last executing test programs: 9.362868886s ago: executing program 0 (id=4159): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007665746830"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="142100001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000049c0), 0x0, 0x8000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000004a00)={0x6, "beb33090dd90d52d9199230e0cf0e74c9caa371b7b67ef9fd98e3cea4a3d7d6a4053c29dc6a61c4d74282df4d3e68da978e5e9e12e3016d2b5508891de835f62", {0xffffffffffffffff, 0xffffffff}}) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r4, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x2, 0x1, 0x81, 0x1, 0x8a, 0x8, &(0x7f0000000200)="09a29da0a0f1541dea54d8b883f326fc4d872749f98fea42c0bbc18bcd03adb3f5b917ccf6a2708d17c0796b856f7e797593b631dac394d79ec43028c8f1baebe60fde97a1c7ff08fc9c76119539ab49abaf4b30fcdf838ccadaa35930fc4a1cccf0b40c9ec2190ce9a082e3fbd0d9e06bd0bd6fbfc1f0544b5027afa499e4bdb8f2d753324987bc3800"}) syz_emit_ethernet(0xaa, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x74, 0x6, 0x0, @local, @local, {[@routing={0xfd, 0x8, 0x1, 0xf, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0xf, 0x4, "74c01ff5133cf07e86788791b760d96ffd4ccaf1"}]}}}}}}}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000007c0)=0x4, 0x4) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) r5 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000140)={0xa, 0x4e21, 0xe3, @remote, 0x3}, 0x1c) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r7}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x3, 0x7, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x68, 0x0, 0x2, 0x4, 0x0, @remote, @multicast1}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r8, 0x2f, 0xb, 0xfe, 0x10001, 0xa, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7, 0x80000000, 0x3}}) read$char_usb(r5, 0x0, 0x0) 8.924442453s ago: executing program 0 (id=4160): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3f000000}, 0x1c) 8.670386902s ago: executing program 0 (id=4161): pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x201820}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x208, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x24}}, 0x400c001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000840), 0x4) sendmmsg$inet6(r4, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002980)={0xa, 0x4e21, 0xec5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002b80)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3b}}}], 0x18}}], 0x2, 0x20044885) r5 = socket$inet(0x2, 0x801, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d001034e90102030109021b0002060000000904"], 0x0) sendto$inet(r5, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e1f, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x15, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b000000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000100)="de19f496ca4908ffcc8049bc7dae9c6a1d", 0x11}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x2c6a, 0x8, 0x12000, 0xeffffffe}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000000c0)={r11, 0x6bb, 0x20}, 0xc) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r13], 0x28}}, 0x0) 7.37024107s ago: executing program 2 (id=4169): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000020000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 7.174335391s ago: executing program 2 (id=4170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 6.983521171s ago: executing program 0 (id=4172): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000280)="86", 0x1) write$dsp(r0, &(0x7f00000002c0)="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", 0xe00) write$dsp(r0, &(0x7f00000012c0)="bf", 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.655693016s ago: executing program 2 (id=4173): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0xc, 0x65, 0x66, 0x0, 0x36, 0x33, 0x33, 0x0, 0xed6e71d9b3563ad9, 0x65, 0x64, 0x37, 0x61, 0x61, 0x31, 0x33]}, 0x0, 0x0, 0xfffffffffffffffc) unshare(0x62040200) r0 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0f8565c, &(0x7f0000000140)={0x0, 0x6, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "7036fafa"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x0, 0x1000003, 0x0, 'queue0\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/247, 0xf7}], 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.910812748s ago: executing program 4 (id=4178): syz_open_dev$vcsa(&(0x7f0000000000), 0x20000000002, 0x121441) syz_io_uring_setup(0x8ba, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "011c4e", 0x1c, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x1, 0x8, 0x3}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6c03) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000000000000400000014000780080011400000000005001500000000000500050000000000050001000700ce4b693a341ef24b36d7cf000009a5f2be0acd04e9e1cdeaf96e4ad633b61bf5a8147d19a683baabcf4c25cbdab721dd53b2bea63e5cfc3045183cfc0c1fe20083c42e023d4d24cbfb6ddacb1987daba9ec1ab6cde210c941bc0de2d93cc2f2c62c0c2aec6eb99d5c7c61c015a81bc410cc0318437169f256b44fe0c55a02092c373c92cada46a40c2990fc4e289d79603e01756958e"], 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed500041000"], 0x11) 5.592963316s ago: executing program 4 (id=4181): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x514, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_fw={{0x7}, {0x4d8, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x350, 0x4, [@m_vlan={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x65, 0x6, "f370dfc26bda3e8bd45216da1aa3964ed3b60b4334447ba4ec948d16c5ea9e784cb150ef66ab93528c18790962548e5c98822116cbfdcf7c3a8c7c2ee29dd2ff997bf0d0f836545bbd9b9302deb518f69dfe39552cca68ac02e9c6dbf11370b01a"}, {0xc}, {0xc}}}, @m_ctinfo={0x140, 0x0, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xa9, 0x6, "8c4274210bf4344eee0ade94d895eb3f5fdc4ec866ec0d5005a60331686a8486fa8e91c85c847181e823fee4afb8a60979707828e026c45a9f6bd9f7ee27bef80232e58cb39f657808a8baeadea90445f236d2258ab3605aad1caf64002deeb4d8a5343c583834755ade8cf160436309025cb38b6c9299c2c1cd0ef13722520a49dd39f5764b7ab61e70dca6442cd72486bed389794867ca6a1ff829148784451724a821e4"}, {0xc}, {0xc}}}, @m_skbedit={0xc0, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8}]}, {0x81, 0x6, "c7edfeac621139196345a6f8a58e296e7b575b7c0378eaffc10c3da07f6334206643a2e68c91a8b4902ecb43b8a7f223c44b62e3db93dda61a92e5954dc28e03fbca5aa97221e43a236c3a9ceec773a2788904f1555a0ad9445498987e4e4c2eec07efb6469fd17acc2abe301331b06a3bd50774f35a7dc2597ab865c0"}, {0xc}, {0xc}}}, @m_skbmod={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "be55bff691533e94de09ed9bad82256009362c9d3574a6b99e33706b0f0231574705a47990aef3802fbf834b6a38694135ceea751b58dbb126083b120c1a2fdc50bdb043e9620b3ed622634d55d1ebdf64b587e4e5ce2f87cd842a014f2429c40521b161d39ecd7569abacb93592b30a623b5a2d1bb484573e87ba3247"}, {0xc}, {0xc}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x124, 0x4, [@m_simple={0x120, 0x0, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x4000000}}, @TCA_DEF_DATA={0x7, 0x3, '9p\x00'}, @TCA_DEF_DATA={0x7, 0x3, '#\xee\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18, 0x2, {0x3}}]}, {0x5e, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a910cbe3d0b34b67c9400d92c4bd68f2a5e196d558cfa1c8440806e82a3b539579ffad"}, {0xc}, {0xc}}}]}]}}]}, 0x514}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.27036795s ago: executing program 4 (id=4183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 5.049319677s ago: executing program 3 (id=4184): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getpriority(0x1, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/97, 0x61) write$char_usb(r1, &(0x7f0000000240)="8b", 0x1) r2 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = dup(r4) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000100)=0x7) r6 = socket$inet(0x2, 0x5, 0x89) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000240)=ANY=[], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r3, @ANYRESDEC=0x0, @ANYRES32=r5, @ANYBLOB="01009632fab6752a81f500"/26], 0x48) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) syz_usb_disconnect(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x20, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x7, 0x0, 0x8}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x20}}, 0x4000000) 5.048728066s ago: executing program 4 (id=4185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00008400000084"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000c80)) fcntl$getown(r2, 0x11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) clock_settime(0x1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x139, 0x17, &(0x7f0000000500)="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", &(0x7f00000003c0)=""/23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1, @ANYBLOB="00030000000700d4ed7cef81e53a410000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xfffffffffffffe5e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='de\x00ug\xc4\xd7\xec\xbdWG\x11+Z\x7f\x8c\xd0\xd4\x90E \x0f\xd6\xf4\xce\xad\xa24\xd6q^\xaak\x97\xafC\xca\xefb\xd47\x87\x86\xd7\x18\xc4\x93`y\x03=\x1bi\"\xc0I\xa9\xcal O\xe0S\x826\xa6\x96z\xfb\xdf\xcc\xce\xd1c\xca\n\x0e>\xd3^\xb1\xe09\xa1\x1d\xb6', &(0x7f0000000480)='nobloYc\xf0uR\xeat\x10\xd3\xc2\x0e\xf0\x85\xa6?T\xd6^ {\xf5', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYRESOCT=r4, @ANYRES8, @ANYRES16=r3], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.790387458s ago: executing program 0 (id=4186): socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="444100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e53fdce600000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 3.580816697s ago: executing program 1 (id=4187): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000580)={&(0x7f0000000040)=@l2={0x1f, 0x3, @any, 0x7, 0x2}, 0x80, 0x0}, 0x80c4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000540)=ANY=[], 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xc6, &(0x7f0000000440)="b9424705397f0019c136bce374205285c2466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4cf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9ea707a573da8dd49c0c6d33f0a3898c315943f48ff06761880b65a000000000000ac3b4c48afcd22cb4f15e3933a21056cf7b4a6829cddcf76b863c801b1892c543d2c5350c5cc3ca41680129173413ea7dfdfc3a6bc4379d02b2a15b26a4a08e4") 3.104279325s ago: executing program 2 (id=4188): r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3791, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x200000, 0x0, 0x3, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='mm_page_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0xff0f}], 0x1, 0x0, 0x0, 0x500}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r8, &(0x7f0000002840), 0x0, 0x7ffeece0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r9}, 0x10) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r10, r1, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./file1\x00', 0x103042, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0xd612) socket(0x840000000002, 0x3, 0x100) 2.626810517s ago: executing program 3 (id=4189): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5500000018003f9083b975b28682c1c402050404001013010e0514123900090008000c030300000019000b400400f2ff060022dc131a0200000000000000f75edb6351440a001200020000a7000000001bbe999b19", 0x55}], 0x1, 0x0, 0x0, 0xf000000}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@x={0x94, 0xb, "e179562ae12a"}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025340011800a0001006c696d6974000000240002800c000240000073000000000308000340000000200c000140ffff"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0xc4) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r4, 0xc008aec1, &(0x7f0000000f80)=ANY=[@ANYRES16]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0], 0x0, 0x34, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0x1d, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, [@call={0x85, 0x0, 0x0, 0x87}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4e035405}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5500000018003f9083b975b28682c1c402050404001013010e0514123900090008000c030300000019000b400400f2ff060022dc131a0200000000000000f75edb6351440a001200020000a7000000001bbe999b19", 0x55}], 0x1, 0x0, 0x0, 0xf000000}, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@x={0x94, 0xb, "e179562ae12a"}) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025340011800a0001006c696d6974000000240002800c000240000073000000000308000340000000200c000140ffff"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0xc4) (async) dup(0xffffffffffffffff) (async) ioctl$KVM_SET_MSRS(r4, 0xc008aec1, &(0x7f0000000f80)=ANY=[@ANYRES16]) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0], 0x0, 0x34, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r6, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0x1d, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, [@call={0x85, 0x0, 0x0, 0x87}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4e035405}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) (async) 2.494392663s ago: executing program 3 (id=4190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa73, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}]}]}, 0x40}}, 0x40084) 2.479922336s ago: executing program 0 (id=4191): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x72e, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0xce, 0x48, 0x63, 0xff, 0x582, 0x12, 0xbba4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71c, 0x3, 0xc3, 0x7, 0x80, 0x9, [{{0x9, 0x4, 0x3, 0x6, 0x4, 0xb1, 0x4, 0x7f, 0x4, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "244a7781"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0x6, 0xb}, {0x6, 0x24, 0x1a, 0x5, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x8000, 0x1, 0x7, 0x5, 0x400, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x9}]}], [{{0x9, 0x5, 0x1b, 0x2, 0x200, 0x7f, 0x6f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x0, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x1, 0xe1, 0x1, [@generic={0x78, 0x11, "af133b72f033dc2b85c2742dfff3745fc5c3c15c93bdb01166708d61fc56eb90ecdbc0496261be0464594f8046c5207ed111e6c4de61883282ffaa05a21f996fcf1f08e0b0cc84ce1ccd14e5cb359d4b0b3610020d4cbc6b1a555e962909183408bf70722f1b1b4f3ed595d5a7a07d6a006ab0bf3c43"}, @generic={0x20, 0xd, "6c88ac8721750169912ebbf96566f77373dab6d58592708b2f070b851684"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x1, 0x10, 0xf4, [@generic={0x90, 0x23, "74fea243be9fcb85aff0acbd9473f4300701e7eacf67bcb41603ac4646fa4f361bd764ba1a5495333a24a7c9d1d06de145e7e9ad616f58e533cbd41cfeed3a582c7183e165072aa4827bd530bbf81b9cb642b9fc1f505fd20e44ed1dbad37b530da5ee812898d91960764468ca53655ba60f3735d6b99e16596d639d4ab2c18a7a4c246c8b78e2c22de4f181f37f"}, @generic={0xbd, 0x3, "8ee4993ed7e29575a7f807c3c3902e81844fa7fab7f2cf8251d11422998a81c5ef79a5bd4e10b6b6297cc8227057551e9fae943189078ec4f96b9bc18fdd5af0f720598fd4c4a2034f03c86098cbb0797e8dec2c4282e247e1a6f9e6366faa0ff21c3e00c88bd7704bd867f2c5c3fda43346aa7145743bf1fec4303c2bec1236410f9fa734cbedc04964767cd7fe397affe6d7c34137b3d87118a74a30c55c57796dd643691111a5229997220c31be21a81d87af74c38c86a2a821"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x4, 0x7e}}]}}, {{0x9, 0x4, 0x2c, 0x0, 0x9, 0xff, 0xff, 0xff, 0x40, [], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0xb, 0xff, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x4, 0xa, 0x80, [@generic={0x3b, 0x1, "1a7683588ee61f3efaec826e8e88c70f41a783f88ad71e4ab4365123765de4024c4c8d14ac77bd0b0624c5710fad3a5f05d5ad5437cacfdc23"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x5}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x6, 0xbd}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x6, 0x31, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x9, 0x2, 0x3, [@generic={0x5d, 0x1, "6f0f36f306f324de38fffb44727798dc0d08369725e44b91c252fae158a4e1ee97598e8f1ad53f493a8878e0f9d6816246ffb6ec1ebdad460e431ca80c7baf5288f50c1cf6e817042151ac5a122cfc79ab5d89cd215013415c6514"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xc, 0x0, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x4f}, @generic={0x2b, 0x1, "4ae0918ce16e10c2975f33f75072402769e0a76ae1c16342aad4e02ac85253d2b0f18d9405366ee9f6"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x5, 0x6, 0xfd}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x1, 0x80, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x59, 0x2}]}}]}}, {{0x9, 0x4, 0x78, 0xa, 0xc, 0xd2, 0x4c, 0xa9, 0x9, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x5, 0x6, "30944496"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0xadc, 0x1, "2b88ec51c20e66"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0xf, 0x6, "d691f80c40"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0xe4, 0x56, "7426ca29e75bfa"}]}, @generic={0x56, 0x22, "f5adfcbb6c6be554ad33dde3e9825060f50279070db098e07127956e08c97514d355b2078c380ef3e71677811b31500efe6c5ff4a8bc594a0283fa8ecbbfbd3b7bcd8a919c784c448b9eeb7f7608a4a9ddd76e6f"}], [{{0x9, 0x5, 0xf, 0xc, 0x10, 0x1, 0xfc, 0x50, [@generic={0xe1, 0x5, "581b89351e8bffef3cfbe0e1143d74bd49d684709b25edf66ad607b8c2e0c64aff46d7283427f69d3186836d722d4d49c743a5987c39cadbbc170c18633455b80d322dcc1e783992e247277f65116532bbe5e75c836da668480663662f3df94c4982201955c027457373da403a283d531e6d67b098bb0095d0d6f4058afb5eb171f2fde3cb592c6b6d5ca1cc8ab9f92583f6d5c167d3b556a3241127777798b9b8a59dc738cf0a80e4146cb35425d91a85b62c0059144c0a03ab8db112ef1202fa6e308ee4a51ee96b9f106e2bcb93fb3bddae4672c52a473d9120a9731a51"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x1a, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0xb, 0x3, 0xc1155ca409810798, 0x3, 0x40, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x0, 0xff}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x4, 0xc, 0xf}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x5, 0xa7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x7, 0x61, 0x0, [@generic={0xc2, 0x24, "a38a7621c4d2ebc6d923fcb4f09966910ae3020b7047d1c799b0d09aa94f74a6fba3f46e8196b322e6cddd51fe3b25515acf9366913be5997998fefac07d83a84bf5f7d311b78fdeb7f72d2e97e6f63fe035abcec8a8b5aa6c93152c96adbdfd289c8e2e9a1f4df2f51c36b00b25400586265f693191d7a3605b8137839c807f12daf38fa915fedad2029f52ffc65c2def6b1b496ffe553863daaa5170939635b1ba19e407c600123ed030ddb60f840fd53709ce75901ace5e9dd8d717b3a64a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x80, 0x1, 0xfd}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x1, 0x5, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x1, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x6, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x24, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0x40}, @generic={0x91, 0xb, "6a17ef98926c5e3f1b42c020e5c996e18d4fb080b7f555c39cb8ad7891aa035ddf1518ebcd97d0f98fd83f1f4025bb80ca1864b439a9078aa80ed4785467ddd692e7382826cb9656d89db293f0dab4994531c63ab9b800ae1ecb9261a26d8ce601cc989d8957ba35d79c14eae0683b42fe5edb456b8372c816c44bc3b424f3a8ea8d01296385b11998a90bec20b62c"}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xd, 0x7, 0x4, 0xff, 0x2}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0xf5, &(0x7f0000000100)=@string={0xf5, 0x3, "1f971808f6d5775790061fb7ae500e2e79c8182d08c4f76b8d78dfc3783b0caea85484835ebc05a06daee0b36805551d72f4f73a2b20afe3809ca7f2036699e4c7139d9733be0daf4a560730d55944651791e7dfc5d6f3ebf6ca850609d8c7fcec74d1e5b5e5cca4a0729d6a9d1050a773c16189ab67b7e2487e411259b20425b5e8e2416633057332d259d3312fda079bbc58c1d2a7f56d5bfbc0e2e08c668ecd9c13ca0462b444a519d9690d1ec0bf832e3e7193b8ad411474194ce1f83980d01b56069aac3a47f8e70116bd3e7b866f1481957c63beaaa8a05ee8e33965fa983447ff462ab6fc8e04e1b3f4343ce6e0e986"}}, {0xf7, &(0x7f0000000200)=@string={0xf7, 