T8369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.852408][ T5925] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 439.865682][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 439.934406][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.999992][ T8369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 440.079851][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 440.151302][ T8369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 440.172303][ T5925] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 440.207289][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.250305][ T5925] usb 3-1: config 0 descriptor?? [ 440.307125][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.317653][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.499835][ T8369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.585455][ T8369] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.627207][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.634438][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.357570][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.364875][ T8047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.457358][ T5925] uclogic 0003:28BD:0055.000E: interface is invalid, ignoring [ 442.038508][ T8674] trusted_key: encrypted_key: insufficient parameters specified [ 442.217248][ T5925] usb 3-1: USB disconnect, device number 24 [ 442.272426][ T5879] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 442.432591][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 442.441250][ T5879] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 442.452837][ T5879] usb 4-1: config 0 has no interface number 0 [ 442.459011][ T5879] usb 4-1: config 0 interface 252 has no altsetting 0 [ 442.504821][ T5879] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8 [ 442.520092][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.731559][ T5879] usb 4-1: Product: syz [ 442.936059][ T8692] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 443.635903][ T5879] usb 4-1: Manufacturer: syz [ 443.640585][ T5879] usb 4-1: SerialNumber: syz [ 443.653388][ T5879] usb 4-1: config 0 descriptor?? [ 443.663599][ T5879] pcwd_usb: This driver only supports 1 device [ 443.860054][ T8695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.891568][ T5879] usb 4-1: USB disconnect, device number 32 [ 443.967078][ T8369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.127111][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.707'. [ 444.664334][ T8369] veth0_vlan: entered promiscuous mode [ 444.730263][ T8369] veth1_vlan: entered promiscuous mode [ 445.974574][ T8369] veth0_macvtap: entered promiscuous mode [ 446.120573][ T8369] veth1_macvtap: entered promiscuous mode [ 447.278411][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.344331][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.400181][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.411514][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.421594][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.432224][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.442098][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.452725][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.555142][ T5879] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 447.583268][ T8746] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 448.349854][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.360057][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.370619][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.380633][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.391320][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.402121][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.412701][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.423488][ T8369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.434589][ T8369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.448107][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.459485][ T8369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.468378][ T8369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.477178][ T8369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.485980][ T8369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.728519][ T5879] usb 4-1: device not accepting address 33, error -71 [ 450.602398][ T8752] trusted_key: encrypted_key: insufficient parameters specified [ 451.252776][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.264923][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.395392][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.422498][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.902820][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.975164][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.132380][ T5879] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 452.344703][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 452.381859][ T5879] usb 6-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 452.417195][ T5879] usb 6-1: config 1 interface 0 has no altsetting 0 [ 452.463315][ T5879] usb 6-1: New USB device found, idVendor=1477, idProduct=1021, bcdDevice= 0.40 [ 452.493519][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.501827][ T5879] usb 6-1: Product: syz [ 452.526311][ T5879] usb 6-1: Manufacturer: syz [ 452.544195][ T5879] usb 6-1: SerialNumber: syz [ 452.798417][ T5879] usbhid 6-1:1.0: can't add hid device: -71 [ 452.820938][ T5879] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 452.913571][ T5879] usb 6-1: USB disconnect, device number 7 [ 456.418976][ T8840] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 464.550175][ T1202] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 464.871525][ T8907] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 465.760413][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 466.511171][ T1202] usb 5-1: device descriptor read/all, error -71 [ 466.633143][ T5934] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 466.792386][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 466.806893][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.829179][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.860056][ T5934] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 466.889138][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.945921][ T5934] usb 7-1: config 0 descriptor?? [ 466.970664][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 467.173624][ T5934] hkems 0003:2006:0118.000F: bogus close delimiter [ 467.191697][ T5934] hkems 0003:2006:0118.000F: item 0 4 2 10 parsing failed [ 467.216673][ T5934] hkems 0003:2006:0118.000F: parse failed [ 467.242857][ T5934] hkems 0003:2006:0118.000F: probe with driver hkems failed with error -22 [ 467.372532][ T5934] usb 7-1: USB disconnect, device number 2 [ 468.611658][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.618999][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.756033][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.771579][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.812829][ T8914] macvlan0: left promiscuous mode [ 468.817935][ T8914] macvlan0: left allmulticast mode [ 468.848453][ T8914] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.857473][ T8914] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.866941][ T8914] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.877189][ T8914] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.021397][ T8928] hsr0: entered promiscuous mode [ 469.332756][ T8945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.814665][ T1202] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 470.926419][ T2148] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 471.134166][ T2148] usb 4-1: config index 0 descriptor too short (expected 292, got 36) [ 471.160285][ T2148] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 471.193559][ T2148] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 471.237833][ T2148] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 141, changing to 11 [ 471.269192][ T1202] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 471.307306][ T2148] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.347635][ T1202] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 471.352349][ T2148] usb 4-1: config 0 interface 0 has no altsetting 0 [ 471.367939][ T1202] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 471.385446][ T2148] usb 4-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 471.405506][ T1202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.416266][ T2148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.458327][ T2148] usb 4-1: config 0 descriptor?? [ 471.481331][ T8963] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.516451][ T1202] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.078139][ T5835] usb 6-1: USB disconnect, device number 8 [ 472.908125][ T2148] wacom 0003:056A:00B4.0010: unknown main item tag 0x0 [ 472.942499][ T2148] wacom 0003:056A:00B4.0010: unknown main item tag 0x0 [ 472.949566][ T2148] wacom 0003:056A:00B4.0010: unknown main item tag 0x0 [ 473.023072][ T8986] Cannot find map_set index 0 as target [ 473.453136][ T2148] wacom 0003:056A:00B4.0010: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 473.568579][ T2148] wacom 0003:056A:00B4.0010: hidraw0: USB HID v0.00 Device [HID 056a:00b4] on usb-dummy_hcd.3-1/input0 [ 473.594273][ T2148] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B4.0010/input/input30 [ 475.225924][ T2148] usb 4-1: USB disconnect, device number 35 [ 475.754702][ T9003] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 476.494337][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 476.646220][ T5835] IPVS: starting estimator thread 0... [ 476.832540][ T9006] IPVS: using max 17 ests per chain, 40800 per kthread [ 476.896635][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 478.938046][ T5879] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 479.163709][ T9022] sysfs: cannot create duplicate filename '/class/ieee80211/!寿' [ 479.173000][ T9022] CPU: 1 UID: 0 PID: 9022 Comm: syz.2.765 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 479.183662][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 479.193773][ T9022] Call Trace: [ 479.197097][ T9022] [ 479.200057][ T9022] dump_stack_lvl+0x241/0x360 [ 479.204801][ T9022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.210068][ T9022] ? __pfx__printk+0x10/0x10 [ 479.214728][ T9022] ? __kmalloc_cache_noprof+0x243/0x390 [ 479.220327][ T9022] ? sysfs_warn_dup+0x51/0xa0 [ 479.225079][ T9022] sysfs_warn_dup+0x8e/0xa0 [ 479.229639][ T9022] sysfs_do_create_link_sd+0xbe/0x110 [ 479.235068][ T9022] device_add_class_symlinks+0x1c5/0x250 [ 479.240761][ T9022] device_add+0x553/0xbf0 [ 479.245159][ T9022] wiphy_register+0x1a58/0x27b0 [ 479.250085][ T9022] ? __pfx_wiphy_register+0x10/0x10 [ 479.255340][ T9022] ? minstrel_ht_alloc+0x72b/0x860 [ 479.260522][ T9022] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 479.266671][ T9022] ieee80211_register_hw+0x30fb/0x3e10 [ 479.272186][ T9022] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 479.278599][ T9022] ? ieee80211_register_hw+0x1521/0x3e10 [ 479.284314][ T9022] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 479.290194][ T9022] ? __asan_memset+0x23/0x50 [ 479.294862][ T9022] ? __hrtimer_init+0x170/0x250 [ 479.299785][ T9022] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 479.305610][ T9022] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 479.311745][ T9022] ? kstrndup+0x5c/0xb0 [ 479.315966][ T9022] ? __asan_memcpy+0x40/0x70 [ 479.320627][ T9022] hwsim_new_radio_nl+0xece/0x2290 [ 479.325817][ T9022] ? __pfx___nla_validate_parse+0x10/0x10 [ 479.331595][ T9022] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 479.337227][ T9022] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 479.343624][ T9022] genl_rcv_msg+0xb14/0xec0 [ 479.348203][ T9022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.353330][ T9022] ? __pfx_lock_acquire+0x10/0x10 [ 479.358415][ T9022] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 479.364022][ T9022] ? __pfx___might_resched+0x10/0x10 [ 479.369374][ T9022] netlink_rcv_skb+0x1e3/0x430 [ 479.374185][ T9022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.379306][ T9022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.384700][ T9022] genl_rcv+0x28/0x40 [ 479.388740][ T9022] netlink_unicast+0x7f6/0x990 [ 479.393583][ T9022] ? __pfx_netlink_unicast+0x10/0x10 [ 479.398938][ T9022] ? __virt_addr_valid+0x45f/0x530 [ 479.404121][ T9022] ? __phys_addr_symbol+0x2f/0x70 [ 479.409200][ T9022] ? __check_object_size+0x47a/0x730 [ 479.414567][ T9022] netlink_sendmsg+0x8e4/0xcb0 [ 479.419408][ T9022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.424773][ T9022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.430117][ T9022] __sock_sendmsg+0x221/0x270 [ 479.434864][ T9022] ____sys_sendmsg+0x52a/0x7e0 [ 479.439703][ T9022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.445051][ T9022] ? __fget_files+0x2a/0x410 [ 479.449699][ T9022] ? __fget_files+0x2a/0x410 [ 479.454354][ T9022] __sys_sendmsg+0x269/0x350 [ 479.459003][ T9022] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.464213][ T9022] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.470608][ T9022] ? do_syscall_64+0x100/0x230 [ 479.475438][ T9022] ? do_syscall_64+0xb6/0x230 [ 479.480177][ T9022] do_syscall_64+0xf3/0x230 [ 479.484752][ T9022] ? clear_bhb_loop+0x35/0x90 [ 479.489503][ T9022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.495468][ T9022] RIP: 0033:0x7f7790385d19 [ 479.499939][ T9022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.519602][ T9022] RSP: 002b:00007f77911ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.528076][ T9022] RAX: ffffffffffffffda RBX: 00007f7790575fa0 RCX: 00007f7790385d19 [ 479.536087][ T9022] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000c [ 479.544097][ T9022] RBP: 00007f7790401a20 R08: 0000000000000000 R09: 0000000000000000 [ 479.552097][ T9022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.560099][ T9022] R13: 0000000000000000 R14: 00007f7790575fa0 R15: 00007ffdc9f511b8 [ 479.568117][ T9022] [ 480.192504][ T5879] usb 6-1: device descriptor read/64, error -71 [ 480.872285][ T5879] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 481.517434][ T9035] binder: 9033:9035 ioctl c0306201 0 returned -14 [ 481.525789][ T9035] binder: BINDER_SET_CONTEXT_MGR already set [ 481.531819][ T9035] binder: 9033:9035 ioctl 4018620d 20000040 returned -16 [ 482.237171][ T5879] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.248544][ T5879] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 482.260444][ T5879] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 482.269769][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.290005][ T9032] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 482.305479][ T5879] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.393131][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 482.406327][ T9053] 9pnet_fd: Insufficient options for proto=fd [ 482.455113][ T9052] input: syz0 as /devices/virtual/input/input33 [ 482.527215][ T5879] usb 6-1: USB disconnect, device number 10 [ 486.039877][ T9082] binder: BINDER_SET_CONTEXT_MGR already set [ 486.046129][ T9082] binder: 9081:9082 ioctl 4018620d 200001c0 returned -16 [ 488.212745][ T1202] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 488.220609][ T5934] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 488.729505][ T9094] binder: 9093:9094 ioctl c0306201 0 returned -14 [ 488.812955][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 488.820084][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 488.830162][ T5934] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.841628][ T5934] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 488.854513][ T1202] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 488.863924][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.209394][ T5934] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.222267][ T1202] usb 3-1: Product: syz [ 489.389393][ T1202] usb 3-1: Manufacturer: syz [ 489.423633][ T1202] usb 3-1: SerialNumber: syz [ 489.428321][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.444105][ T1202] usb 3-1: config 0 descriptor?? [ 489.461048][ T9113] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 489.463170][ T1202] hub 3-1:0.0: bad descriptor, ignoring hub [ 489.475496][ T1202] hub 3-1:0.0: probe with driver hub failed with error -5 [ 489.486968][ T1202] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 489.501218][ T5934] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.918553][ T1202] IPVS: starting estimator thread 0... [ 490.698297][ T5879] usb 7-1: USB disconnect, device number 3 [ 491.131888][ T9129] IPVS: using max 17 ests per chain, 40800 per kthread [ 491.475949][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 491.492344][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 491.859677][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 491.979568][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 492.792708][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 492.799096][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 492.848590][ T9141] ceph: No mds server is up or the cluster is laggy [ 497.610408][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.808'. [ 497.702275][ T5879] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 497.715107][ T9195] vivid-002: disconnect [ 497.864234][ T5879] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 498.010255][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.063279][ T1202] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 498.108418][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.262592][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 498.288686][ T5879] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 498.297999][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.329109][ T5879] usb 6-1: config 0 descriptor?? [ 498.793789][ T1202] usb 4-1: Using ep0 maxpacket: 16 [ 498.873011][ T1202] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 498.881344][ T1202] usb 4-1: config 0 has no interface number 0 [ 498.890028][ T1202] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.901371][ T1202] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.911455][ T1202] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 498.920778][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.970798][ T1202] usb 4-1: config 0 descriptor?? [ 499.089403][ T5879] uclogic 0003:28BD:0055.0011: interface is invalid, ignoring [ 499.533325][ T1202] uclogic 0003:28BD:0934.0012: interface is invalid, ignoring [ 499.728399][ T9234] binder: BINDER_SET_CONTEXT_MGR already set [ 499.734630][ T9234] binder: 9232:9234 ioctl 4018620d 20000040 returned -16 [ 499.775923][ T5934] usb 4-1: USB disconnect, device number 36 [ 499.797631][ T5925] usb 6-1: USB disconnect, device number 11 [ 499.808304][ T9194] vivid-002: reconnect [ 499.877529][ T1202] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 499.940899][ T1202] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 499.962334][ T5835] usb 3-1: USB disconnect, device number 25 [ 501.803000][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.809407][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.212199][ T9266] netlink: 'syz.6.824': attribute type 10 has an invalid length. [ 503.290133][ T9266] macvlan0: entered promiscuous mode [ 503.357883][ T9266] macvlan0: entered allmulticast mode [ 503.522412][ T5835] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 503.701143][ T5835] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.717647][ T5835] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.729873][ T9266] veth1_vlan: entered allmulticast mode [ 503.732306][ T5835] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.750059][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.767998][ T9268] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 503.790843][ T5835] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.793623][ T9266] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 505.580007][ T5835] usb 5-1: USB disconnect, device number 24 [ 506.214363][ T6159] udevd[6159]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.787172][ T9305] netlink: 308 bytes leftover after parsing attributes in process `syz.3.830'. [ 511.302294][ T5934] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 511.622320][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 511.816856][ T9343] trusted_key: encrypted_key: insufficient parameters specified [ 512.083428][ T5879] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 512.108098][ T9350] netlink: 'syz.6.838': attribute type 10 has an invalid length. [ 512.121355][ T9350] veth1_vlan: left allmulticast mode [ 512.134501][ T5879] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 512.135372][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.163276][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 512.244497][ T5934] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=d3.dd [ 512.253842][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.261890][ T5934] usb 5-1: Product: syz [ 512.266479][ T5934] usb 5-1: Manufacturer: syz [ 512.271154][ T5934] usb 5-1: SerialNumber: syz [ 512.294258][ T5934] usb 5-1: config 0 descriptor?? [ 512.315305][ T5934] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 512.324630][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 512.351081][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.392760][ T5934] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 512.402226][ T5934] usb 5-1: media controller created [ 512.421346][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.542337][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 512.664089][ T5934] DVB: Unable to find symbol mt352_attach() [ 512.671050][ T5934] dvb-usb: bulk message failed: -22 (5/0) [ 512.702523][ T5934] zl10353_read_register: readreg error (reg=127, ret==-121) [ 512.725872][ T5934] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 513.543597][ T5879] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 514.125551][ T5934] rc_core: IR keymap rc-dvico-mce not found [ 514.131751][ T5934] Registered IR keymap rc-empty [ 514.138522][ T5934] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 514.150574][ T5934] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input35 [ 514.433012][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 514.550100][ T5879] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 514.652903][ T5879] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 515.111337][ T5879] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.126196][ T5934] dvb-usb: schedule remote query interval to 100 msecs. [ 515.150627][ T5934] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 515.599394][ T5934] usb 5-1: USB disconnect, device number 25 [ 515.852254][ T1202] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 515.880328][ T5879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 515.942342][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.025993][ T5879] usb 3-1: Product: syz [ 516.076010][ T5879] usb 3-1: Manufacturer: syz [ 516.168515][ T5879] usb 3-1: SerialNumber: syz [ 516.185946][ T9397] 9pnet_fd: Insufficient options for proto=fd [ 516.227710][ T1202] usb 4-1: device descriptor read/all, error -71 [ 516.254283][ T5934] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 516.410968][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 516.853463][ T5879] usb 3-1: can't set config #1, error -71 [ 517.226401][ T9409] hfs: unable to load iocharset "io#harset" [ 517.788626][ T5879] usb 3-1: USB disconnect, device number 26 [ 517.985339][ T9413] binder: 9408:9413 ioctl 4018620d 0 returned -22 [ 518.184673][ T9428] netlink: 'syz.6.851': attribute type 10 has an invalid length. [ 518.516966][ T9440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 520.064273][ T9462] MTD: Couldn't look up './file0': -15 [ 520.069843][ T9462] ./file0: Can't lookup blockdev [ 520.746854][ T9453] trusted_key: encrypted_key: insufficient parameters specified [ 520.923476][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.863'. [ 521.129660][ T9482] trusted_key: encrypted_key: insufficient parameters specified [ 521.768692][ T5879] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 523.013697][ T5879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.092581][ T5879] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 523.101700][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.173491][ T5879] usb 7-1: config 0 descriptor?? [ 523.185010][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 523.613884][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 523.622412][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 523.897848][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.065930][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.109513][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 524.434790][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 524.444466][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'. [ 525.175660][ T5879] pwc: recv_control_msg error -71 req 04 val 1400 [ 525.202746][ T5879] pwc: recv_control_msg error -71 req 02 val 2000 [ 525.210146][ T5879] pwc: recv_control_msg error -71 req 02 val 2100 [ 525.227726][ T5879] pwc: recv_control_msg error -71 req 04 val 1500 [ 525.247352][ T5879] pwc: recv_control_msg error -71 req 02 val 2500 [ 525.281050][ T5879] pwc: recv_control_msg error -71 req 02 val 2400 [ 525.324396][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 525.397293][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 525.486653][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 525.501950][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 525.509734][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 525.653865][ T9550] ip6t_srh: unknown srh invflags 7D00 [ 526.494604][ T5879] pwc: Registered as video103. [ 526.500774][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input36 [ 527.067533][ T5879] usb 7-1: USB disconnect, device number 4 [ 528.352382][ T25] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 528.509271][ T9573] autofs: Unknown parameter 'gžÙ½R "yŸ¶ÿ…úkuE#í¼' [ 528.606836][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 528.618224][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 528.658411][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.699558][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 528.766946][ T25] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 528.776607][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.804391][ T25] usb 4-1: config 0 descriptor?? [ 529.016976][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.892'. [ 529.580635][ T25] uclogic 0003:28BD:0055.0015: interface is invalid, ignoring [ 529.737917][ T5877] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 530.845809][ T9620] Falling back ldisc for ptm0. [ 530.992724][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 531.003067][ T5877] usb 5-1: config 0 has an invalid interface number: 252 but max is 0 [ 531.011672][ T5877] usb 5-1: config 0 has no interface number 0 [ 531.036742][ T5877] usb 5-1: config 0 interface 252 has no altsetting 0 [ 531.046455][ T5934] usb 4-1: USB disconnect, device number 39 [ 531.098709][ T5877] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8 [ 531.144043][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.178595][ T5877] usb 5-1: Product: syz [ 531.202579][ T5877] usb 5-1: Manufacturer: syz [ 531.207961][ T5877] usb 5-1: SerialNumber: syz [ 531.239182][ T5877] usb 5-1: config 0 descriptor?? [ 531.264467][ T5877] pcwd_usb: This driver only supports 1 device [ 531.615303][ T9633] trusted_key: encrypted_key: insufficient parameters specified [ 532.489289][ T5878] usb 5-1: USB disconnect, device number 26 [ 532.775159][ T9637] syz.6.898: attempt to access beyond end of device [ 532.775159][ T9637] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 533.363129][ T9638] hfs: unable to load iocharset "io#harset" [ 537.072904][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.905'. [ 538.221813][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 538.235771][ T9685] netlink: 'syz.3.909': attribute type 9 has an invalid length. [ 539.873877][ T25] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 541.992384][ T5835] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 542.176222][ T25] usb 7-1: device not accepting address 5, error -71 [ 542.190775][ T9716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.917'. [ 542.271068][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.284461][ T5835] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 542.552400][ T5879] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 543.124295][ T5835] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 543.146123][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.188418][ T5835] usb 4-1: Product: syz [ 543.198033][ T5835] usb 4-1: Manufacturer: syz [ 543.216161][ T5835] usb 4-1: SerialNumber: syz [ 543.243611][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 