last executing test programs: 14.160037595s ago: executing program 0 (id=639): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRES8=r4], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x5) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x40000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x42, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_usb_connect$cdc_ecm(0x2, 0x4d, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) fcntl$getown(0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.freeze\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x24600, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16=r0, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r3, @ANYRES64=r10], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="da"], 0x20}}, 0x0) sendfile(r0, r2, &(0x7f0000000040), 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x6, 0xadec2) 10.932597729s ago: executing program 0 (id=739): syz_usb_connect(0x3, 0x35, &(0x7f0000000040)=ANY=[], 0x0) 10.736418313s ago: executing program 2 (id=741): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xa}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000330000000e0001"], 0x34}}, 0x0) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r12, r11}) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r10, {0x290}}, './file0\x00'}) write$binfmt_elf64(r13, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xd, 0x63, 0x6, 0xbf, 0x3, 0xef45f5243f1955af, 0x7, 0x4, 0x40, 0x392, 0x2, 0xffff, 0x38, 0x2, 0xfffc, 0x2, 0x8000}, [{0x5, 0x3, 0x0, 0x9, 0x7, 0x81, 0xe317, 0x100}, {0x7, 0x7, 0xc, 0x0, 0xc9f5, 0x8000, 0x99b4, 0x6}], "ed563397c4d8d2b4c510b0ff6532692cd70b32b574f385afdee816e3d5629b6e94466863f1bb2201a1a262c67b74d58df76c0799a7da42a89e5fbee33d87b13d292d384d8b6f1c3ac62430e7506f9de41f7db2a18d4252b7b65bac97eccce404435fe14faa6dd6c105773088a5c38badecda71c8988e039a9308a76653fe270dd0d8a531fbc4d78481720040803759be1845406562ee78a03b3769f195683f06a48ee01e1c22994c7bfb4e677024b588790cdbbb545f57423a7f16856b6b8d600194eaf0e8b52e9e4f615e6ef4f72adb5c6cb73be927e86548583178bb203f0937024ec44e6c924b205ac5a47d644b3f98074abb04", ['\x00', '\x00', '\x00']}, 0x4a5) 10.544233071s ago: executing program 1 (id=742): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0xf}}, {0x2, 0x0, @loopback=0x7f000002}, {0x2, 0x0, @dev}, 0x13d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000e5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '$!!\x9e'}, {0x20, '{[*$'}, {0x20, '-'}]}, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="2e260f009d040000000f3266ba4100ec36650fc75d85b9800000c00f3235000800000f30b805000000b9060000000f01c10f1bde652e0f309a004800006700c4e29d026a05", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c0011060000001400000f0007000000", @ANYRES32=r8, @ANYBLOB="020002000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r12 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000300)={@mcast1, @private0, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400c6, r11}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf250f0000003c0001801400020064766d72703100000000000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020065727370616e300000000000000000001400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="400001801400020076657468315f746f5f687372000000001400020076657468315f766c616e00000000000014000200000000000000000000000000000000000c00018008000300020000000c00018008000100", @ANYRES32=r9, @ANYBLOB="f1ffffffffff194e", @ANYRES32=r11, @ANYBLOB="080003000300000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000300010000001800018014000200736974300000000000000000000000001c000180080003000100000008000100", @ANYRES32=r15, @ANYBLOB="0800030003000000"], 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x4004801) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) 10.543621197s ago: executing program 2 (id=743): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x17c1, 0x10, 0x0, @opaque="98bea336a79dffe5"}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a0000000000050009000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x17c1, 0x10, 0x0, @opaque="98bea336a79dffe5"}}}}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a0000000000050009000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) (async) 10.207105248s ago: executing program 2 (id=745): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000001200) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}], 0x1, 0x12000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 9.812116711s ago: executing program 2 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet(0x2, 0xa, 0x1) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001003500000008000a00", @ANYRES32=r2], 0x24}}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r3, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0000000200"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}]}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x184, r3, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x150, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x2, @void, @void, @void}}, @random={0xf7, 0xca, "902261d909106a4f36a82adad3401e0eb14f198627fcc076f637d8177288a04d36f231a3014156c72ab1e426162f9f278faac5a1cfda1d7882e528e4a0af81b4f07541e84957864d65807375682a30ddbb3b947ef088fd6cfe93706da15be196bacfef74e74b42e110fbcfa600fa1cd7026dc08b1d9e50d1f129b1a522cb62416fdc1c46561c5b1681188270a9d181defba8975a3fc8353425e67b9bf02ec223443740a85bf359ff4217c71a67ed17191a92e25d9630f883d60e55543da9c3e0e408c2c8675aaf0666ca"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0x70, "40bbca6103519c8c0a2d57a44148b72dddc51d40636fb8eeb66055afa7851e34b43ec01f5b5896c26984679c92b1e75589b8ff82144970aba6358c294a094fa787001c8883ae0bd6368b0f914a85f9a15ba48eb6e62fe0667c8f2a46566aaa60721a49b491b34b68e8bdf81b56a92b24"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x184}, 0x1, 0x0, 0x0, 0x96e51933abbb9670}, 0x4000000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100) (async, rerun: 32) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$hid(r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) socket$unix(0x1, 0x0, 0x0) (async, rerun: 64) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) (async, rerun: 64) clock_getres(0x0, 0x0) (async, rerun: 64) pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r11, 0x5452, &(0x7f0000000080)) 8.976041559s ago: executing program 1 (id=747): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b120bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000600000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.756343641s ago: executing program 1 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = dup(r2) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000140)={0xfffffffffffffe45, 0x2, 0x0, {0x2006, 0x800000000009}}, 0xffffff8f) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) rt_sigaction(0x3e, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) clock_gettime(0xcadf4450ba5b0c31, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x47, 0x0, 0x0, 0x2, 0x7, 