0x3, "45f580efc4eca33b770d88c7c0b91ad519735351d4b3a92606c4a25ce60b3994e75aed60e940a435fc3ea3e2e53c0bbd8526d887eb4ac677f244b63cf9366d733dd7e5680675256fb4e5a585d85d4bad5d46499ee4b93a3b06fbf7bb7eac971ca1d46e7148c4f1d7d276d1032186f7d8b58cac1356ba587ff241376e9d635d5d4ea4cf7d7fb5fc1e3f44bbf061ea87f80804fe0b2abe663dcfbd738b503aac5adb10a8ecbb6a5800d33212315e843ae54810950614a7c72046ce4b319696c356b13100da35a5bb4a173d64160da8a38daa4fb617aabc3ea40342e46ccbe670ee6beb90eca3be67df0c212d193f884fdf60d5662d31"}}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYBLOB="00002100030000"], 0x5c}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000440)={0xc, &(0x7f0000000340)={0x20, 0x4, 0x62, {0x62, 0x9, "f109bd936e7a06fa23f667730275f9ea50986bac9042446eb58161258a7072b0e876d474d7c53a8063033fcd0eeff56e37ed346e59e07f88c24d862b4d998b233104afb7911b2b7fd3a059ddbfe8505c29f043d706b7125a1759d31e03ed90f5"}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003040000002403841451fc734311e6460160e3b26ac4b338e3057dd7"]}, &(0x7f0000000780)={0x24, &(0x7f0000000500)={0x20, 0x1, 0x56, "944f244e626800d376c5952aa304cb0b2f573882d4d36e13367ee61011ce0894aff60171c4a32e506c55a7495de9f6b0e2407e4500d07092ba11d707516f30b0ce179ededca4b39518b30116623a63c94e9b9deb854d"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000600)={0x20, 0x81, 0x3, "f48de6"}, &(0x7f0000000640)={0x20, 0x82, 0x3, "59a2c1"}, &(0x7f0000000680)={0x20, 0x83, 0x2, "7ec6"}, &(0x7f00000006c0)={0x20, 0x84, 0x3, "ffc134"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "b847ba"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000280000001862b60a25b1b775ac584f3a3424e1974c6d6bd44498745389"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00Z'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.451539986s ago: executing program 3 (id=4192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)='[F', 0x2}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000440), 0x105402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011d00000000950000000000000018630000080000000000000008000000bfd7fb056bdf94f768f3bb82c79ee183279100000000000056080000000000fc8500000000000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x400, 0xfffffffffffffd18, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000030400e2ffffffffff0700030000", @ANYBLOB="a1d57e50b7a0b487278c91d512edc5ee4367a1eaf4", @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600020000000000060001000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r2], 0x54}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x454, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x38c, 0x1398, 0x1398, 0x38c, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x2c}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d64981b5c0179365bb26dcb6f5dd409cefe4e35df84798463947e69102fbf7581c0eef9ffea68c80ae911c5cef286544566cff7e452e3f0c45fedeb36c6646f5c44aa585d", 0x7b}, {&(0x7f0000000640)="0d58fa00a4a25557616d6ad626d271bcc615561efebc4402c751263a6048a6cc870c57ef079cfb94f1992cf5f8477c193de19ba52e949b73ff7cb3bb8b81dac1679408e377ed2ee99f8b90b9834cfbce43615f550f1153dc48e5303114822b01a9dd1ea48e4c6dddfc5c7b1b15e38453ef5003eecd81b7ab2463cdf6afeabfb758b85d0b0e4a6393697faa7981612700b6bde099283468498cb826acfb102767224f523cd9dcc8ca28469a6c821a160e32363e83", 0xb4}], 0x2}, 0x8010) sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r11, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/1, 0x1}, {&(0x7f0000000bc0)=""/26, 0x1a}, {&(0x7f0000000c00)=""/10, 0xa}], 0x3}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000002480)=""/4112, 0x1010}], 0x1}}], 0x2, 0x40002102, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a7d0318b9fca57b46503015c54864aeb3d8ac715aa7e5736cb1", @ANYRES16=r9, @ANYBLOB="010000000000000000001a00000004000180"], 0x18}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000020c0)=ANY=[@ANYBLOB="12010000eb4de240f30c74938f710102030109021b00010000000009041b0001be131400090502008000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'ipvlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) 2.21828262s ago: executing program 1 (id=4193): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x514, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_fw={{0x7}, {0x4d8, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x350, 0x4, [@m_vlan={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x65, 0x6, "f370dfc26bda3e8bd45216da1aa3964ed3b60b4334447ba4ec948d16c5ea9e784cb150ef66ab93528c18790962548e5c98822116cbfdcf7c3a8c7c2ee29dd2ff997bf0d0f836545bbd9b9302deb518f69dfe39552cca68ac02e9c6dbf11370b01a"}, {0xc}, {0xc}}}, @m_ctinfo={0x140, 0x0, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xa9, 0x6, "8c4274210bf4344eee0ade94d895eb3f5fdc4ec866ec0d5005a60331686a8486fa8e91c85c847181e823fee4afb8a60979707828e026c45a9f6bd9f7ee27bef80232e58cb39f657808a8baeadea90445f236d2258ab3605aad1caf64002deeb4d8a5343c583834755ade8cf160436309025cb38b6c9299c2c1cd0ef13722520a49dd39f5764b7ab61e70dca6442cd72486bed389794867ca6a1ff829148784451724a821e4"}, {0xc}, {0xc}}}, @m_skbedit={0xc0, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8}]}, {0x81, 0x6, "c7edfeac621139196345a6f8a58e296e7b575b7c0378eaffc10c3da07f6334206643a2e68c91a8b4902ecb43b8a7f223c44b62e3db93dda61a92e5954dc28e03fbca5aa97221e43a236c3a9ceec773a2788904f1555a0ad9445498987e4e4c2eec07efb6469fd17acc2abe301331b06a3bd50774f35a7dc2597ab865c0"}, {0xc}, {0xc}}}, @m_skbmod={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "be55bff691533e94de09ed9bad82256009362c9d3574a6b99e33706b0f0231574705a47990aef3802fbf834b6a38694135ceea751b58dbb126083b120c1a2fdc50bdb043e9620b3ed622634d55d1ebdf64b587e4e5ce2f87cd842a014f2429c40521b161d39ecd7569abacb93592b30a623b5a2d1bb484573e87ba3247"}, {0xc}, {0xc}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x124, 0x4, [@m_simple={0x120, 0x0, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x4000000}}, @TCA_DEF_DATA={0x7, 0x3, '9p\x00'}, @TCA_DEF_DATA={0x7, 0x3, '#\xee\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18, 0x2, {0x3}}]}, {0x5e, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a910cbe3d0b34b67c9400d92c4bd68f2a5e196d558cfa1c8440806e82a3b539579ffad"}, {0xc}, {0xc}}}]}]}}]}, 0x514}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.182507163s ago: executing program 1 (id=4194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'hsr0\x00', 0x4}, 0x18) 2.080002579s ago: executing program 1 (id=4195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd8d00000001000000000200000008000300", @ANYRES32=r3], 0x28}}, 0x0) 1.998349671s ago: executing program 2 (id=4196): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000280)="86", 0x1) write$dsp(r0, &(0x7f00000002c0)="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", 0xe00) write$dsp(r0, &(0x7f00000012c0)="bf", 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.895247529s ago: executing program 1 (id=4197): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00'}) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x00', 0xf4240) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000002c0)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) read$FUSE(r5, &(0x7f0000003800)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000e90f000100000000fc0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100b93a59cc5aa90000140035006d616373656330000000000000000000", @ANYBLOB="675dd6fd5d08da91a8699663d8e1a710dc6f37a9fac6e1225e4d8d9ed81576aa930ef555a626cb116467cef7f586fd0874852a58d3e902ef0a948bcf2b3f71767fc8eff277d8f2255ff8544396392be1944221bf6d6511a28a9f5547f922044ecb9bd210125896fbee44306941f3ad7adbed82d07f55", @ANYRESDEC=r6], 0x40}}, 0x0) r7 = fsopen(&(0x7f0000000280)='cgroup\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b\xba\xdf//\xdc/\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004287439782d3f22323e89afebe4d714af4c76353", @ANYRES16=r8, @ANYBLOB="000200000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x80080) write$apparmor_current(r0, &(0x7f0000000100)=@profile={'stack ', '+\x00'}, 0x8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x24000080) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x40000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000006c0)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) socket$alg(0x26, 0x5, 0x0) 1.814438405s ago: executing program 4 (id=4198): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x439, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x90}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x8}}]}]}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x28040000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8169523010902240001000064000904340102d469e70009058acf", @ANYRES32=r0], 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r2, &(0x7f0000000400)='0', 0x1) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x45, &(0x7f0000000380)="47030400"/23, 0xffffff27) socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x1784, 0x28a8, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r11, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.730154072s ago: executing program 2 (id=4199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_MASTER={0x8, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.341098937s ago: executing program 1 (id=4201): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="f4001100042b2c25fe8007000000007a000000339f426cfd8e2fa40000000000000000000000634b", 0x5dc}], 0x1}, 0x900) syz_extract_tcp_res(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) r5 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r5, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000003600)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002080)="b62850811fd7b911d41aff56d4e3219c754b3af25f36317140f0486391e2f0455ae9980cdfad3a4981fb4414c24b675aa22cdade707e9d473481761f3812b52490dbb24c616365c9d2ab663d7b7e97271ae28f5017056b9cb6b842d3d213ccd164d8b900e84f728c165cc7a38d1b0af49abd1d7487ec0ed3c5aa9b4cc7a233b31d98ae0ef9d747ecc809", 0x8a}, {&(0x7f0000002140)="ab3d", 0x2}, {&(0x7f0000002180)="3cce043285a0205dc818bf001200c94c5be7d366d6cbb49bb3f31e8e7c07cbc4b267c6f4fc6a2dd9cbfec21f96d668ae6c4d3094e82df88c2452f48827b72deb74159dab689baa9f6d7497265a8f6cbccd76337791f0cdf84d7756c83b3fa36555f71e37127cee508e24c5006263204fe1b598504a07dddec5192f7d8964", 0x7e}, {&(0x7f0000002200)="80b9c61c72b0fe", 0x7}, {&(0x7f0000002340)="5dff8dd72041141f19b59fbef735db3bfc6883e96cbe7ceb46a4f1de744dd09f22ca894d925e818b38dec1e59e417a97880ceab7c6a5834fd03a8fdfe5d0b5f05d39930d5bfa9acf0122810edb35dad2b223a4f33d8c83729e743928cad3d6d35718350bcb8c9fb9884d670740312a53036379b97fcfe289f4f68ced1d96e5eaf5cc9d507f00630be5c9a049e2557e4199d0553c218806c18b525b28e0f150159f836f1320c9762b24332932786849157e0130cf7462a0f2ebcbf6dfb1eeb6efedf64e6758539715123125720c5483616c71b4090956a2df56486e5328d614114d24c0eba82f767dba2fd5ea59e8013f8b4eaa", 0xf3}], 0x5}], 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x7fb, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @private2}, @in6={0xa, 0x4e23, 0x0, @ipv4}], 0x38) connect$netlink(r5, &(0x7f0000000000)=@unspec, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x28) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) socket$inet_mptcp(0x2, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x6f}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 850.316521ms ago: executing program 3 (id=4202): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x40084) 546.427516ms ago: executing program 3 (id=4203): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup(r0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) unshare(0x26020480) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x3000000}, 0x0, 0x0) 0s ago: executing program 4 (id=4204): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) kernel console output (not intermixed with test programs): ] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.416959][T25336] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1097.439905][ T937] gspca_stk1135: Sensor read failed [ 1097.447427][ T937] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.454582][ T937] gspca_stk1135: Sensor write failed [ 1097.461006][ T937] gspca_stk1135: serial bus timeout: status=0x00 [ 1097.473377][ T937] gspca_stk1135: Sensor write failed [ 1097.479447][ T937] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1097.504499][ T937] usb 2-1: USB disconnect, device number 92 [ 1097.569253][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'. [ 1097.637723][T25348] xt_connbytes: Forcing CT accounting to be enabled [ 1097.648738][T25336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.650864][T25348] delete_channel: no stack [ 1097.682689][T25336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.711188][T25336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.721402][T25336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.739689][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.768891][T25336] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1098.029370][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1098.068442][T25369] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3923'. [ 1098.105276][ T5281] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1098.277292][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.292336][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.312540][ T5281] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1098.329169][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.341570][ T5281] usb 2-1: config 0 descriptor?? [ 1098.397658][ T937] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1098.405725][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1098.434607][T25388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3927'. [ 1098.555416][ T9] usb 3-1: device descriptor read/64, error -71 [ 1098.586265][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 1098.594955][ T937] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1098.610601][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.626075][ T937] usb 4-1: config 0 descriptor?? [ 1098.634806][ T937] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1098.783060][ T5281] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0 [ 1098.792562][ T5281] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0 [ 1098.804828][ T5281] arvo 0003:1E7D:30D4.004E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 1098.817521][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1098.968369][ T9] usb 3-1: device descriptor read/64, error -71 [ 1098.996323][T25357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.005764][T25357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.095765][ T9] usb usb3-port1: attempt power cycle [ 1099.412713][T25428] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3930'. [ 1099.469113][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1099.579191][T21440] usb 2-1: USB disconnect, device number 93 [ 1099.582990][ T9] usb 3-1: device descriptor read/8, error -71 [ 1099.650555][ T937] gspca_nw80x: reg_w err -71 [ 1099.673289][ T937] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1099.745209][ T937] usb 4-1: USB disconnect, device number 108 [ 1099.875138][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1099.895314][ T8] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1099.919593][ T9] usb 3-1: device descriptor read/8, error -71 [ 1100.047852][ T9] usb usb3-port1: unable to enumerate USB device [ 1100.072541][T25470] fuse: Unknown parameter 'default_permissio' [ 1100.085592][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1100.099432][ T8] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1100.109419][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.136869][ T8] usb 1-1: Product: syz [ 1100.141225][ T8] usb 1-1: Manufacturer: syz [ 1100.146320][ T8] usb 1-1: SerialNumber: syz [ 1100.152892][ T8] usb 1-1: config 0 descriptor?? [ 1100.162101][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1100.413814][ T8] gspca_stk1135: reg_w 0x2 err -71 [ 1100.414772][T25480] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3936'. [ 1100.426091][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 1100.437182][ T8] gspca_stk1135: Sensor write failed [ 1100.465970][ T937] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1100.473801][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 1100.495197][ T8] gspca_stk1135: Sensor write failed [ 1100.501497][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 1100.520821][ T8] gspca_stk1135: Sensor read failed [ 1100.527626][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 1100.540207][ T8] gspca_stk1135: Sensor read failed [ 1100.567728][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 1100.590394][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 1100.603878][ T8] gspca_stk1135: Sensor read failed [ 1100.623514][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 1100.630265][ T8] gspca_stk1135: Sensor read failed [ 1100.635928][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 1100.642397][ T8] gspca_stk1135: Sensor write failed [ 1100.649674][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 1100.656745][ T8] gspca_stk1135: Sensor write failed [ 1100.662764][ T8] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1100.671331][ T937] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.682469][ T937] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1100.693673][ T8] usb 1-1: USB disconnect, device number 61 [ 1100.714758][ T937] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1100.732856][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.815903][T21296] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1100.986411][ T29] audit: type=1326 audit(1727997883.623:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1100.987239][T21296] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1101.035162][ T29] audit: type=1326 audit(1727997883.653:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.095552][T21296] usb 5-1: can't read configurations, error -61 [ 1101.102869][ T29] audit: type=1326 audit(1727997883.653:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.155231][ T29] audit: type=1326 audit(1727997883.653:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.237392][ T29] audit: type=1326 audit(1727997883.653:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.263772][T21296] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1101.346924][ T29] audit: type=1326 audit(1727997883.653:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.418511][ T29] audit: type=1326 audit(1727997883.933:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.476850][T21296] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1101.489539][T21296] usb 5-1: can't read configurations, error -61 [ 1101.505245][ T29] audit: type=1326 audit(1727997883.933:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.555783][T21296] usb usb5-port1: attempt power cycle [ 1101.558200][ T29] audit: type=1326 audit(1727997884.033:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.606820][ T29] audit: type=1326 audit(1727997884.033:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25474 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1101.628935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.928209][T21296] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1101.958147][T21296] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1101.966997][T21296] usb 5-1: can't read configurations, error -61 [ 1102.059094][T21440] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1102.097524][T21296] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1102.108868][ T937] usb 