543.252648][ T5835] usb 4-1: config 0 descriptor?? [ 543.295447][ T5879] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 543.311212][ T5879] usb 3-1: config 0 has no interface number 0 [ 543.319197][ T5879] usb 3-1: config 0 interface 252 has no altsetting 0 [ 543.339538][ T5879] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8 [ 543.394654][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.432301][ T5879] usb 3-1: Product: syz [ 543.446887][ T5879] usb 3-1: Manufacturer: syz [ 543.457154][ T5879] usb 3-1: SerialNumber: syz [ 543.526349][ T5879] usb 3-1: config 0 descriptor?? [ 543.556943][ T5879] pcwd_usb: This driver only supports 1 device [ 543.691753][ T9737] 0000: renamed from bridge_slave_0 (while UP) [ 543.718555][ T9737] bridge0: port 1(0000) entered disabled state [ 545.043403][ T5836] Bluetooth: hci1: link tx timeout [ 545.056126][ T5836] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 545.529496][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.922'. [ 545.595923][ T5877] usb 3-1: USB disconnect, device number 27 [ 545.634516][ T9752] trusted_key: encrypted_key: insufficient parameters specified [ 545.774874][ T5879] usb 4-1: USB disconnect, device number 40 [ 547.102081][ T29] audit: type=1326 audit(1734417619.545:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5c185d19 code=0x7ffc0000 [ 547.169244][ T29] audit: type=1326 audit(1734417619.585:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9800 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5c185d19 code=0x7ffc0000 [ 547.262238][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 547.346909][ T29] audit: type=1326 audit(1734417619.795:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9815 comm="syz.5.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 547.452589][ T29] audit: type=1326 audit(1734417619.795:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9815 comm="syz.5.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 547.487786][ T29] audit: type=1326 audit(1734417619.795:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9815 comm="syz.5.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 547.639845][ T29] audit: type=1326 audit(1734417619.835:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9815 comm="syz.5.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 547.782055][ T29] audit: type=1326 audit(1734417619.835:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9815 comm="syz.5.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc385d19 code=0x7ffc0000 [ 549.572751][ T5879] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 549.733935][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 549.754367][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.784184][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.794485][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.808772][ T5879] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 549.835652][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.874982][ T5879] usb 3-1: config 0 descriptor?? [ 550.327076][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.347973][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.355656][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.366521][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.374159][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.381968][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.389472][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.396864][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.404469][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.411741][ T5879] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 550.422347][ T5879] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 550.432722][ T5879] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 550.448280][ T5879] microsoft 0003:045E:07DA.0016: no inputs found [ 550.456318][ T5879] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 550.504027][ T5877] usb 3-1: USB disconnect, device number 28 [ 551.152683][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 551.154354][ T9906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.314053][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.327435][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.359700][ T25] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.402284][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.429195][ T9921] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.973'. [ 551.431219][ T25] usb 6-1: SerialNumber: syz [ 551.919324][ T9937] team_slave_0: entered promiscuous mode [ 551.925607][ T9937] team_slave_1: entered promiscuous mode [ 551.938028][ T9937] macvtap1: entered promiscuous mode [ 551.943532][ T9937] team0: entered promiscuous mode [ 551.973638][ T9937] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 551.992670][ T9937] team0: Device macvtap1 is already an upper device of the team interface [ 552.030551][ T9937] team0: left promiscuous mode [ 552.051398][ T9937] team_slave_0: left promiscuous mode [ 552.057034][ T9937] team_slave_1: left promiscuous mode [ 552.514797][ T25] usb 6-1: 0:2 : does not exist [ 552.572824][ T25] usb 6-1: USB disconnect, device number 12 [ 552.946006][ T6161] udevd[6161]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.293204][ T5836] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 553.524912][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.997'. [ 554.098092][ T29] audit: type=1326 audit(1734417626.545:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10023 comm="syz.6.1006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c5c185d19 code=0x0 [ 556.982253][ T25] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 557.062300][ T5879] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 557.168224][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 557.184951][ T25] usb 4-1: config 0 has an invalid interface number: 174 but max is 0 [ 557.222491][ T25] usb 4-1: config 0 has no interface number 0 [ 557.238766][ T25] usb 4-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=ee.4a [ 557.252309][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 557.261463][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.287762][ T25] usb 4-1: Product: syz [ 557.293875][ T5879] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 557.312058][ T25] usb 4-1: Manufacturer: syz [ 557.318243][ T5879] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 557.338788][ T25] usb 4-1: SerialNumber: syz [ 557.344610][ T5836] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 557.355887][ T5836] Bluetooth: hci4: Injecting HCI hardware error event [ 557.365806][ T5836] Bluetooth: hci4: hardware error 0x00 [ 557.396826][ T25] usb 4-1: config 0 descriptor?? [ 557.401829][ T5879] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 557.428453][ T25] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 557.437726][ T5879] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.460388][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 557.470315][ T5879] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.479794][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.488298][ T25] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 557.507717][ T25] usb 4-1: media controller created [ 