4-1: USB disconnect, device number 109 [ 1102.137968][T21296] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1102.148398][T21296] usb 5-1: can't read configurations, error -61 [ 1102.159962][T21296] usb usb5-port1: unable to enumerate USB device [ 1102.216075][T21440] usb 1-1: Using ep0 maxpacket: 8 [ 1102.229331][T21440] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.240669][T21440] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.256370][T21440] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1102.267245][T21440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.276617][T21440] usb 1-1: Product: ä°Š [ 1102.281165][T21440] usb 1-1: Manufacturer: ã Š [ 1102.287918][T21440] usb 1-1: SerialNumber: syz [ 1102.575213][ T7008] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1102.733836][T21440] usb 1-1: 0:2 : does not exist [ 1102.757673][ T7008] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1102.798817][ T7008] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1102.811177][T21440] usb 1-1: USB disconnect, device number 62 [ 1102.818954][ T7008] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1102.836197][ T7008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.869432][ T7008] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.884322][T21142] udevd[21142]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.887880][ T7008] usb 2-1: invalid MIDI out EP 0 [ 1102.943651][ T7008] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1102.980181][T21144] udevd[21144]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1103.078377][T21440] usb 2-1: USB disconnect, device number 94 [ 1103.168487][T25577] fuse: Unknown parameter 'default_permissio' [ 1103.250921][T25579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3947'. [ 1103.375796][T25589] FAULT_INJECTION: forcing a failure. [ 1103.375796][T25589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.420974][T25589] CPU: 0 UID: 0 PID: 25589 Comm: syz.0.3949 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1103.431805][T25589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1103.441878][T25589] Call Trace: [ 1103.445162][T25589] [ 1103.448113][T25589] dump_stack_lvl+0x241/0x360 [ 1103.452824][T25589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.458051][T25589] ? __pfx__printk+0x10/0x10 [ 1103.462677][T25589] ? snprintf+0xda/0x120 [ 1103.466973][T25589] should_fail_ex+0x3b0/0x4e0 [ 1103.471687][T25589] _copy_to_user+0x2f/0xb0 [ 1103.476143][T25589] simple_read_from_buffer+0xca/0x150 [ 1103.481605][T25589] proc_fail_nth_read+0x1e9/0x250 [ 1103.486662][T25589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1103.492256][T25589] ? rw_verify_area+0x55e/0x6f0 [ 1103.497143][T25589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1103.502748][T25589] vfs_read+0x201/0xbc0 [ 1103.506934][T25589] ? __pfx_lock_release+0x10/0x10 [ 1103.512005][T25589] ? __pfx_vfs_read+0x10/0x10 [ 1103.516717][T25589] ? __fget_files+0x3f3/0x470 [ 1103.521429][T25589] ? fdget_pos+0x24e/0x320 [ 1103.525872][T25589] ksys_read+0x183/0x2b0 [ 1103.530137][T25589] ? __pfx_ksys_read+0x10/0x10 [ 1103.534930][T25589] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1103.541567][T25589] ? lockdep_hardirqs_on+0x99/0x150 [ 1103.546813][T25589] __do_fast_syscall_32+0xb4/0x110 [ 1103.551958][T25589] ? exc_page_fault+0x590/0x8c0 [ 1103.556849][T25589] do_fast_syscall_32+0x34/0x80 [ 1103.561815][T25589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.568173][T25589] RIP: 0023:0xf73fd579 [ 1103.572270][T25589] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1103.591903][T25589] RSP: 002b:00000000f56e65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1103.600363][T25589] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56e6620 [ 1103.608365][T25589] RDX: 000000000000000f RSI: 00000000f73ebff4 RDI: 0000000000000000 [ 1103.616376][T25589] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1103.624381][T25589] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1103.632383][T25589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.640406][T25589] [ 1103.643575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.645132][T21440] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1103.691547][T25601] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1103.698115][T25601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1103.747228][T25601] vhci_hcd vhci_hcd.0: Device attached [ 1103.802168][T25602] usbip_core: unknown command [ 1103.807023][T25602] vhci_hcd: unknown pdu 0 [ 1103.811544][T25602] usbip_core: unknown command [ 1103.827845][T15646] vhci_hcd: stop threads [ 1103.833495][T15646] vhci_hcd: release socket [ 1103.848372][T25611] FAULT_INJECTION: forcing a failure. [ 1103.848372][T25611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.851662][T15646] vhci_hcd: disconnect device [ 1103.864063][T25611] CPU: 0 UID: 0 PID: 25611 Comm: syz.0.3958 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1103.866414][T21440] usb 5-1: Using ep0 maxpacket: 32 [ 1103.876979][T25611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1103.877003][T25611] Call Trace: [ 1103.877012][T25611] [ 1103.877021][T25611] dump_stack_lvl+0x241/0x360 [ 1103.877048][T25611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.877066][T25611] ? __pfx__printk+0x10/0x10 [ 1103.877092][T25611] ? __pfx_lock_release+0x10/0x10 [ 1103.877125][T25611] should_fail_ex+0x3b0/0x4e0 [ 1103.877154][T25611] _copy_from_user+0x2f/0xe0 [ 1103.927127][T25611] smc_setsockopt+0x452/0xe50 [ 1103.931821][T25611] ? __pfx_smc_setsockopt+0x10/0x10 [ 1103.937019][T25611] ? aa_sock_opt_perm+0x79/0x120 [ 1103.941956][T25611] ? __pfx_smc_setsockopt+0x10/0x10 [ 1103.947153][T25611] do_sock_setsockopt+0x3af/0x720 [ 1103.952179][T25611] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1103.957724][T25611] ? __fget_files+0x3f3/0x470 [ 1103.962422][T25611] ? __fget_files+0x29/0x470 [ 1103.967041][T25611] __sys_setsockopt+0x1a2/0x250 [ 1103.972010][T25611] __ia32_sys_setsockopt+0xb5/0xd0 [ 1103.977139][T25611] __do_fast_syscall_32+0xb4/0x110 [ 1103.982280][T25611] ? exc_page_fault+0x590/0x8c0 [ 1103.987144][T25611] do_fast_syscall_32+0x34/0x80 [ 1103.992019][T25611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.998377][T25611] RIP: 0023:0xf73fd579 [ 1104.002451][T25611] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1104.022063][T25611] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1104.030488][T25611] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1104.038634][T25611] RDX: 000000000000048b RSI: 0000000020000140 RDI: 0000000000000018 [ 1104.046637][T25611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1104.054606][T25611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1104.062578][T25611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1104.070566][T25611] [ 1104.073716][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.105416][T21440] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1104.124359][T21440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.135572][T21440] usb 5-1: Product: syz [ 1104.140221][T21440] usb 5-1: Manufacturer: syz [ 1104.145195][T21440] usb 5-1: SerialNumber: syz [ 1104.151831][T21440] usb 5-1: config 0 descriptor?? [ 1104.164861][T21440] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1104.392738][T21440] gspca_stk1135: reg_w 0x2 err -71 [ 1104.408277][T21440] gspca_stk1135: serial bus timeout: status=0x00 [ 1104.414668][T21440] gspca_stk1135: Sensor write failed [ 1104.420394][T21440] gspca_stk1135: serial bus timeout: status=0x00 [ 1104.426859][T21440] gspca_stk1135: Sensor write failed [ 1104.432184][T21440] gspca_stk1135: serial bus timeout: status=0x00 [ 1104.439196][T21440] gspca_stk1135: Sensor read failed [ 1104.444437][T21440] gspca_stk1135: serial bus timeout: status=0x00 [ 1104.451493][T21440] gspca_stk1135: Sensor read failed [ 1104.456979][T21440] gspca_stk1135: Detected sensor type unknown (0x0) [ 1104.463608][T21440] gspca_stk1135: serial bus timeout: status=0x00 [ 1104.470328][T21440] gspca_stk1135: Sensor read failed [ 1104.475979][T21440] gspca_stk1135: serial bus timeout: status=0x00 [ 1104.482463][T21440] gspca_stk1135: Sensor read failed [ 1104.487817][T21440] gspca_stk1135: serial bus timeout: status=0x00 [ 1104.494163][T21440] gspca_stk1135: Sensor write failed [ 1104.499580][T21440] gspca_stk1135: serial bus timeout: status=0x00 [ 1104.506042][T21440] gspca_stk1135: Sensor write failed [ 1104.511406][T21440] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1104.531456][T21440] usb 5-1: USB disconnect, device number 94 [ 1104.567104][ T937] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1104.748761][ T937] usb 2-1: Using ep0 maxpacket: 8 [ 1104.771391][ T937] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1104.782089][ T937] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1104.804583][ T937] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1104.833597][T25629] could not allocate digest TFM handle blake2s-224-x86 [ 1104.834056][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.874208][ T937] usb 2-1: Product: syz [ 1104.920882][ T937] usb 2-1: Manufacturer: syz [ 1104.926668][ T937] usb 2-1: SerialNumber: syz [ 1104.937462][ T937] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1104.950778][ T937] dvb-usb: bulk message failed: -22 (3/0) [ 1104.979926][ T937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1104.991156][ T937] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1105.014532][ T937] usb 2-1: media controller created [ 1105.034700][ T937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1105.045531][T21296] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1105.057506][ T937] dvb-usb: bulk message failed: -22 (6/0) [ 1105.063636][ T937] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1105.080399][ T937] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input122 [ 1105.097640][ T937] dvb-usb: schedule remote query interval to 150 msecs. [ 1105.105840][ T937] dvb-usb: bulk message failed: -22 (3/0) [ 1105.136897][ T937] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1105.269032][ T937] dvb-usb: bulk message failed: -22 (1/0) [ 1105.273001][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.281591][ T937] dvb-usb: error while querying for an remote control event. [ 1105.297878][T21296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.356172][T21296] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1105.370258][T21296] usb 4-1: New USB device found, idVendor=10c4, idProduct=81b9, bcdDevice= 0.00 [ 1105.382690][T21296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.397950][T21296] usb 4-1: config 0 descriptor?? [ 1105.455371][ T937] dvb-usb: bulk message failed: -22 (1/0) [ 1105.468877][ T937] dvb-usb: error while querying for an remote control event. [ 1105.531484][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.615234][T21296] usb 4-1: string descriptor 0 read error: -71 [ 1105.630743][T21296] usbhid 4-1:0.0: can't add hid device: -71 [ 1105.637861][T21296] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1105.649500][T21296] usb 4-1: USB disconnect, device number 110 [ 1105.666317][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 1105.672114][ T8] dvb-usb: error while querying for an remote control event. [ 1105.733722][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.815633][ T7008] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1105.878424][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 1105.885502][ T8] dvb-usb: error while querying for an remote control event. [ 1105.944479][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.987336][ T8] usb 2-1: USB disconnect, device number 95 [ 1106.005304][ T7008] usb 3-1: Using ep0 maxpacket: 8 [ 1106.012222][ T7008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.084471][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1106.096777][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1106.108414][ T7008] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1106.120333][ T7008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1106.134219][ T7008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1106.146301][ T7008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1106.157500][ T7008] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.173940][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1106.184506][ T7008] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1106.194773][ T7008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.203487][ T7008] usb 3-1: Product: syz [ 1106.208746][ T7008] usb 3-1: Manufacturer: syz [ 1106.213567][ T7008] usb 3-1: SerialNumber: syz [ 1106.218655][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1106.227807][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1106.235902][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1106.247153][ T7008] usb 3-1: config 0 descriptor?? [ 1106.252948][T25668] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1106.343837][T25698] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3970'. [ 1106.427375][T25703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3970'. [ 1106.466224][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1106.598750][T25712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.606230][T25712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.618393][T25712] bridge0: entered allmulticast mode [ 1106.634026][T25703] bridge0: port 2(bridge_slave_1) entered listening state [ 1106.754890][T25698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.762132][T25698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.763341][ T9] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1106.778472][T25698] bridge0: entered promiscuous mode [ 1106.866502][ T8] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1107.038775][ T8] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1107.075149][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.086907][ T8] usb 4-1: config 0 has no interface number 0 [ 1107.093041][ T8] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1107.106294][ T8] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1107.116192][ T8] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.129423][ T8] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1107.138465][ T8] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1107.171168][ T8] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1107.245899][ T8] usb 4-1: Product: syz [ 1107.250113][ T8] usb 4-1: Manufacturer: syz [ 1107.254722][ T8] usb 4-1: SerialNumber: syz [ 1107.287345][ T53] bridge_slave_1: left allmulticast mode [ 1107.293037][ T53] bridge_slave_1: left promiscuous mode [ 1107.344775][ T8] usb 4-1: config 0 descriptor?? [ 1107.346300][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.455994][ T53] bridge_slave_0: left allmulticast mode [ 1107.461708][ T53] bridge_slave_0: left promiscuous mode [ 1107.475307][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.515362][T21296] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1107.598259][ T8] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1107.630508][ T8] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1107.705337][T21296] usb 2-1: device descriptor read/64, error -71 [ 1107.963363][T21296] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1108.074433][T25810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.120930][T25810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.135867][T21296] usb 2-1: device descriptor read/64, error -71 [ 1108.254537][T21296] usb usb2-port1: attempt power cycle [ 1108.303484][T23263] Bluetooth: hci3: command tx timeout [ 1108.442358][T25817] fuse: Unknown parameter 'default_permission' [ 1108.465358][ T7008] rc_core: IR keymap rc-snapstream-firefly not found [ 1108.472097][ T7008] Registered IR keymap rc-empty [ 1108.502662][ T7008] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1108.571493][ T7008] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input123 [ 1108.610196][ T7008] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input125 [ 1108.620667][T21296] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1108.645792][T21296] usb 2-1: device descriptor read/8, error -71 [ 1108.653940][ T7008] usb 3-1: USB disconnect, device number 90 [ 1108.653994][ C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1108.885411][T21296] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1108.907481][T21296] usb 2-1: device descriptor read/8, error -71 [ 1109.016744][T21296] usb usb2-port1: unable to enumerate USB device [ 1109.083435][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.143379][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.192287][ T53] bond0 (unregistering): Released all slaves [ 1109.316920][ T5290] usb 4-1: USB disconnect, device number 111 [ 1109.752331][T25696] chnl_net:caif_netlink_parms(): no params data found [ 1109.852667][ T53] hsr_slave_0: left promiscuous mode [ 1109.907895][ T53] hsr_slave_1: left promiscuous mode [ 1109.953559][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.963935][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.991171][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.013601][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.070298][ T53] veth1_macvtap: left promiscuous mode [ 1110.112122][ T53] veth0_macvtap: left promiscuous mode [ 1110.133182][ T53] veth1_vlan: left promiscuous mode [ 1110.158082][ T53] veth0_vlan: left promiscuous mode [ 1110.165884][ T5228] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1110.257950][T25969] program syz.3.3980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1110.340237][ T5228] usb 3-1: Using ep0 maxpacket: 32 [ 1110.368468][ T5228] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1110.379408][T23263] Bluetooth: hci3: command tx timeout [ 1110.385942][ T5228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.394826][ T5228] usb 3-1: Product: syz [ 1110.399708][ T5228] usb 3-1: Manufacturer: syz [ 1110.404334][ T5228] usb 3-1: SerialNumber: syz [ 1110.414495][ T5228] usb 3-1: config 0 descriptor?? [ 1110.428738][ T5228] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1110.961103][ T5228] gspca_stk1135: reg_w 0x2 err -110 [ 1110.968764][ T5228] gspca_stk1135: serial bus timeout: status=0x00 [ 1111.003403][ T5228] gspca_stk1135: Sensor write failed [ 1111.011591][ T5228] gspca_stk1135: serial bus timeout: status=0x00 [ 1111.020813][ T5228] gspca_stk1135: Sensor write failed [ 1111.046241][ T5228] gspca_stk1135: serial bus timeout: status=0x00 [ 1111.053417][ T5228] gspca_stk1135: Sensor read failed [ 1111.060070][ T5228] gspca_stk1135: serial bus timeout: status=0x00 [ 1111.067654][ T5228] gspca_stk1135: Sensor read failed [ 1111.073782][ T5228] gspca_stk1135: Detected sensor type unknown (0x0) [ 1111.083911][ T5228] gspca_stk1135: serial bus timeout: status=0x00 [ 1111.091095][ T5228] gspca_stk1135: Sensor read failed [ 1111.098438][ T5228] gspca_stk1135: serial bus timeout: status=0x00 [ 1111.107175][ T5228] gspca_stk1135: Sensor read failed [ 1111.112423][ T5228] gspca_stk1135: serial bus timeout: status=0x00 [ 1111.118952][ T5228] gspca_stk1135: Sensor write failed [ 1111.124276][ T5228] gspca_stk1135: serial bus timeout: status=0x00 [ 1111.131709][ T5228] gspca_stk1135: Sensor write failed [ 1111.138041][ T5228] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 1111.267670][ T8] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1111.435166][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1111.459502][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.485175][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.496739][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1111.512800][ T8] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1111.522938][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.543863][ T8] usb 2-1: config 0 descriptor?? [ 1111.898475][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1111.998064][ T8] uclogic 0003:5543:0064.0050: item fetching failed at offset 5/7 [ 1112.007485][ T8] uclogic 0003:5543:0064.0050: parse failed [ 1112.021448][ T8] uclogic 0003:5543:0064.0050: probe with driver uclogic failed with error -22 [ 1112.093835][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1112.221998][T21296] usb 2-1: USB disconnect, device number 100 [ 1112.456764][T23263] Bluetooth: hci3: command tx timeout [ 1112.986722][ T940] usb 3-1: USB disconnect, device number 91 [ 1113.568081][T26076] loop5: detected capacity change from 0 to 16384 [ 1113.620551][T25696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.655397][ T26] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1113.681625][T25696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.701740][T25696] bridge_slave_0: entered allmulticast mode [ 1113.715792][T25696] bridge_slave_0: entered promiscuous mode [ 1113.723177][T25696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.730462][T25696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.738077][T25696] bridge_slave_1: entered allmulticast mode [ 1113.745228][T25696] bridge_slave_1: entered promiscuous mode [ 1114.081911][T26032] netlink: 'syz.3.3987': attribute type 1 has an invalid length. [ 1114.100657][T26112] syzkaller1: entered promiscuous mode [ 1114.107819][T26112] syzkaller1: entered allmulticast mode [ 1114.153105][T25696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.222823][T25696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.256395][ T937] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1114.325245][ T940] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1114.392563][T26155] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1114.421202][ T937] usb 2-1: device descriptor read/64, error -71 [ 1114.501021][T25696] team0: Port device team_slave_0 added [ 1114.526157][T25696] team0: Port device team_slave_1 added [ 1114.535356][T23263] Bluetooth: hci3: command tx timeout [ 1114.537970][ T940] usb 3-1: config 0 has an invalid interface number: 193 but max is 3 [ 1114.563231][ T940] usb 3-1: config 0 has an invalid interface number: 157 but max is 3 [ 1114.572492][ T940] usb 3-1: config 0 has an invalid interface number: 182 but max is 3 [ 1114.581871][ T940] usb 3-1: config 0 has an invalid interface number: 189 but max is 3 [ 1114.590185][ T940] usb 3-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 1114.599450][ T940] usb 3-1: config 0 has no interface number 1 [ 1114.605901][ T940] usb 3-1: config 0 has no interface number 2 [ 1114.612010][ T940] usb 3-1: config 0 has no interface number 3 [ 1114.618489][ T940] usb 3-1: config 0 has no interface number 4 [ 1114.625150][ T940] usb 3-1: too many endpoints for config 0 interface 182 altsetting 54: 81, using maximum allowed: 30 [ 1114.636438][ T940] usb 3-1: config 0 interface 182 altsetting 54 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 1114.650182][ T940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1114.657134][ T940] usb 3-1: config 0 interface 193 has no altsetting 0 [ 1114.664205][ T940] usb 3-1: config 0 interface 157 has no altsetting 0 [ 1114.671283][ T940] usb 3-1: config 0 interface 182 has no altsetting 0 [ 1114.678377][ T940] usb 3-1: config 0 interface 189 has no altsetting 0 [ 1114.686086][ T940] usb 3-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=18.d1 [ 1114.695994][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.712817][ T940] usb 3-1: config 0 descriptor?? [ 1114.742557][T25696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.783754][T26212] netlink: 'syz.4.3994': attribute type 1 has an invalid length. [ 1114.821728][T25696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.849907][T25696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.866229][ T937] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1114.872028][T25696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.882149][T25696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.942658][T25696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.057290][ T937] usb 2-1: device descriptor read/64, error -71 [ 1115.178476][ T937] usb usb2-port1: attempt power cycle [ 1115.184556][T25696] hsr_slave_0: entered promiscuous mode [ 1115.222161][T25696] hsr_slave_1: entered promiscuous mode [ 1115.254587][T25696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.284105][T25696] Cannot create hsr debugfs directory [ 1115.315343][T21296] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1115.476778][T21296] usb 4-1: Using ep0 maxpacket: 16 [ 1115.515589][ T937] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1115.546708][T21296] usb 4-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 1115.550329][ T937] usb 2-1: device descriptor read/8, error -71 [ 1115.558073][T21296] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1115.580557][T21296] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1115.590969][T21296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.612176][T21296] usb 4-1: Product: syz [ 1115.617726][T21296] usb 4-1: Manufacturer: syz [ 1115.634537][T21296] usb 4-1: SerialNumber: syz [ 1115.858617][ T937] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1115.927668][ T937] usb 2-1: device descriptor read/8, error -71 [ 1116.036552][T21296] usb 4-1: 0:2 : does not exist [ 1116.056156][ T937] usb usb2-port1: unable to enumerate USB device [ 1116.155184][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.161606][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.171064][T21296] usb 4-1: USB disconnect, device number 112 [ 1116.651091][T26344] vlan0: entered promiscuous mode [ 1116.674122][T26343] vlan0: left promiscuous mode [ 1116.978559][ T940] usb 3-1: string descriptor 0 read error: -71 [ 1116.988632][ T940] usb 3-1: unknown number of interfaces: 5 [ 1117.217751][ T940] usb 3-1: USB disconnect, device number 92 [ 1117.306954][T26403] netlink: 'syz.1.4002': attribute type 10 has an invalid length. [ 1117.318319][T26402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1117.356121][T26403] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1117.576589][T25696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1117.597281][T25696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1117.635856][T25696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1117.658782][T25696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1117.934805][T25696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.954708][T25696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.967324][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.974467][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.119894][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.127055][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.189897][T25696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1118.883219][T25696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.045251][ T7008] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1119.073439][T25696] veth0_vlan: entered promiscuous mode [ 1119.121962][T25696] veth1_vlan: entered promiscuous mode [ 1119.196340][ T7008] usb 4-1: Using ep0 maxpacket: 16 [ 1119.218385][ T7008] usb 4-1: config 0 has an invalid interface number: 61 but max is 0 [ 1119.258132][T25696] veth0_macvtap: entered promiscuous mode [ 1119.272956][ T7008] usb 4-1: config 0 has no interface number 0 [ 1119.312703][ T7008] usb 4-1: config 0 interface 61 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1119.327386][T25696] veth1_macvtap: entered promiscuous mode [ 1119.387030][ T7008] usb 4-1: config 0 interface 61 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1119.433701][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.454703][ T7008] usb 4-1: config 0 interface 61 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1119.489107][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.514352][ T7008] usb 4-1: config 0 interface 61 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1119.545672][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.566580][ T7008] usb 4-1: config 0 interface 61 has no altsetting 0 [ 1119.603660][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.625859][ T7008] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=9c.f1 [ 1119.634984][ T7008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.667202][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.688212][ T7008] usb 4-1: Product: syz [ 1119.705284][ T7008] usb 4-1: Manufacturer: syz [ 1119.710124][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.729915][ T7008] usb 4-1: SerialNumber: syz [ 1119.755312][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.767635][ T7008] usb 4-1: config 0 descriptor?? [ 1119.814003][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.854977][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.895815][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.928962][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.991775][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.056814][T25696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.198429][ T7008] usb 4-1: USB disconnect, device number 113 [ 1120.322738][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.374502][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.415174][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.455640][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.485324][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.514073][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.533397][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.544513][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.566455][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.586968][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.604235][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.627620][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.647601][T25696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1120.664094][T25696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1120.689499][T25696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.751558][T25696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.801772][T25696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.847676][T25696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.856938][ T8] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1120.886267][T25696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.050174][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1121.113244][ T8] usb 5-1: device descriptor read/all, error -71 [ 1121.235462][ T2520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.248324][ T2520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.416848][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.466413][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.580996][T26517] binder: 26516:26517 ioctl c0306201 20000380 returned -14 [ 1122.905558][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1122.978251][T26556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4020'. [ 1123.030880][T26556] netlink: 'syz.3.4020': attribute type 29 has an invalid length. [ 1123.066603][T26556] netlink: 'syz.3.4020': attribute type 29 has an invalid length. [ 1123.115193][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1123.141178][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1123.165250][ T9] usb 5-1: config 0 has no interface number 0 [ 1123.200995][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1123.215129][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.243543][ T9] usb 5-1: Product: syz [ 1123.249104][ T9] usb 5-1: Manufacturer: syz [ 1123.259226][ T9] usb 5-1: SerialNumber: syz [ 1123.274768][ T9] usb 5-1: config 0 descriptor?? [ 1123.285264][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1124.445394][T26596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4024'. [ 1124.788314][ T9] gspca_spca1528: reg_w err -71 [ 1124.793414][ T9] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1124.835477][ T9] usb 5-1: USB disconnect, device number 97 [ 1125.415417][ T9] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1125.645156][ T9] usb 2-1: config 0 has no interfaces? [ 1125.656008][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1125.725324][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.802520][ T9] usb 2-1: config 0 descriptor?? [ 1126.065831][T26619] program syz.1.4029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1126.137694][ T9] usb 2-1: USB disconnect, device number 105 [ 1126.317290][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1126.317309][ T29] audit: type=1326 audit(1727997908.943:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1126.516909][ T29] audit: type=1326 audit(1727997908.943:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1126.675172][ T29] audit: type=1326 audit(1727997908.943:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1126.865165][ T937] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1126.943958][ T29] audit: type=1326 audit(1727997908.943:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1127.055214][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 1127.081124][ T937] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1127.099862][ T29] audit: type=1326 audit(1727997908.943:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1127.138727][ T937] usb 5-1: config 0 has no interface number 0 [ 1127.166222][T26668] netlink: 556 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1127.210729][ T937] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1127.245189][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.271959][ T29] audit: type=1326 audit(1727997908.993:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1127.332390][ T937] usb 5-1: Product: syz [ 1127.339339][ T937] usb 5-1: Manufacturer: syz [ 1127.385783][ T937] usb 5-1: SerialNumber: syz [ 1127.407122][ T937] usb 5-1: config 0 descriptor?? [ 1127.437343][ T29] audit: type=1326 audit(1727997908.993:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1127.635078][ T29] audit: type=1326 audit(1727997908.993:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1127.666622][ T29] audit: type=1326 audit(1727997908.993:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1127.693572][T26655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.709031][T26655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.725377][ T29] audit: type=1326 audit(1727997908.993:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26649 comm="syz.4.4034" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1127.940277][ T937] radio-si470x 5-1:0.35: this is not a si470x device. [ 1128.144648][T26688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.218973][T26688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.492703][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1128.507259][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1128.521712][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1128.529825][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1128.537329][ T937] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1128.540135][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1128.552747][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1128.614247][T26709] xt_CT: No such helper "netbios-ns" [ 1128.651857][ T2520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.972961][ T2520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.022455][T23263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1129.039887][T23263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1129.052102][T23263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1129.063594][T23263] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1129.075421][T23263] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1129.082886][T23263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1129.199204][ T2520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.449152][ T2520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.610360][T21440] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1129.673032][ T8] usb 5-1: USB disconnect, device number 98 [ 1129.786999][T21440] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 1129.819780][T21440] usb 1-1: config 0 has no interface number 0 [ 1129.851903][T21440] usb 1-1: config 0 interface 79 has no altsetting 0 [ 1129.863494][T21440] usb 1-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 1129.872613][T26842] IPv6: sit2: Disabled Multicast RS [ 1129.895145][T21440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.911664][T21440] usb 1-1: Product: syz [ 1129.916580][T21440] usb 1-1: Manufacturer: syz [ 1129.921577][T21440] usb 1-1: SerialNumber: syz [ 1129.929972][T21440] usb 1-1: config 0 descriptor?? [ 1129.970540][T21440] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 1129.980578][T21440] dvb-usb: bulk message failed: -22 (2/0) [ 1129.986689][T21440] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1129.993540][T26720] chnl_net:caif_netlink_parms(): no params data found [ 1129.996720][T21440] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 1130.012565][T21440] usb 1-1: media controller created [ 1130.041881][T21440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1130.072257][T21440] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1130.083548][T21440] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1130.178834][T21440] rc_core: IR keymap rc-dtt200u not found [ 1130.184618][T21440] Registered IR keymap rc-empty [ 1130.193424][T21440] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1130.206765][T21440] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input127 [ 1130.235933][T21440] dvb-usb: schedule remote query interval to 300 msecs. [ 1130.243927][T21440] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 1130.258356][T21440] usb 1-1: USB disconnect, device number 63 [ 1130.448758][T21440] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 1130.516610][ T2520] bridge_slave_1: left promiscuous mode [ 1130.531313][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.553990][ T2520] bridge_slave_0: left allmulticast mode [ 1130.568963][ T2520] bridge_slave_0: left promiscuous mode [ 1130.593821][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.616034][T23263] Bluetooth: hci1: command tx timeout [ 1131.176301][T23263] Bluetooth: hci5: command tx timeout [ 1131.522747][ T2520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.576681][ T2520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.623190][ T2520] bond0 (unregistering): Released all slaves [ 1131.689508][T26959] netlink: 'syz.4.4051': attribute type 10 has an invalid length. [ 1131.832065][T26720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.861857][T26720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.938758][T26720] bridge_slave_0: entered allmulticast mode [ 1131.953564][T26720] bridge_slave_0: entered promiscuous mode [ 1131.965897][T26760] chnl_net:caif_netlink_parms(): no params data found [ 1132.372678][T26720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.453951][T26720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.527721][T26720] bridge_slave_1: entered allmulticast mode [ 1132.610589][T26720] bridge_slave_1: entered promiscuous mode [ 1132.705409][T23263] Bluetooth: hci1: command tx timeout [ 1133.286336][T23263] Bluetooth: hci5: command tx timeout [ 1133.644360][T27130] dccp_close: ABORT with 3 bytes unread [ 1133.931524][ T2520] hsr_slave_0: left promiscuous mode [ 1133.942730][ T2520] hsr_slave_1: left promiscuous mode [ 1133.963408][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.985613][ T2520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.010839][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.034313][ T2520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.120224][ T2520] veth1_macvtap: left promiscuous mode [ 1134.141415][ T2520] veth0_macvtap: left promiscuous mode [ 1134.158343][ T2520] veth1_vlan: left promiscuous mode [ 1134.180068][ T2520] veth0_vlan: left promiscuous mode [ 1134.569979][T27178] FAULT_INJECTION: forcing a failure. [ 1134.569979][T27178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.583276][T27178] CPU: 1 UID: 0 PID: 27178 Comm: syz.4.4066 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1134.594078][T27178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1134.604163][T27178] Call Trace: [ 1134.607467][T27178] [ 1134.610413][T27178] dump_stack_lvl+0x241/0x360 [ 1134.615109][T27178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1134.620329][T27178] ? __pfx__printk+0x10/0x10 [ 1134.624951][T27178] ? snprintf+0xda/0x120 [ 1134.629219][T27178] should_fail_ex+0x3b0/0x4e0 [ 1134.633932][T27178] _copy_to_user+0x2f/0xb0 [ 1134.638381][T27178] simple_read_from_buffer+0xca/0x150 [ 1134.643788][T27178] proc_fail_nth_read+0x1e9/0x250 [ 1134.648841][T27178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1134.654395][T27178] ? rw_verify_area+0x55e/0x6f0 [ 1134.659250][T27178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1134.664798][T27178] vfs_read+0x201/0xbc0 [ 1134.668953][T27178] ? __pfx_lock_release+0x10/0x10 [ 1134.673982][T27178] ? __pfx_vfs_read+0x10/0x10 [ 1134.678663][T27178] ? __fget_files+0x3f3/0x470 [ 1134.683341][T27178] ? fdget_pos+0x24e/0x320 [ 1134.687760][T27178] ksys_read+0x183/0x2b0 [ 1134.691997][T27178] ? __pfx_ksys_read+0x10/0x10 [ 1134.696761][T27178] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1134.703357][T27178] ? lockdep_hardirqs_on+0x99/0x150 [ 1134.708673][T27178] __do_fast_syscall_32+0xb4/0x110 [ 1134.713803][T27178] ? exc_page_fault+0x590/0x8c0 [ 1134.718660][T27178] do_fast_syscall_32+0x34/0x80 [ 1134.723505][T27178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1134.729831][T27178] RIP: 0023:0xf7fe6579 [ 1134.733902][T27178] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1134.753510][T27178] RSP: 002b:00000000f57665a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1134.761928][T27178] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5766620 [ 1134.769896][T27178] RDX: 000000000000000f RSI: 00000000f746bff4 RDI: 0000000000000000 [ 1134.777866][T27178] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1134.785831][T27178] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1134.793795][T27178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1134.801772][T27178] [ 1134.836637][T23263] Bluetooth: hci1: command tx timeout [ 1135.194531][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1135.194549][ T29] audit: type=1326 audit(1727997917.823:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.286465][ T29] audit: type=1326 audit(1727997917.823:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.337710][T23263] Bluetooth: hci5: command tx timeout [ 1135.400585][ T29] audit: type=1326 audit(1727997917.823:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.555296][ T29] audit: type=1326 audit(1727997917.823:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.600307][ T29] audit: type=1326 audit(1727997917.823:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.625091][ T29] audit: type=1326 audit(1727997917.873:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.657693][ T29] audit: type=1326 audit(1727997917.873:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.682034][ T29] audit: type=1326 audit(1727997917.873:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.704465][ T29] audit: type=1326 audit(1727997917.873:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1135.746729][ T29] audit: type=1326 audit(1727997917.893:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27184 comm="syz.4.4069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 1136.035839][ T5290] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 1136.139291][T27218] FAULT_INJECTION: forcing a failure. [ 1136.139291][T27218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.162216][T27218] CPU: 0 UID: 0 PID: 27218 Comm: syz.4.4077 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1136.173017][T27218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1136.183075][T27218] Call Trace: [ 1136.186351][T27218] [ 1136.189276][T27218] dump_stack_lvl+0x241/0x360 [ 1136.193956][T27218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1136.199161][T27218] ? __pfx__printk+0x10/0x10 [ 1136.203779][T27218] ? __pfx_lock_release+0x10/0x10 [ 1136.208802][T27218] should_fail_ex+0x3b0/0x4e0 [ 1136.213475][T27218] _copy_from_user+0x2f/0xe0 [ 1136.218062][T27218] smc_setsockopt+0x452/0xe50 [ 1136.222735][T27218] ? __pfx_smc_setsockopt+0x10/0x10 [ 1136.227926][T27218] ? aa_sock_opt_perm+0x79/0x120 [ 1136.232887][T27218] ? __pfx_smc_setsockopt+0x10/0x10 [ 1136.238081][T27218] do_sock_setsockopt+0x3af/0x720 [ 1136.243099][T27218] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1136.248653][T27218] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1136.254646][T27218] __sys_setsockopt+0x1a2/0x250 [ 1136.259509][T27218] __ia32_sys_setsockopt+0xb5/0xd0 [ 1136.264648][T27218] __do_fast_syscall_32+0xb4/0x110 [ 1136.269510][ T5290] usb 4-1: config 0 has an invalid interface number: 193 but max is 0 [ 1136.269745][T27218] ? exc_page_fault+0x590/0x8c0 [ 1136.278101][ T5290] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1136.282715][T27218] do_fast_syscall_32+0x34/0x80 [ 1136.282747][T27218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1136.282770][T27218] RIP: 0023:0xf7fe6579 [ 1136.282788][T27218] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1136.282803][T27218] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1136.282830][T27218] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1136.282843][T27218] RDX: 000000000000048b RSI: 0000000020000140 RDI: 0000000000000018 [ 1136.282856][T27218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1136.282867][T27218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1136.282878][T27218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1136.282904][T27218] [ 1136.282931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.389879][ T5290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.400841][ T5290] usb 4-1: config 0 has no interface number 0 [ 1136.410341][ T5290] usb 4-1: config 0 interface 193 altsetting 0 endpoint 0x3 has invalid maxpacket 16, setting to 8 [ 1136.421394][ T5290] usb 4-1: config 0 interface 193 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 8 [ 1136.433354][ T5290] usb 4-1: config 0 interface 193 altsetting 0 endpoint 0x5 has invalid maxpacket 1032, setting to 8 [ 1136.445285][ T5290] usb 4-1: config 0 interface 193 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1136.456096][ T5290] usb 4-1: config 0 interface 193 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 1136.470899][ T5290] usb 4-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 1136.481300][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.497068][ T5290] usb 4-1: config 0 descriptor?? [ 1136.506943][ T5290] usb-storage 4-1:0.193: USB Mass Storage device detected [ 1136.554211][ T5290] usb-storage 4-1:0.193: Quirks match for vid 03eb pid 2002: 20 [ 1136.869653][T23263] Bluetooth: hci1: command tx timeout [ 1137.082816][ T937] usb 4-1: USB disconnect, device number 114 [ 1137.112995][ T2520] team0 (unregistering): Port device team_slave_1 removed [ 1137.218557][ T2520] team0 (unregistering): Port device team_slave_0 removed [ 1137.385201][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1137.425472][T23263] Bluetooth: hci5: command tx timeout [ 1137.555274][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1137.594476][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.649187][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.670486][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 1137.706649][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.728301][ T9] usb 5-1: config 0 descriptor?? [ 1138.027829][T27248] fuse: Unknown parameter 'grou00000000000000000000' [ 1138.495172][ T5290] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1138.675101][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 1138.683426][ T5290] usb 4-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 1138.708463][ T5290] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1138.740722][ T5290] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1138.750167][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.832057][ T5290] usb 4-1: config 0 descriptor?? [ 1138.946453][ T5290] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1139.083305][T26720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.208036][T27273] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1139.429945][T26720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.490117][T26760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.499870][T26760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.535433][T26760] bridge_slave_0: entered allmulticast mode [ 1139.551081][T26760] bridge_slave_0: entered promiscuous mode [ 1139.784394][T26760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.808310][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1139.818431][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1139.830331][ T9] usb 5-1: USB disconnect, device number 100 [ 1139.864865][T26760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.893821][T26760] bridge_slave_1: entered allmulticast mode [ 1139.916266][T26760] bridge_slave_1: entered promiscuous mode [ 1139.991125][T26720] team0: Port device team_slave_0 added [ 1140.096468][T26760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.140609][T26720] team0: Port device team_slave_1 added [ 1140.272408][T26760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.337450][T26720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.382810][T26720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.487762][T26720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.691898][T26720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.731861][T26720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.829594][T26720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.939309][T26760] team0: Port device team_slave_0 added [ 1141.031992][T26760] team0: Port device team_slave_1 added [ 1141.098018][T26720] hsr_slave_0: entered promiscuous mode [ 1141.108839][T26720] hsr_slave_1: entered promiscuous mode [ 1141.117187][T26720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1141.124897][T26720] Cannot create hsr debugfs directory [ 1141.271249][ T9] usb 4-1: USB disconnect, device number 115 [ 1141.289319][T26760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.297151][T26760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.326320][T26760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.339643][T26760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.387210][T26760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.468096][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1141.479649][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1141.492498][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1141.502233][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1141.510985][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1141.512318][T26760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.528953][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1141.703663][T27533] fuse: Unknown parameter 'group_i00000000000000000000' [ 1142.001941][ T2520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.105345][ T7008] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1142.270518][ T2520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.281549][ T7008] usb 5-1: Using ep0 maxpacket: 32 [ 1142.295076][ T7008] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1142.304199][ T7008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.312391][ T7008] usb 5-1: Product: syz [ 1142.316684][ T7008] usb 5-1: Manufacturer: syz [ 1142.321294][ T7008] usb 5-1: SerialNumber: syz [ 1142.329498][ T7008] usb 5-1: config 0 descriptor?? [ 1142.339452][ T7008] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1142.498958][ T2520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.552394][T26760] hsr_slave_0: entered promiscuous mode [ 1142.572175][T26760] hsr_slave_1: entered promiscuous mode [ 1142.584640][T26760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1142.607187][T26760] Cannot create hsr debugfs directory [ 1142.734132][ T2520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.220210][T26720] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.469639][T26720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.585538][ T55] Bluetooth: hci3: command tx timeout [ 1143.817544][T26720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.989106][T26720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.040411][T27516] chnl_net:caif_netlink_parms(): no params data found [ 1144.390627][ T2520] bridge_slave_1: left allmulticast mode [ 1144.398973][ T2520] bridge_slave_1: left promiscuous mode [ 1144.404685][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.437519][ T2520] bridge_slave_0: left allmulticast mode [ 1144.443227][ T2520] bridge_slave_0: left promiscuous mode [ 1144.450039][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.483436][ T2520] bridge_slave_1: left allmulticast mode [ 1144.489308][ T2520] bridge_slave_1: left promiscuous mode [ 1144.495664][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.545909][ T2520] bridge_slave_0: left allmulticast mode [ 1144.551629][ T2520] bridge_slave_0: left promiscuous mode [ 1144.558756][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.437059][ T7008] gspca_stk1135: reg_w 0x352 err -71 [ 1145.446563][ T7008] gspca_stk1135: serial bus timeout: status=0x00 [ 1145.469423][ T7008] gspca_stk1135: Sensor write failed [ 1145.476527][ T7008] gspca_stk1135: serial bus timeout: status=0x00 [ 1145.482881][ T7008] gspca_stk1135: Sensor write failed [ 1145.489229][ T7008] gspca_stk1135: serial bus timeout: status=0x00 [ 1145.499451][ T7008] gspca_stk1135: Sensor read failed [ 1145.524264][ T7008] gspca_stk1135: serial bus timeout: status=0x00 [ 1145.532298][ T7008] gspca_stk1135: Sensor read failed [ 1145.538515][ T7008] gspca_stk1135: Detected sensor type unknown (0x0) [ 1145.548542][ T7008] gspca_stk1135: serial bus timeout: status=0x00 [ 1145.554908][ T7008] gspca_stk1135: Sensor read failed [ 1145.559611][T27891] vivid-006: disconnect [ 1145.560325][ T7008] gspca_stk1135: serial bus timeout: status=0x00 [ 1145.573755][ T7008] gspca_stk1135: Sensor read failed [ 1145.581922][ T7008] gspca_stk1135: serial bus timeout: status=0x00 [ 1145.589734][ T7008] gspca_stk1135: Sensor write failed [ 1145.596098][ T7008] gspca_stk1135: serial bus timeout: status=0x00 [ 1145.603280][ T7008] gspca_stk1135: Sensor write failed [ 1145.609577][ T7008] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1145.622994][ T7008] usb 5-1: USB disconnect, device number 101 [ 1145.656863][T27885] vivid-006: reconnect [ 1145.657438][ T55] Bluetooth: hci3: command tx timeout [ 1146.027415][T27902] blktrace: Concurrent blktraces are not allowed on sg0 [ 1146.309715][ T2520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.333170][ T2520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.356761][ T2520] bond0 (unregistering): Released all slaves [ 1146.581279][ T2520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.599720][ T2520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.614767][ T2520] bond0 (unregistering): Released all slaves [ 1146.713647][T27516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.748788][T27516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.778198][T27516] bridge_slave_0: entered allmulticast mode [ 1146.825515][T27516] bridge_slave_0: entered promiscuous mode [ 1146.843910][T27516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.860546][T27516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.925348][T27516] bridge_slave_1: entered allmulticast mode [ 1146.977175][T27516] bridge_slave_1: entered promiscuous mode [ 1147.257368][T27935] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4104'. [ 1147.268285][T27935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.275758][T27935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.283468][T27935] bridge0: entered allmulticast mode [ 1147.336694][T27516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.393877][T27516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.523496][T27516] team0: Port device team_slave_0 added [ 1147.523831][T26720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1147.746715][ T55] Bluetooth: hci3: command tx timeout [ 1147.906608][T27516] team0: Port device team_slave_1 added [ 1147.963016][T26720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1148.222646][T27516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.235701][T27516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.264046][T27516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.277985][T26720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1148.683578][T27516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.712441][T27516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.738485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.758739][T27516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.772112][T26720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1149.247463][ T5290] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 1149.318341][T27516] hsr_slave_0: entered promiscuous mode [ 1149.333257][T27516] hsr_slave_1: entered promiscuous mode [ 1149.358975][T27516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1149.389753][T27516] Cannot create hsr debugfs directory [ 1149.427728][ T5290] usb 4-1: Invalid ep0 maxpacket: 64 [ 1149.588829][ T5290] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 1149.775380][ T5290] usb 4-1: Invalid ep0 maxpacket: 64 [ 1149.782482][ T5290] usb usb4-port1: attempt power cycle [ 1149.810221][T26760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1149.817088][ T55] Bluetooth: hci3: command tx timeout [ 1149.907964][T26760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1149.996109][ T2520] hsr_slave_0: left promiscuous mode [ 1150.044050][ T2520] hsr_slave_1: left promiscuous mode [ 1150.067258][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.082229][ T2520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.111300][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.122507][ T2520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.145449][ T5290] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 1150.160289][ T2520] hsr_slave_0: left promiscuous mode [ 1150.174210][ T5290] usb 4-1: Invalid ep0 maxpacket: 64 [ 1150.220458][ T2520] hsr_slave_1: left promiscuous mode [ 