557.557439][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.606393][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 557.652579][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 557.658496][ T25] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 557.739415][ T5879] usb 7-1: usb_control_msg returned -32 [ 557.762581][ T5879] usbtmc 7-1:16.0: can't read capabilities [ 558.002472][ T25] rc_core: IR keymap rc-avermedia-m135a not found [ 558.022265][ T25] Registered IR keymap rc-empty [ 558.033291][ T25] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 558.052413][ T5878] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 558.085090][ T25] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input39 [ 558.137149][T10151] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 558.142975][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 558.151709][ T25] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 558.167190][ T1202] usb 7-1: USB disconnect, device number 7 [ 558.194558][ T25] usb 4-1: USB disconnect, device number 41 [ 558.227982][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 558.252446][ T5878] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 558.271808][ T5878] usb 5-1: config 179 has no interface number 0 [ 558.311978][ T5878] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 558.349649][ T5878] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 558.389961][ T5878] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 558.414133][ T5878] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 558.429073][ T5878] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 558.463973][ T5878] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 558.522843][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.575010][T10145] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 558.707678][ T5134] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 558.774900][ T25] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 558.827809][ T5878] usb 5-1: USB disconnect, device number 27 [ 558.833840][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 558.833875][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 559.332938][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.340517][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.349528][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.384554][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.406472][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.428418][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.472385][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.479864][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.502354][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 559.512647][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.520119][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.539732][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.548368][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.555970][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.563499][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.570972][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.578509][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.586130][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.593662][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.601097][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.602345][ T5925] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 559.608797][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.623695][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.631133][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.638688][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.646214][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.653742][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.661185][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.669025][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.678928][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.686712][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.694596][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.702563][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.710580][ T5878] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 559.742587][ T5878] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 559.812886][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 559.841659][ T5925] usb 3-1: config 0 has no interfaces? [ 559.851702][ T5925] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 559.864659][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.930701][ T5925] usb 3-1: config 0 descriptor?? [ 559.936322][T10204] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.1051'. [ 559.946107][T10204] openvswitch: netlink: Missing key (keys=40, expected=100) [ 560.012828][ T25] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 560.021949][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.072193][ T25] usb 7-1: Product: syz [ 560.076444][ T25] usb 7-1: Manufacturer: syz [ 560.081093][ T25] usb 7-1: SerialNumber: syz [ 560.123296][ T25] usb 7-1: config 0 descriptor?? [ 560.379542][ T5878] usb 7-1: USB disconnect, device number 8 [ 561.249068][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 561.537143][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 561.554555][ T25] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.574713][ T25] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.579713][ T5877] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 561.584741][ T25] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 561.605643][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 561.636697][ T25] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 561.668993][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.692684][ T25] usb 5-1: config 0 descriptor?? [ 561.722375][ T5878] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 561.767635][ T5877] usb 6-1: config 0 has no interfaces? [ 561.777631][ T5877] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 561.805287][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.830295][ T5877] usb 6-1: Product: syz [ 561.839457][ T5877] usb 6-1: Manufacturer: syz [ 561.850826][ T5877] usb 6-1: SerialNumber: syz [ 561.861895][ T5877] usb 6-1: config 0 descriptor?? [ 561.882273][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 561.892529][ T5925] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 561.916747][ T5878] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 149 [ 561.950593][ T5878] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 561.973950][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.998023][ T5878] usb 4-1: Product: syz [ 562.005631][ T5878] usb 4-1: Manufacturer: syz [ 562.010302][ T5878] usb 4-1: SerialNumber: syz [ 562.034485][T10257] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 562.072476][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 562.111566][ T5925] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 562.122051][ T5925] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 562.168319][ T25] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0018/input/input40 [ 562.180060][ T5925] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 562.198662][ T5925] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 562.225589][ T5925] usb 7-1: config 0 interface 0 has no altsetting 0 [ 562.246567][ T5925] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 562.270793][ T5925] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 562.271796][ T5878] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 562.297353][ T5925] usb 7-1: Product: syz [ 562.310617][ T5925] usb 7-1: Manufacturer: syz [ 562.318567][ T5925] usb 7-1: SerialNumber: syz [ 562.354582][ T5925] usb 7-1: config 0 descriptor?? [ 562.388757][ T25] kye 0003:0458:5010.0018: input,hiddev1,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 562.390948][ T5878] usb 3-1: USB disconnect, device number 29 [ 562.408299][ T5925] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 562.435655][ T5925] ldusb 7-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 562.464090][ T25] usb 5-1: USB disconnect, device number 28 [ 562.476379][ T5877] usb 4-1: USB disconnect, device number 42 [ 562.485205][ T5877] usblp0: removed [ 562.584100][ T5934] usb 7-1: USB disconnect, device number 9 [ 562.593490][ T5934] ldusb 7-1:0.0: LD USB Device #2 now disconnected [ 563.190073][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.200689][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.372266][ T5934] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 564.014490][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.025921][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.057828][ T5934] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 564.077416][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.097117][ T5934] usb 3-1: config 0 descriptor?? [ 564.545853][ T5934] petalynx 0003:18B1:0037.0019: invalid report_size 61258 [ 564.578704][ T5934] petalynx 0003:18B1:0037.0019: item 0 2 1 7 parsing failed [ 564.587846][ T5934] petalynx 0003:18B1:0037.0019: parse failed [ 564.633454][ T5934] petalynx 0003:18B1:0037.0019: probe with driver petalynx failed with error -22 [ 564.796715][ T5934] usb 3-1: USB disconnect, device number 30 [ 564.921013][ T5925] usb 6-1: USB disconnect, device number 13 [ 565.574321][ T5925] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 565.742290][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 565.919928][ T5925] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 565.939599][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.954796][ T5925] usb 7-1: Product: syz [ 565.970017][ T5925] usb 7-1: Manufacturer: syz [ 566.005073][ T5925] usb 7-1: SerialNumber: syz [ 566.046399][ T5925] r8152-cfgselector 7-1: Unknown version 0x0000 [ 566.062775][ T5925] r8152-cfgselector 7-1: config 0 descriptor?? [ 566.205482][T10356] kvm: kvm [10355]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x34500000080 [ 566.229774][T10356] kvm: kvm [10355]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x34600000000 [ 566.304180][T10356] kvm: kvm [10355]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x47e00000080 [ 566.360752][T10356] kvm: kvm [10355]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x64e00000000 [ 566.411702][T10356] kvm: kvm [10355]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x64f00000080 [ 566.464011][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 566.498514][ T5835] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 566.632461][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 566.639356][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 149 [ 566.654188][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 566.676714][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.698430][ T25] usb 3-1: Product: syz [ 566.703237][ T25] usb 3-1: Manufacturer: syz [ 566.707995][ T25] usb 3-1: SerialNumber: syz [ 566.721805][T10369] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 566.947667][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 566.997253][ T5878] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 567.155000][ T5878] usb 6-1: config 0 has an invalid interface number: 171 but max is 0 [ 567.161864][ T25] usb 3-1: USB disconnect, device number 31 [ 567.180025][ T5878] usb 6-1: config 0 has no interface number 0 [ 567.190127][ T25] usblp0: removed [ 567.190266][ T5878] usb 6-1: config 0 interface 171 has no altsetting 0 [ 567.254050][ T5878] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 567.273704][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.275610][ T5836] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 567.281823][ T5878] usb 6-1: Product: syz [ 567.281846][ T5878] usb 6-1: Manufacturer: syz [ 567.281865][ T5878] usb 6-1: SerialNumber: syz [ 567.284299][ T5878] usb 6-1: config 0 descriptor?? [ 567.321497][ T5878] usb-storage 6-1:0.171: USB Mass Storage device detected [ 567.644364][ T5878] usb 6-1: USB disconnect, device number 14 [ 567.872278][ T5934] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 568.024411][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.039627][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.049724][ T1202] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 568.077510][ T5934] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 568.094085][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.105756][ T5934] usb 7-1: config 0 descriptor?? [ 568.232357][ T1202] usb 5-1: Using ep0 maxpacket: 16 [ 568.241380][ T1202] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.262365][ T1202] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 568.292425][ T1202] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 568.342187][ T1202] usb 5-1: config 0 interface 0 has no altsetting 0 [ 568.350089][ T1202] usb 5-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 568.392666][ T1202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.420057][ T1202] usb 5-1: config 0 descriptor?? [ 568.529936][ T5934] uclogic 0003:5543:0522.001A: item fetching failed at offset 2/5 [ 568.538767][ T5934] uclogic 0003:5543:0522.001A: parse failed [ 568.563797][ T5934] uclogic 0003:5543:0522.001A: probe with driver uclogic failed with error -22 [ 568.729579][ T5934] usb 7-1: USB disconnect, device number 11 [ 569.092445][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 569.093995][ T1202] usbhid 5-1:0.0: can't add hid device: -71 [ 569.142730][ T1202] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 569.190184][ T1202] usb 5-1: USB disconnect, device number 29 [ 569.257527][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 569.279125][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 149 [ 569.304729][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 569.316438][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.342777][ T25] usb 3-1: Product: syz [ 569.371433][ T25] usb 3-1: Manufacturer: syz [ 569.386987][ T25] usb 3-1: SerialNumber: syz [ 569.425624][T10439] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 569.672795][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 569.864701][ T1202] usb 3-1: USB disconnect, device number 32 [ 569.874503][ T1202] usblp0: removed [ 570.347420][T10465] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1140'. [ 570.383360][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1140'. [ 570.405190][T10465] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1140'. [ 570.414531][T10465] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1140'. [ 