1150.264251][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.281551][ T2520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.319188][ T5290] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 1150.323916][ T2520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.342421][T28198] dccp_close: ABORT with 3 bytes unread [ 1150.352875][ T2520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.361150][ T5290] usb 4-1: Invalid ep0 maxpacket: 64 [ 1150.385531][ T5290] usb usb4-port1: unable to enumerate USB device [ 1150.493990][ T2520] veth1_macvtap: left promiscuous mode [ 1150.502054][ T2520] veth0_macvtap: left promiscuous mode [ 1150.510812][ T2520] veth1_vlan: left promiscuous mode [ 1150.518628][ T2520] veth0_vlan: left promiscuous mode [ 1150.537061][ T2520] veth1_macvtap: left promiscuous mode [ 1150.542751][ T2520] veth0_macvtap: left promiscuous mode [ 1150.548910][ T2520] veth1_vlan: left promiscuous mode [ 1150.556706][ T2520] veth0_vlan: left promiscuous mode [ 1150.774120][T21296] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1150.965237][T21296] usb 5-1: Using ep0 maxpacket: 16 [ 1150.972397][T21296] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 1151.005367][T21296] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.037521][T21296] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1151.058636][T21296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.069275][T21296] usb 5-1: config 0 descriptor?? [ 1151.087213][T21296] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1151.373545][T28220] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4116'. [ 1152.097833][ T2520] team0 (unregistering): Port device team_slave_1 removed [ 1152.199243][ T2520] team0 (unregistering): Port device team_slave_0 removed [ 1153.958248][ T2520] team0 (unregistering): Port device team_slave_1 removed [ 1154.082191][ T2520] team0 (unregistering): Port device team_slave_0 removed [ 1154.941443][T26760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1154.970974][T26760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1155.233032][ T7008] usb 5-1: USB disconnect, device number 102 [ 1155.569287][T26760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.647157][T26720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.684432][T26760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.763457][T26720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.815237][T21296] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1155.816885][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.830061][ T8039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.866324][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.873757][ T8039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.966103][T21296] usb 5-1: Using ep0 maxpacket: 8 [ 1156.023539][T21296] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1156.036263][T21296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.044653][T21296] usb 5-1: Product: syz [ 1156.056095][T21296] usb 5-1: Manufacturer: syz [ 1156.061431][T21296] usb 5-1: SerialNumber: syz [ 1156.068359][T21296] usb 5-1: config 0 descriptor?? [ 1156.141170][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.148344][ T8039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.315802][T21296] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1156.359125][T15647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.366270][T15647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.834042][T26720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.904619][T26760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.083036][T21296] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1157.097666][T21296] usb 5-1: USB disconnect, device number 103 [ 1157.261936][T27516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1157.293052][T27516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1157.316909][T27516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1157.354784][T27516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1157.501026][T26760] veth0_vlan: entered promiscuous mode [ 1157.564185][T26760] veth1_vlan: entered promiscuous mode [ 1157.611598][T26720] veth0_vlan: entered promiscuous mode [ 1157.652191][T26720] veth1_vlan: entered promiscuous mode [ 1157.778732][T26760] veth0_macvtap: entered promiscuous mode [ 1157.852785][T26760] veth1_macvtap: entered promiscuous mode [ 1158.000764][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.044725][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.084357][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.128657][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.154723][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.165725][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.176706][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.188592][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.203881][T26760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.218918][T26720] veth0_macvtap: entered promiscuous mode [ 1158.250222][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.261854][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.272556][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.283178][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.293078][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.304606][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.315336][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.326211][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.336125][T26760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.346609][T26760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.357953][T26760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.372205][T26720] veth1_macvtap: entered promiscuous mode [ 1158.378438][ T5290] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1158.451101][T27516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.482144][T26760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.492362][T26760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.518519][T26760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.542021][T26760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.575535][ T5290] usb 5-1: Using ep0 maxpacket: 16 [ 1158.608112][ T5290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.630200][ T5290] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1158.661792][T27516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.675817][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.684111][ T5290] usb 5-1: Product: syz [ 1158.703997][ T5290] usb 5-1: Manufacturer: syz [ 1158.730299][ T5290] usb 5-1: SerialNumber: syz [ 1158.730972][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.745376][ T5290] usb 5-1: config 0 descriptor?? [ 1158.793236][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.813580][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.835229][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.875154][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.910846][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.967207][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.977955][ T5290] usb 5-1: Cannot retrieve CPort count: -71 [ 1158.983931][ T5290] usb 5-1: Cannot retrieve CPort count: -71 [ 1159.000548][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.000972][ T5290] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 1159.026271][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.053753][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.078401][ T5290] usb 5-1: USB disconnect, device number 104 [ 1159.124264][T26720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.226411][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.233594][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.279613][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.304191][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.323751][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.367374][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.402828][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.455133][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.464976][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.487112][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.498183][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.509582][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.520366][T26720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.540432][T26720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.580144][T26720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.695083][ T940] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1159.703437][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.710583][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.727055][T26720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.738075][T26720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.749264][T26720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.761506][T26720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.876242][ T940] usb 4-1: Using ep0 maxpacket: 32 [ 1159.898712][ T940] usb 4-1: too many configurations: 226, using maximum allowed: 8 [ 1159.938489][ T2520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.962289][ T2520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.963095][ T940] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1159.983084][ T940] usb 4-1: can't read configurations, error -61 [ 1160.087462][ T2520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.129472][T27516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.139049][ T2520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.141467][ T940] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1160.207575][ T937] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1160.279925][ T8039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.330823][ T8039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.346580][ T940] usb 4-1: Using ep0 maxpacket: 32 [ 1160.366642][ T940] usb 4-1: too many configurations: 226, using maximum allowed: 8 [ 1160.378181][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.403466][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.436309][ T940] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1160.457587][ T940] usb 4-1: can't read configurations, error -61 [ 1160.464306][ T940] usb usb4-port1: attempt power cycle [ 1160.470555][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.474611][ T937] usb 5-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 1160.490985][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.501979][ T937] usb 5-1: config 0 descriptor?? [ 1160.519438][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.531761][T27516] veth0_vlan: entered promiscuous mode [ 1160.574745][T27516] veth1_vlan: entered promiscuous mode [ 1160.639380][T27516] veth0_macvtap: entered promiscuous mode [ 1160.698533][T27516] veth1_macvtap: entered promiscuous mode [ 1160.801154][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.827291][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1160.837412][ T940] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1160.859253][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.886158][ T940] usb 4-1: Using ep0 maxpacket: 32 [ 1160.891309][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.891333][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.891351][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.907845][ T940] usb 4-1: too many configurations: 226, using maximum allowed: 8 [ 1160.969483][ T937] sony 0003:1430:07BB.0051: unknown main item tag 0x0 [ 1160.976814][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.980909][ T940] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1160.996557][ T937] sony 0003:1430:07BB.0051: hidraw0: USB HID v0.00 Device [HID 1430:07bb] on usb-dummy_hcd.4-1/input0 [ 1161.009718][ T940] usb 4-1: can't read configurations, error -61 [ 1161.016145][ T937] sony 0003:1430:07BB.0051: failed to claim input [ 1161.040820][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.095289][ T8] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1161.096931][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.128378][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.145230][ T940] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1161.169923][ T940] usb 4-1: Using ep0 maxpacket: 32 [ 1161.170436][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.186307][ T940] usb 4-1: too many configurations: 226, using maximum allowed: 8 [ 1161.206909][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.220864][ T940] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1161.227094][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.240560][ T940] usb 4-1: can't read configurations, error -61 [ 1161.249360][T27516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.264143][ T5281] usb 5-1: USB disconnect, device number 105 [ 1161.302413][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1161.343769][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.364536][ T940] usb usb4-port1: unable to enumerate USB device [ 1161.381495][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.407412][ T8] usb 3-1: Product: syz [ 1161.415653][ T8] usb 3-1: Manufacturer: syz [ 1161.421372][ T8] usb 3-1: SerialNumber: syz [ 1161.427451][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.428333][ T8] usb 3-1: config 0 descriptor?? [ 1161.484726][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.565761][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.598020][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.618204][T28503] FAULT_INJECTION: forcing a failure. [ 1161.618204][T28503] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.633228][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.658038][T28503] CPU: 1 UID: 0 PID: 28503 Comm: syz.1.4134 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1161.668869][T28503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1161.678956][T28503] Call Trace: [ 1161.680486][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.682235][T28503] [ 1161.695582][T28503] dump_stack_lvl+0x241/0x360 [ 1161.700290][T28503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1161.705515][T28503] ? __pfx__printk+0x10/0x10 [ 1161.710143][T28503] ? fs_reclaim_acquire+0x93/0x140 [ 1161.715275][T28503] ? __pfx___might_resched+0x10/0x10 [ 1161.720606][T28503] should_fail_ex+0x3b0/0x4e0 [ 1161.721416][ T8] usb 3-1: USB disconnect, device number 93 [ 1161.725295][T28503] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1161.725325][T28503] should_failslab+0xac/0x100 [ 1161.725348][T28503] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1161.731682][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.736935][T28503] __kmalloc_noprof+0xd8/0x400 [ 1161.736969][T28503] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1161.737002][T28503] tomoyo_path_number_perm+0x23a/0x880 [ 1161.749702][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.757167][T28503] ? tomoyo_path_number_perm+0x208/0x880 [ 1161.757196][T28503] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1161.757230][T28503] ? __pfx_lock_acquire+0x10/0x10 [ 1161.757270][T28503] ? __fget_files+0x29/0x470 [ 1161.762704][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.767529][T28503] ? __fget_files+0x3f3/0x470 [ 1161.767563][T28503] security_file_ioctl_compat+0xc6/0x2a0 [ 1161.767593][T28503] __se_compat_sys_ioctl+0xd6/0xc90 [ 1161.767614][T28503] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 1161.767641][T28503] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1161.767670][T28503] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1161.767703][T28503] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1161.767731][T28503] ? lockdep_hardirqs_on+0x99/0x150 [ 1161.767757][T28503] __do_fast_syscall_32+0xb4/0x110 [ 1161.767778][T28503] ? exc_page_fault+0x590/0x8c0 [ 1161.767806][T28503] do_fast_syscall_32+0x34/0x80 [ 1161.767824][T28503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1161.880961][T28503] RIP: 0023:0xf7f76579 [ 1161.885035][T28503] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1161.904646][T28503] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1161.913057][T28503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040345622 [ 1161.921031][T28503] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1161.929001][T28503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1161.936967][T28503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1161.944931][T28503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1161.952906][T28503] [ 1161.963567][T28503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1161.970591][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.983761][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.993740][T27516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.004413][T27516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.069240][T27516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.093751][T27516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.115253][T27516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.125136][T27516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.133928][T27516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.467155][ T8039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.478564][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.522023][ T8039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.574275][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.847439][T28550] mac80211_hwsim hwsim237 wlan1: entered allmulticast mode [ 1162.975256][ T940] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1163.110674][ T940] usb 4-1: device descriptor read/64, error -71 [ 1163.455256][ T940] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1163.655170][ T940] usb 4-1: device descriptor read/64, error -71 [ 1163.772455][ T940] usb usb4-port1: attempt power cycle [ 1163.889222][T28589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4143'. [ 1163.915138][ T5278] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1164.116511][ T5278] usb 2-1: config 0 has no interfaces? [ 1164.122160][ T5278] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1164.131474][ T940] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1164.160127][ T940] usb 4-1: device descriptor read/8, error -71 [ 1164.180929][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.257671][ T5278] usb 2-1: config 0 descriptor?? [ 1164.295696][T23263] Bluetooth: hci6: command 0x0406 tx timeout [ 1164.449920][ T940] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1164.515838][ T940] usb 4-1: device descriptor read/8, error -71 [ 1164.530361][ T55] Bluetooth: hci1: unexpected event 0x01 length: 12 > 1 [ 1164.532641][T28577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1164.574909][T28577] bond_slave_0: entered promiscuous mode [ 1164.580652][T28577] bond_slave_1: entered promiscuous mode [ 1164.586558][T28577] macsec1: entered promiscuous mode [ 1164.600319][T28577] bond0: entered promiscuous mode [ 1164.615541][T28577] macsec1: entered allmulticast mode [ 1164.625968][ T940] usb usb4-port1: unable to enumerate USB device [ 1164.636737][T28577] bond0: entered allmulticast mode [ 1164.678215][T28577] bond_slave_0: entered allmulticast mode [ 1164.806263][T28577] bond_slave_1: entered allmulticast mode [ 1164.889412][ T940] usb 2-1: USB disconnect, device number 106 [ 1165.641909][T28636] SET target dimension over the limit! [ 1165.727978][T28637] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4147'. [ 1165.764292][T28637] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4147'. [ 1165.832924][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1165.861054][T28647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.890829][T28647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.915158][ T940] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1165.946680][T28647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.017892][T28647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.137806][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 1166.150197][ T940] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 1166.159424][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.168387][ T940] usb 1-1: Product: syz [ 1166.172767][ T940] usb 1-1: Manufacturer: syz [ 1166.178132][ T940] usb 1-1: SerialNumber: syz [ 1166.193727][ T940] usb 1-1: config 0 descriptor?? [ 1166.209664][ T940] safe_serial 1-1:0.0: safe_serial converter detected [ 1166.228209][T28650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1166.235172][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1166.246021][T28650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1166.315557][ T940] usb 1-1: safe_serial converter now attached to ttyUSB0 [ 1166.457889][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1166.465944][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.479334][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.500070][ T5290] usb 1-1: USB disconnect, device number 64 [ 1166.527179][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1166.553866][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1166.574262][ T9] usb 2-1: Product: syz [ 1166.579282][ T5290] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 1166.608898][ T9] usb 2-1: Manufacturer: syz [ 1166.643455][ T9] hub 2-1:4.0: USB hub found [ 1166.676364][ T5290] safe_serial 1-1:0.0: device disconnected [ 1166.825391][T28702] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1166.837584][T28702] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1166.867872][ T9] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 1167.055331][T21296] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1167.215991][T21296] usb 5-1: Using ep0 maxpacket: 16 [ 1167.216182][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1167.267864][T21296] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1167.285911][T21296] usb 5-1: can't read configurations, error -61 [ 1167.395105][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1167.420196][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.429990][T21296] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1167.456784][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.467138][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1167.521801][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.558765][ T9] usb 3-1: config 0 descriptor?? [ 1167.645201][T21296] usb 5-1: Using ep0 maxpacket: 16 [ 1167.662901][T21296] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1167.675167][T21296] usb 5-1: can't read configurations, error -61 [ 1167.687657][T21296] usb usb5-port1: attempt power cycle [ 1167.991151][ T9] savu 0003:1E7D:2D5A.0052: item fetching failed at offset 5/8 [ 1168.003137][ T9] savu 0003:1E7D:2D5A.0052: parse failed [ 1168.017360][ T9] savu 0003:1E7D:2D5A.0052: probe with driver savu failed with error -22 [ 1168.031952][T28732] netlink: 304 bytes leftover after parsing attributes in process `syz.3.4162'. [ 1168.041989][T21296] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1168.090245][T21296] usb 5-1: Using ep0 maxpacket: 16 [ 1168.102213][T21296] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1168.118536][T21296] usb 5-1: can't read configurations, error -61 [ 1168.145398][ T5290] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1168.284290][ T9] usb 3-1: USB disconnect, device number 94 [ 1168.285124][T21296] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1168.322347][ T5290] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.343735][ T5290] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1168.362611][T21296] usb 5-1: Using ep0 maxpacket: 16 [ 1168.376568][T21296] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1168.387223][T21296] usb 5-1: can't read configurations, error -61 [ 1168.393756][ T5290] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 1168.410793][T21296] usb usb5-port1: unable to enumerate USB device [ 1168.420089][ T5290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.440464][ T5290] usb 1-1: Product: syz [ 1168.448103][ T5290] usb 1-1: Manufacturer: syz [ 1168.453355][ T5290] usb 1-1: SerialNumber: syz [ 1168.695389][ T5290] usb 1-1: USB disconnect, device number 65 [ 1169.385772][T21296] usb 2-1: USB disconnect, device number 107 [ 1169.539113][T28799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1170.815106][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1170.985264][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1170.992476][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.013591][T28862] netlink: 'syz.3.4182': attribute type 9 has an invalid length. [ 1171.015186][ T5290] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1171.029790][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.056397][T28862] __nla_validate_parse: 2 callbacks suppressed [ 1171.056416][T28862] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.4182'. [ 1171.066014][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1171.142404][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.190699][ T9] usb 2-1: config 0 descriptor?? [ 1171.195156][ T5290] usb 3-1: Using ep0 maxpacket: 8 [ 1171.210406][ T5290] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1171.255423][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1171.315384][ T5290] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.347477][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1171.375608][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1171.390128][ T5290] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1171.404124][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1171.426928][ T5290] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.439874][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1171.452336][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1171.465120][ T5290] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1171.472551][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1171.483914][ T5290] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.495758][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1171.507654][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1171.519624][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1171.519641][ T29] audit: type=1326 audit(1727997954.103:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.519708][ T29] audit: type=1326 audit(1727997954.103:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.519741][ T29] audit: type=1326 audit(1727997954.103:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.606054][ T940] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1171.615920][ T5290] usb 3-1: string descriptor 0 read error: -22 [ 1171.622178][ T5290] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1171.631478][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.653610][ T5290] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1171.699134][ T29] audit: type=1326 audit(1727997954.103:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.747887][ T5278] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1171.769593][ T29] audit: type=1326 audit(1727997954.103:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.818355][ T940] usb 4-1: Using ep0 maxpacket: 8 [ 1171.841340][ T940] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1171.849119][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1171.864678][ T940] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.876536][ T29] audit: type=1326 audit(1727997954.103:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.876576][ T29] audit: type=1326 audit(1727997954.103:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.876609][ T29] audit: type=1326 audit(1727997954.103:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.876640][ T29] audit: type=1326 audit(1727997954.103:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1171.900763][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1171.983954][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1171.996853][ T937] usb 3-1: USB disconnect, device number 95 [ 1172.014137][ T5278] usb 5-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config [ 1172.033228][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1172.048919][ T5278] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1172.061046][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.069551][ T940] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1172.079240][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1172.093927][ T5278] usb 5-1: config 0 descriptor?? [ 1172.102263][ T940] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1172.117917][ T5278] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1172.128756][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1172.141219][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1172.156461][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1172.168764][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1172.181700][ T9] usb 2-1: USB disconnect, device number 108 [ 1172.192261][ T940] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1172.203126][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1172.216096][ T940] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1172.217620][ T29] audit: type=1326 audit(1727997954.103:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28844 comm="syz.1.4177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 1172.228665][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1172.262518][ T940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1172.277405][T28812] adutux: No device or device unplugged -19 [ 1172.294742][ T940] usb 4-1: string descriptor 0 read error: -22 [ 1172.301162][ T940] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1172.310293][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.344010][ T940] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1172.805123][ T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1172.858408][T28931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.880138][ T5278] usb 4-1: USB disconnect, device number 2 [ 1172.887906][T28925] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 1172.902489][T28931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.967808][ T9] usb 1-1: config 0 has no interfaces? [ 1172.974342][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1172.986138][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.017240][ T9] usb 1-1: config 0 descriptor?? [ 1173.065091][ T940] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1173.233916][ T9] usb 1-1: USB disconnect, device number 66 [ 1173.258591][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.275067][ T940] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1173.289585][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.304146][ T940] usb 2-1: config 0 descriptor?? [ 1173.512971][ T940] usbhid 2-1:0.0: can't add hid device: -71 [ 1173.522112][ T940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1173.547666][ T940] usb 2-1: USB disconnect, device number 109 [ 1173.909061][T28981] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4192'. [ 1174.175353][ T5290] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1174.185337][ T940] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1174.304301][T28995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4195'. [ 1174.364642][ T940] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 1174.374256][ T5290] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1174.379352][ T940] usb 4-1: config 0 has no interface number 0 [ 1174.395666][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.399782][ T940] usb 4-1: config 0 interface 27 altsetting 0 endpoint 0x2 has invalid maxpacket 128, setting to 64 [ 1174.418585][ T940] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=71.8f [ 1174.437450][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.437543][ T5290] usb 1-1: config 0 descriptor?? [ 1174.453292][ T940] usb 4-1: Product: syz [ 1174.463677][ T940] usb 4-1: Manufacturer: syz [ 1174.474416][ T940] usb 4-1: SerialNumber: syz [ 1174.483150][ T5228] usb 5-1: USB disconnect, device number 110 [ 1174.490431][ T940] usb 4-1: config 0 descriptor?? [ 1174.728719][ T940] ath6kl: Failed to submit usb control message: -71 [ 1174.769569][ T940] ath6kl: unable to send the bmi data to the device: -71 [ 1174.777172][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1174.786938][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 1174.796948][T23263] Bluetooth: hci4: hardware error 0x00 [ 1174.802781][ T940] ath6kl: Unable to send get target info: -71 [ 1174.808835][ T1120] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.822237][ T940] ath6kl: Failed to init ath6kl core: -71 [ 1174.828805][ T940] ath6kl_usb 4-1:0.27: probe with driver ath6kl_usb failed with error -71 [ 1174.856506][ T940] usb 4-1: USB disconnect, device number 3 [ 1174.939000][ T5290] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1174.979223][ T5281] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1175.138868][T28983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.140186][ T1120] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.175290][ T5281] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1175.184455][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.205292][ T5281] usb 5-1: config 0 has no interface number 0 [ 1175.211430][ T5281] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1175.224779][ T5281] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1175.238024][ T5281] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1175.245285][T28983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.270158][ T5281] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1175.271693][T28983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4191'. [ 1175.279304][ T5281] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1175.279332][ T5281] usb 5-1: Product: syz [ 1175.279349][ T5281] usb 5-1: Manufacturer: syz [ 1175.279365][ T5281] usb 5-1: SerialNumber: syz [ 1175.312671][ T5281] usb 5-1: config 0 descriptor?? [ 1175.366502][T28983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4191'. [ 1175.395923][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1175.402838][ T1120] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.423471][T23260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1175.437544][T23260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1175.449108][T23260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1175.467856][T23260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1175.478705][T23260] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1175.489173][T23260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1175.589398][ T9] usb 2-1: config 0 has no interfaces? [ 1175.594948][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1175.626216][ T1120] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.649853][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.676730][ T5281] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1175.685201][ T5281] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1175.698655][ T5281] usb 5-1: USB disconnect, device number 111 [ 1175.713364][ T9] usb 2-1: config 0 descriptor?? [ 1176.009542][ T5281] usb 1-1: USB disconnect, device number 67 [ 1176.251639][ T5290] usb 2-1: USB disconnect, device number 110 [ 1176.298509][ T30] INFO: task syz.3.3712:22213 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1176.347512][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1176.385328][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1176.394045][ T30] task:syz.3.3712 state:D stack:23776 pid:22213 tgid:22213 ppid:20968 flags:0x20004004 [ 1176.536464][ T30] Call Trace: [ 1176.558792][ T30] [ 1176.597810][ T30] __schedule+0x1895/0x4b30 [ 1176.602413][ T30] ? __pfx___schedule+0x10/0x10 [ 1176.643979][ T30] ? __pfx_lock_release+0x10/0x10 [ 1176.649144][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1176.655213][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1176.661568][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1176.672798][ T30] ? schedule+0x90/0x320 [ 1176.677330][ T30] schedule+0x14b/0x320 [ 1176.685062][ T30] ? down_read+0x6a5/0xa40 [ 1176.689514][ T30] schedule_preempt_disabled+0x13/0x30 [ 1176.705111][ T30] down_read+0x705/0xa40 [ 1176.709405][ T30] ? __pfx_down_read+0x10/0x10 [ 1176.714191][ T30] ? mm_release+0x263/0x430 [ 1176.754875][ T30] ? __pfx_mm_release+0x10/0x10 [ 1176.765782][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1176.771481][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1176.790298][ T30] exit_mm+0xd4/0x310 [ 1176.794338][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1176.808136][ T30] ? __pfx_exit_mm+0x10/0x10 [ 1176.813728][ T30] ? taskstats_exit+0x326/0xa60 [ 1176.819639][ T30] do_exit+0x9b2/0x28e0 [ 1176.824686][ T30] ? __pfx_do_exit+0x10/0x10 [ 1176.829557][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1176.837646][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1176.844433][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1176.851904][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1176.858281][ T30] do_group_exit+0x207/0x2c0 [ 1176.866797][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1176.872042][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1176.890983][ T30] get_signal+0x16a3/0x1740 [ 1176.895797][ T30] ? force_sig_info_to_task+0x41c/0x580 [ 1176.901388][ T30] ? __pfx_get_signal+0x10/0x10 [ 1176.906523][ T30] ? __pfx_force_sig_fault+0x10/0x10 [ 1176.911852][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1176.926757][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1176.941062][ T30] ? irqentry_exit_to_user_mode+0x53/0x280 [ 1176.947528][ T30] irqentry_exit_to_user_mode+0x79/0x280 [ 1176.953206][ T30] exc_page_fault+0x590/0x8c0 [ 1176.958192][ T30] asm_exc_page_fault+0x26/0x30 [ 1176.963073][ T30] RIP: 0023:0xf713c3a5 [ 1176.967442][ T30] RSP: 002b:00000000f756fb50 EFLAGS: 00010246 [ 1176.974536][ T30] RAX: 0000000000000480 RBX: 00000000f740bff4 RCX: 000000002ff3e7b1 [ 1176.984081][ T30] RDX: 0000000000000000 RSI: 00000000f713bc6f RDI: 0000000000000000 [ 1177.001190][ T30] RBP: 00000000f756fdb8 R08: 0000000000000000 R09: 0000000000000000 [ 1177.015340][T23263] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1177.023375][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1177.033464][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1177.044254][ T30] [ 1177.048505][ T30] INFO: task syz.3.3712:22214 blocked for more than 144 seconds. [ 1177.059396][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1177.068032][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1177.077697][ T30] task:syz.3.3712 state:D stack:22816 pid:22214 tgid:22213 ppid:20968 flags:0x20004004 [ 1177.089145][ T30] Call Trace: [ 1177.094207][ T30] [ 1177.101517][ T30] __schedule+0x1895/0x4b30 [ 1177.106160][ T30] ? __pfx___schedule+0x10/0x10 [ 1177.111051][ T30] ? __pfx_lock_release+0x10/0x10 [ 1177.117287][ T30] ? schedule+0x90/0x320 [ 1177.122545][ T30] schedule+0x14b/0x320 [ 1177.127793][ T30] ? down_read+0x6a5/0xa40 [ 1177.133337][ T30] schedule_preempt_disabled+0x13/0x30 [ 1177.143102][ T30] down_read+0x705/0xa40 [ 1177.148569][ T30] ? __pfx_down_read+0x10/0x10 [ 1177.153380][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1177.160694][ T30] filemap_fault+0xd54/0x1950 [ 1177.165467][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1177.170603][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1177.176853][ T30] ? __pfx_lock_release+0x10/0x10 [ 1177.181915][ T30] ? pte_offset_map_nolock+0x137/0x1f0 [ 1177.187521][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1177.192750][ T30] __do_fault+0x135/0x460 [ 1177.197139][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1177.203869][ T30] handle_pte_fault+0x2d1c/0x6800 [ 1177.210380][ T30] ? mark_lock+0x9a/0x360 [ 1177.214746][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1177.221186][ T30] ? __lock_acquire+0x1384/0x2050 [ 1177.227389][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 1177.234583][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 1177.241553][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1177.250999][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1177.256386][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1177.264492][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 1177.279429][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 1177.284694][ T30] ? exc_page_fault+0x113/0x8c0 [ 1177.289685][ T30] exc_page_fault+0x459/0x8c0 [ 1177.294486][ T30] asm_exc_page_fault+0x26/0x30 [ 1177.300410][ T30] RIP: 0023:0xf724b864 [ 1177.304589][ T30] RSP: 002b:00000000f57054d8 EFLAGS: 00010246 [ 1177.311763][ T30] RAX: 0000000000000000 RBX: 00000000f740bff4 RCX: 0000000000000000 [ 1177.319805][ T30] RDX: 0000000020000040 RSI: 00000000f5705548 RDI: 000000000000000b [ 1177.328885][ T30] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 1177.349620][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1177.360263][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1177.369375][ T30] [ 1177.374487][ T30] INFO: task syz.3.3712:22233 blocked for more than 144 seconds. [ 1177.384834][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1177.392539][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1177.404716][ T30] task:syz.3.3712 state:D stack:26744 pid:22233 tgid:22213 ppid:20968 flags:0x20000004 [ 1177.405346][ T1120] bridge_slave_1: left allmulticast mode [ 1177.414967][ T30] Call Trace: [ 1177.423862][ T30] [ 1177.465865][ T30] __schedule+0x1895/0x4b30 [ 1177.470476][ T30] ? __pfx___schedule+0x10/0x10 [ 1177.485124][ T1120] bridge_slave_1: left promiscuous mode [ 1177.495940][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.504370][ T30] ? __pfx_lock_release+0x10/0x10 [ 1177.515240][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1177.521281][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1177.556650][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1177.561832][ T30] ? schedule+0x90/0x320 [ 1177.593483][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.600170][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.605129][T23263] Bluetooth: hci1: command tx timeout [ 1177.715246][ T30] schedule+0x14b/0x320 [ 1177.719471][ T30] ? down_read+0x6a5/0xa40 [ 1177.723903][ T30] schedule_preempt_disabled+0x13/0x30 [ 1177.803834][ T30] down_read+0x705/0xa40 [ 1177.857299][ T30] ? __pfx_down_read+0x10/0x10 [ 1177.862134][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1177.935133][ T30] filemap_fault+0xd54/0x1950 [ 1177.939887][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1178.015127][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1178.020389][ T30] ? __pfx_lock_release+0x10/0x10 [ 1178.106976][ T30] ? pte_offset_map_nolock+0x137/0x1f0 [ 1178.112504][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1178.155164][ T30] __do_fault+0x135/0x460 [ 1178.159555][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1178.167557][ T30] handle_pte_fault+0x2d1c/0x6800 [ 1178.172641][ T30] ? __lock_acquire+0x1384/0x2050 [ 1178.178997][ T30] ? mark_lock+0x9a/0x360 [ 1178.183360][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1178.190261][ T30] ? __lock_acquire+0x1384/0x2050 [ 1178.195642][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 1178.202894][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 1178.209296][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1178.216206][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1178.221519][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1178.227246][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 1178.232490][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 1178.239168][ T30] ? exc_page_fault+0x113/0x8c0 [ 1178.244061][ T30] exc_page_fault+0x459/0x8c0 [ 1178.252274][ T30] asm_exc_page_fault+0x26/0x30 [ 1178.257458][ T30] RIP: 0023:0xf7248962 [ 1178.261545][ T30] RSP: 002b:00000000f56e5140 EFLAGS: 00010246 [ 1178.310560][ T30] RAX: 00000000f56e5160 RBX: 00000000000003ff RCX: 0000000000000000 [ 1178.334890][ T30] RDX: 00000000f712b860 RSI: 00000000200005c0 RDI: 00000000f56e5160 [ 1178.343244][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1178.351646][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1178.359853][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1178.371362][ T30] [ 1178.378168][ T30] INFO: task syz.3.3712:22247 blocked for more than 145 seconds. [ 1178.430683][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1178.438614][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1178.450843][ T30] task:syz.3.3712 state:D stack:26608 pid:22247 tgid:22213 ppid:20968 flags:0x20000004 [ 1178.464834][ T30] Call Trace: [ 1178.472021][ T30] [ 1178.476012][ T30] __schedule+0x1895/0x4b30 [ 1178.481370][ T30] ? __pfx___schedule+0x10/0x10 [ 1178.487371][ T30] ? __pfx_lock_release+0x10/0x10 [ 1178.492443][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1178.501325][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1178.508630][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1178.514635][ T30] ? schedule+0x90/0x320 [ 1178.518980][ T30] schedule+0x14b/0x320 [ 1178.523165][ T30] schedule_preempt_disabled+0x13/0x30 [ 1178.528729][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1178.534482][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1178.542382][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1178.548902][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1178.553967][ T30] ? mas_preallocate+0x5fe/0x8c0 [ 1178.559897][ T30] ? __pfx_mas_preallocate+0x10/0x10 [ 1178.566259][ T30] down_write+0x1d7/0x220 [ 1178.570614][ T30] ? __pfx_down_write+0x10/0x10 [ 1178.578029][ T30] __split_vma+0x60d/0xc50 [ 1178.583254][ T30] ? __pfx___split_vma+0x10/0x10 [ 1178.589133][ T30] ? validate_chain+0x11e/0x5920 [ 1178.594870][ T30] vms_gather_munmap_vmas+0x2ee/0x15d0 [ 1178.601300][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1178.607361][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1178.612588][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1178.618094][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1178.624089][ T30] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1178.630935][ T30] ? __schedule+0x189d/0x4b30 [ 1178.636587][ T30] do_vmi_align_munmap+0x423/0x730 [ 1178.642519][ T30] ? __lock_acquire+0x1384/0x2050 [ 1178.650261][ T30] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1178.656892][ T30] ? mas_find+0x8c0/0xbb0 [ 1178.662010][ T30] do_vmi_munmap+0x24e/0x2d0 [ 1178.667648][ T30] do_munmap+0x18a/0x240 [ 1178.671927][ T30] ? __pfx_do_munmap+0x10/0x10 [ 1178.678290][ T30] ? __pfx_down_write_killable+0x10/0x10 [ 1178.684112][ T30] ? futex_wait+0x285/0x360 [ 1178.688729][ T30] ? __pfx_futex_wait+0x10/0x10 [ 1178.693606][ T30] __se_sys_mremap+0xef0/0x1af0 [ 1178.699033][ T30] ? __pfx___se_sys_mremap+0x10/0x10 [ 1178.705657][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1178.712516][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1178.719793][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1178.727331][ T30] ? __ia32_sys_mremap+0x20/0xc0 [ 1178.732299][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1178.738517][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1178.743539][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1178.749714][ T30] do_fast_syscall_32+0x34/0x80 [ 1178.755610][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1178.762761][ T30] RIP: 0023:0xf741d579 [ 1178.767993][ T30] RSP: 002b:00000000f56c456c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 1178.778159][ T30] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000001000 [ 1178.787342][ T30] RDX: 0000000000001000 RSI: 0000000000000003 RDI: 0000000020481000 [ 1178.795638][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1178.804157][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1178.812484][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1178.820622][ T30] [ 1178.823718][ T30] [ 1178.823718][ T30] Showing all locks held in the system: [ 1178.831680][ T30] 3 locks held by kworker/u8:1/12: [ 1178.837158][ T30] #0: ffff88814c3ba948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1178.848927][ T30] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1178.851124][ T1120] bridge_slave_0: left allmulticast mode [ 1178.863245][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1178.879155][ T30] 1 lock held by khungtaskd/30: [ 1178.884019][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1178.888103][ T1120] bridge_slave_0: left promiscuous mode [ 1178.894453][ T30] 9 locks held by kworker/u8:5/1120: [ 1178.899806][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.905067][ T30] 2 locks held by dhcpcd/4899: [ 1178.916890][ T30] #0: ffff8880667b46c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 1178.927323][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 1178.936348][ T30] 2 locks held by getty/4987: [ 1178.941123][ T30] #0: ffff8880330f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1178.951058][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1178.961336][ T30] 2 locks held by kworker/1:2/5228: [ 1178.966633][ T30] 3 locks held by kworker/1:5/5290: [ 1178.971841][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1178.983888][ T30] #1: ffffc90003abfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1178.995050][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1179.005532][ T30] 3 locks held by kworker/u8:11/15646: [ 1179.010971][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1179.022715][ T30] #1: ffffc9000a777d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1179.033765][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1179.042849][ T30] 1 lock held by syz.1.3160/19026: [ 1179.048177][ T30] #0: ffff888148c994c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 1179.059870][ T30] 1 lock held by syz.3.3712/22213: [ 1179.065966][ T30] #0: ffff88806c39f398 (&mm->mmap_lock){++++}-{3:3}, at: exit_mm+0xd4/0x310 [ 1179.075621][ T30] 2 locks held by syz.3.3712/22214: [ 1179.081883][ T30] #0: ffff888067492c40 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 1179.094655][ T30] #1: ffff888148c994c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 1179.107153][ T30] 2 locks held by syz.3.3712/22233: [ 1179.112384][ T30] #0: ffff888067492c40 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 1179.123666][ T30] #1: ffff888148c994c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 1179.134539][ T30] 2 locks held by syz.3.3712/22247: [ 1179.140106][ T30] #0: ffff88806c39f398 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_mremap+0x3f9/0x1af0 [ 1179.150056][ T30] #1: ffff888067492c40 (&vma->vm_lock->lock){++++}-{3:3}, at: __split_vma+0x60d/0xc50 [ 1179.160182][ T30] 3 locks held by syz-executor/22709: [ 1179.165880][ T30] #0: ffff888064094d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1179.176210][ T30] #1: ffff888064094078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1179.187656][ T30] #2: ffffffff8fe3df28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1179.198828][ T30] 3 locks held by syz.0.4191/28983: [ 1179.204812][ T30] #0: ffff88807db9cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1179.223252][ T30] #1: ffff88807db9c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1179.234012][ T30] #2: ffffffff8fe3df28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1179.244413][ T30] 3 locks held by syz.1.4201/29033: [ 1179.250216][ T30] #0: ffff888052e94d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1179.260509][ T30] #1: ffff888052e94078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1179.271814][ T30] #2: ffffffff8fe3df28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1179.282863][ T30] 3 locks held by syz-executor/29071: [ 1179.290480][ T30] #0: ffff888033378d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1179.301110][ T30] #1: ffff888033378078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1179.311608][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1179.322882][ T30] 1 lock held by syz.4.4204/29221: [ 1179.328098][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1179.337787][ T30] [ 1179.340155][ T30] ============================================= [ 1179.340155][ T30] [ 1179.372498][ T30] NMI backtrace for cpu 1 [ 1179.376864][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1179.387385][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1179.397507][ T30] Call Trace: [ 1179.400796][ T30] [ 1179.403723][ T30] dump_stack_lvl+0x241/0x360 [ 1179.408395][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1179.413595][ T30] ? __pfx__printk+0x10/0x10 [ 1179.418183][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1179.423116][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1179.428578][ T30] ? _printk+0xd5/0x120 [ 1179.432762][ T30] ? __pfx__printk+0x10/0x10 [ 1179.437378][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1179.442238][ T30] ? __pfx__printk+0x10/0x10 [ 1179.446820][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1179.451832][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1179.457816][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1179.463783][ T30] watchdog+0xff4/0x1040 [ 1179.468015][ T30] ? watchdog+0x1ea/0x1040 [ 1179.472420][ T30] ? __pfx_watchdog+0x10/0x10 [ 1179.477095][ T30] kthread+0x2f0/0x390 [ 1179.481169][ T30] ? __pfx_watchdog+0x10/0x10 [ 1179.485844][ T30] ? __pfx_kthread+0x10/0x10 [ 1179.490430][ T30] ret_from_fork+0x4b/0x80 [ 1179.494935][ T30] ? __pfx_kthread+0x10/0x10 [ 1179.499523][ T30] ret_from_fork_asm+0x1a/0x30 [ 1179.504315][ T30] [ 1179.508481][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1179.513743][ C0] NMI backtrace for cpu 0 [ 1179.513757][ C0] CPU: 0 UID: 0 PID: 2973 Comm: kworker/u8:8 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1179.513777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1179.513794][ C0] Workqueue: bat_events batadv_nc_worker [ 1179.513818][ C0] RIP: 0010:check_preemption_disabled+0x5d/0x120 [ 1179.513838][ C0] Code: 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c5 49 89 f6 49 89 ff 65 4c 8b 24 [ 1179.513852][ C0] RSP: 0018:ffffc9000a9a79e0 EFLAGS: 00000046 [ 1179.513866][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffc9000a9a7a03 [ 1179.513879][ C0] RDX: 0000000000000002 RSI: ffffffff8c0adc40 RDI: ffffffff8c60f860 [ 1179.513891][ C0] RBP: ffffc9000a9a7b48 R08: ffffffff901ce5ef R09: 1ffffffff2039cbd [ 1179.513904][ C0] R10: dffffc0000000000 R11: fffffbfff2039cbe R12: 1ffff92001534f50 [ 1179.513916][ C0] R13: 0000000000000246 R14: ffffc9000a9a7ab0 R15: dffffc0000000000 [ 1179.513933][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1179.513948][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1179.513960][ C0] CR2: 00007ffdc6554f60 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1179.513975][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1179.513986][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1179.513997][ C0] Call Trace: [ 1179.514005][ C0] [ 1179.514012][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1179.514032][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1179.514055][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1179.514079][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1179.514100][ C0] ? nmi_handle+0x14f/0x5a0 [ 1179.514117][ C0] ? nmi_handle+0x2a/0x5a0 [ 1179.514134][ C0] ? check_preemption_disabled+0x5d/0x120 [ 1179.514150][ C0] ? default_do_nmi+0x63/0x160 [ 1179.514169][ C0] ? exc_nmi+0x123/0x1f0 [ 1179.514187][ C0] ? end_repeat_nmi+0xf/0x53 [ 1179.514207][ C0] ? check_preemption_disabled+0x5d/0x120 [ 1179.514224][ C0] ? check_preemption_disabled+0x5d/0x120 [ 1179.514241][ C0] ? check_preemption_disabled+0x5d/0x120 [ 1179.514258][ C0] [ 1179.514264][ C0] [ 1179.514272][ C0] lock_release+0x5ec/0xa30 [ 1179.514296][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1179.514315][ C0] ? __pfx_lock_release+0x10/0x10 [ 1179.514337][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1179.514371][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1179.514390][ C0] batadv_nc_worker+0x28b/0x610 [ 1179.514408][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1179.514427][ C0] ? process_scheduled_works+0x976/0x1850 [ 1179.514449][ C0] process_scheduled_works+0xa63/0x1850 [ 1179.514478][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1179.514502][ C0] ? assign_work+0x364/0x3d0 [ 1179.514523][ C0] worker_thread+0x870/0xd30 [ 1179.514546][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1179.514569][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1179.514591][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1179.514611][ C0] kthread+0x2f0/0x390 [ 1179.514627][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1179.514647][ C0] ? __pfx_kthread+0x10/0x10 [ 1179.514662][ C0] ret_from_fork+0x4b/0x80 [ 1179.514683][ C0] ? __pfx_kthread+0x10/0x10 [ 1179.514698][ C0] ret_from_fork_asm+0x1a/0x30 [ 1179.514725][ C0] [ 1179.535518][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1179.535537][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1179.535560][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1179.535572][ T30] Call Trace: [ 1179.535580][ T30] [ 1179.535589][ T30] dump_stack_lvl+0x241/0x360 [ 1179.535614][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1179.535693][ T30] ? __pfx__printk+0x10/0x10 [ 1179.535716][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1179.535748][ T30] ? vscnprintf+0x5d/0x90 [ 1179.535770][ T30] panic+0x349/0x880 [ 1179.535796][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1179.535817][ T30] ? __pfx_panic+0x10/0x10 [ 1179.535839][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1179.535859][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1179.535883][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1179.535902][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1179.535922][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1179.535945][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1179.535968][ T30] watchdog+0x1033/0x1040 [ 1179.535993][ T30] ? watchdog+0x1ea/0x1040 [ 1179.536019][ T30] ? __pfx_watchdog+0x10/0x10 [ 1179.536041][ T30] kthread+0x2f0/0x390 [ 1179.536059][ T30] ? __pfx_watchdog+0x10/0x10 [ 1179.536079][ T30] ? __pfx_kthread+0x10/0x10 [ 1179.536098][ T30] ret_from_fork+0x4b/0x80 [ 1179.536120][ T30] ? __pfx_kthread+0x10/0x10 [ 1179.536138][ T30] ret_from_fork_asm+0x1a/0x30 [ 1179.536173][ T30] [ 1179.993072][ T30] Kernel Offset: disabled [ 1179.997386][ T30] Rebooting in 86400 seconds..