570.439895][T10465] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 570.452565][T10465] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 570.461016][T10465] CPU: 1 UID: 0 PID: 10465 Comm: syz.6.1140 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 570.471832][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 570.481939][T10465] RIP: 0010:put_page+0x23/0x260 [ 570.486865][T10465] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 c8 3a 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 4f 18 7e f8 48 8b 1b 48 89 de 48 83 [ 570.506512][T10465] RSP: 0018:ffffc90012a5e990 EFLAGS: 00010202 [ 570.512622][T10465] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000080000 [ 570.520636][T10465] RDX: ffffc90004a29000 RSI: 0000000000003877 RDI: 0000000000003878 [ 570.528642][T10465] RBP: dffffc0000000000 R08: ffffffff8984cbfd R09: 1ffff11004e26a6c [ 570.536648][T10465] R10: dffffc0000000000 R11: ffffed1004e26a6d R12: 0000000000000007 [ 570.544758][T10465] R13: ffff888027135342 R14: 0000000000000000 R15: 0000000000000000 [ 570.552737][T10465] FS: 00007f6c5d0566c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 570.561671][T10465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.568264][T10465] CR2: 0000001b2eb02ff8 CR3: 000000007e2fa000 CR4: 00000000003526f0 [ 570.576244][T10465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.584341][T10465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.592411][T10465] Call Trace: [ 570.595711][T10465] [ 570.598669][T10465] ? __die_body+0x5f/0xb0 [ 570.603032][T10465] ? die_addr+0xb0/0xe0 [ 570.607224][T10465] ? exc_general_protection+0x3dd/0x5d0 [ 570.612801][T10465] ? asm_exc_general_protection+0x26/0x30 [ 570.618538][T10465] ? skb_release_data+0x46d/0x8a0 [ 570.623576][T10465] ? put_page+0x23/0x260 [ 570.627828][T10465] skb_release_data+0x483/0x8a0 [ 570.632694][T10465] __kfree_skb+0x55/0x70 [ 570.636950][T10465] tcp_ack+0x2442/0x6bc0 [ 570.641215][T10465] ? __pfx_tcp_ack+0x10/0x10 [ 570.645844][T10465] tcp_rcv_state_process+0x8eb/0x44e0 [ 570.651227][T10465] ? mark_lock+0x9a/0x360 [ 570.655564][T10465] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 570.661549][T10465] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 570.667890][T10465] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 570.673709][T10465] ? __local_bh_enable_ip+0x168/0x200 [ 570.679096][T10465] ? lockdep_hardirqs_on+0x99/0x150 [ 570.684320][T10465] ? __local_bh_enable_ip+0x168/0x200 [ 570.689709][T10465] ? __release_sock+0x9a/0x350 [ 570.694490][T10465] tcp_v4_do_rcv+0x77d/0xc70 [ 570.699095][T10465] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 570.704224][T10465] __release_sock+0x214/0x350 [ 570.708913][T10465] ? __tcp_close+0x4d7/0xde0 [ 570.713511][T10465] __tcp_close+0x4fe/0xde0 [ 570.717939][T10465] __mptcp_close_ssk+0x424/0x1080 [ 570.722970][T10465] ? do_raw_spin_unlock+0x13c/0x8b0 [ 570.728184][T10465] ? __pfx___mptcp_close_ssk+0x10/0x10 [ 570.733663][T10465] ? mptcp_close_ssk+0x179/0x250 [ 570.738609][T10465] mptcp_pm_nl_rm_addr_or_subflow+0x501/0xc00 [ 570.744690][T10465] ? __pfx_mptcp_pm_nl_rm_addr_or_subflow+0x10/0x10 [ 570.751286][T10465] ? mptcp_pm_nl_flush_addrs_doit+0x8f5/0xdd0 [ 570.757391][T10465] ? mptcp_pm_remove_addr+0xa7/0x1d0 [ 570.762711][T10465] mptcp_pm_nl_flush_addrs_doit+0x9ca/0xdd0 [ 570.768640][T10465] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 570.775083][T10465] ? __nla_parse+0x40/0x60 [ 570.779519][T10465] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 570.785869][T10465] genl_rcv_msg+0xb14/0xec0 [ 570.790425][T10465] ? __pfx_genl_rcv_msg+0x10/0x10 [ 570.795519][T10465] ? __pfx_lock_acquire+0x10/0x10 [ 570.800554][T10465] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 570.806988][T10465] ? __pfx___might_resched+0x10/0x10 [ 570.812294][T10465] netlink_rcv_skb+0x1e3/0x430 [ 570.817067][T10465] ? __pfx_genl_rcv_msg+0x10/0x10 [ 570.822113][T10465] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.827409][T10465] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 570.832887][T10465] genl_rcv+0x28/0x40 [ 570.836881][T10465] netlink_unicast+0x7f6/0x990 [ 570.841662][T10465] ? __pfx_netlink_unicast+0x10/0x10 [ 570.846961][T10465] ? __virt_addr_valid+0x45f/0x530 [ 570.852080][T10465] ? __phys_addr_symbol+0x2f/0x70 [ 570.857118][T10465] ? __check_object_size+0x47a/0x730 [ 570.862421][T10465] netlink_sendmsg+0x8e4/0xcb0 [ 570.867203][T10465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.872501][T10465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.877794][T10465] __sock_sendmsg+0x221/0x270 [ 570.882488][T10465] ____sys_sendmsg+0x52a/0x7e0 [ 570.887261][T10465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.892553][T10465] ? __fget_files+0x2a/0x410 [ 570.897151][T10465] ? __fget_files+0x2a/0x410 [ 570.901838][T10465] __sys_sendmsg+0x269/0x350 [ 570.906464][T10465] ? __pfx_futex_wake+0x10/0x10 [ 570.911340][T10465] ? __pfx___sys_sendmsg+0x10/0x10 [ 570.916472][T10465] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 570.922804][T10465] ? do_syscall_64+0x100/0x230 [ 570.927585][T10465] ? do_syscall_64+0xb6/0x230 [ 570.932277][T10465] do_syscall_64+0xf3/0x230 [ 570.936796][T10465] ? clear_bhb_loop+0x35/0x90 [ 570.941475][T10465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.947401][T10465] RIP: 0033:0x7f6c5c185d19 [ 570.951827][T10465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.971440][T10465] RSP: 002b:00007f6c5d056038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.979862][T10465] RAX: ffffffffffffffda RBX: 00007f6c5c375fa0 RCX: 00007f6c5c185d19 [ 570.987839][T10465] RDX: 0000000000000800 RSI: 0000000020000200 RDI: 0000000000000008 [ 570.995817][T10465] RBP: 00007f6c5c201a20 R08: 0000000000000000 R09: 0000000000000000 [ 571.003792][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.011768][T10465] R13: 0000000000000000 R14: 00007f6c5c375fa0 R15: 00007ffd694a07a8 [ 571.019753][T10465] [ 571.022776][T10465] Modules linked in: [ 571.027833][T10465] ---[ end trace 0000000000000000 ]--- [ 571.035814][T10465] RIP: 0010:put_page+0x23/0x260 [ 571.040752][T10465] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 c8 3a 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 4f 18 7e f8 48 8b 1b 48 89 de 48 83 [ 571.064820][T10465] RSP: 0018:ffffc90012a5e990 EFLAGS: 00010202 [ 571.087062][T10465] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000080000 [ 571.111937][T10465] RDX: ffffc90004a29000 RSI: 0000000000003877 RDI: 0000000000003878 [ 571.121908][T10465] RBP: dffffc0000000000 R08: ffffffff8984cbfd R09: 1ffff11004e26a6c [ 571.130543][T10465] R10: dffffc0000000000 R11: ffffed1004e26a6d R12: 0000000000000007 [ 571.139119][T10465] R13: ffff888027135342 R14: 0000000000000000 R15: 0000000000000000 [ 571.159651][T10465] FS: 00007f6c5d0566c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 571.169476][T10465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.178049][T10465] CR2: 00007f4ddc548178 CR3: 000000007e2fa000 CR4: 00000000003526f0 [ 571.202174][T10465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 571.217297][T10465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 571.225914][T10465] Kernel panic - not syncing: Fatal exception [ 571.232364][T10465] Kernel Offset: disabled [ 571.236696][T10465] Rebooting in 86400 seconds..