0xbac1]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="660a0000000000006111850000000000952137b335e5486187711597af25d71bf3535e"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000440)="66b9260800000f32c7f874ba66b97b02000066b81a00000066ba000000000f309a32db1c01363e2e0f01cb0f0866b9800000c00f326635004000000f3066b8010000000f01d9dbf06782c19c"}], 0x13, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast2}, 0x10) 8.384385502s ago: executing program 2 (id=751): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 8.263157248s ago: executing program 4 (id=752): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0)={0x0, 0x8}, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0x4}, 0x2) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r9, 0x10d, 0xa8, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') 8.000096113s ago: executing program 2 (id=753): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8000000000}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd3, 0x86, 0xa8, 0x10, 0x13d3, 0x3336, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x3, 0x0, 0xe2, 0xa3, 0xbb, 0x4}}]}}]}}, 0x0) 7.331130006s ago: executing program 0 (id=755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x129002) r2 = syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000002540)={0x7, 'vlan0\x00', {0x1f}, 0x90}) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000d86dd6000000400282c00fe8000000000000084000000000000bbfee6"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) syz_usb_disconnect(r1) 7.330865516s ago: executing program 1 (id=756): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r2}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xa6) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x801c581f, 0x0) write$FUSE_LK(r0, &(0x7f00000021c0)={0x28, 0x0, r4}, 0x28) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, 0x0, 0x0, 0xffffffffffffffff) 7.308569925s ago: executing program 3 (id=757): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000240)=@generic={0x80}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x228000, 0x800}, 0x20) mbind(&(0x7f0000209000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x4, 0xc0}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2}}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2, 0x2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010101, @multicast1]}]}}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = dup(r5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000000000000080006"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x58}]}, 0x24}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x4200) syz_usb_connect(0x2, 0x4f, &(0x7f0000000b80)={{0x12, 0x1, 0x250, 0xd, 0x48, 0x35, 0x20, 0xfff0, 0xfff0, 0x1e11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x6, 0xf7, 0x0, 0x6, [{{0x9, 0x4, 0x1e, 0x0, 0x4, 0xb0, 0x6, 0x71, 0x8, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0xff, 0x8, [@generic={0x7, 0x5, "475308a004"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x6, 0xfd, 0xff}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xd, 0x4, 0x1}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x3, 0x95, 0xc6}}]}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) 7.115461974s ago: executing program 4 (id=758): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x8a, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x4, 0xd0, 0x4b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "79777d1f"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x0, 0x100, 0x80}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x9, 0x5, 0xf8, 0xd2a}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @dmm={0x7, 0x24, 0x14, 0x4, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x7, 0x7b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xc, 0x32, 0x7b}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0xa7, 0x6}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xd, 0x6, 0xff, 0x20, 0xf0}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1007}}, {0x61, &(0x7f0000000340)=@string={0x61, 0x3, "5559ca356981f10b8527055636953e524c4188d2ef6445ce9c47a8f3ea75c559bb91a965f95f3828239cdf9f5a1df9ddfce98cc6e5f2b9c2f5a3b070e0ca495dec9c92c52be9b194e92781a104166f3cffe33b584d3d68e2cd096437b40076"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000004c0), 0x80, 0x102) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x14, 0x2, "72a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.88874726s ago: executing program 1 (id=759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b120bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000640000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.458836824s ago: executing program 1 (id=760): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000003ff1f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f70000"], 0x232) 4.684086064s ago: executing program 4 (id=762): r0 = getpid() migrate_pages(r0, 0x6, &(0x7f0000000000)=0x7ff, &(0x7f0000000040)=0xfff) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x40}, 0x1, 0x2}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfffffffd, 0xf22, 0x6, 0x20, r1, 0x4, '\x00', r3, r4, 0x1, 0x5, 0x5, 0x1, @void, @value, @void, @value}, 0x50) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000008000000000000000000000850000006d00000018110000", @ANYRES32=r5], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000480)=0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f0000000200007c7d99", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x4040080) (async) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'vlan\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) (async) r13 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r14 = dup2(r13, r13) sendto$inet(r14, &(0x7f0000000200)="5ef257953c4e064dc2059311c396e7a5cbf0f93846677f74c9b62e3081d9666ea3a572c273735fd78592ee0baf5f0f51e1df00039c40ccf7263910a6499e57204cc83b237ee119e3f080e5bcb45a3d55d8a1f09df87fc28945dc818487ca6ded25e5e55fec91c8d29e7353c856cde83b2de785ea8b45be3e452eb2c5762f77a058bbf4e635a608c438245c40deeb2f98ea2e970682c4a441ee757b5df35e17e3e0b47848b698c3fec4b0b21b76a5244f275b864c3083cf631a30bda471fcef86707078c113c1c53fadd25db632336b3e2525a3", 0xd3, 0x4000, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r13, 0x40045532, &(0x7f0000000140)) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) 4.085865887s ago: executing program 4 (id=763): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r2 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0xc40) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000380)={0xffffffffffffff3e, 0x903, 0x4, 0x4, 0x1, 0x9aa, "edcb206fb012ad89fe4df92942f394c4", 0x40, 0x7, 0x7, 0x9, 0xa9, 0x4, 0x78}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') read$FUSE(r4, &(0x7f000000db00)={0x2020}, 0x2020) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x208000) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002140)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x0) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/90, 0x5a}}], 0x1, 0x10042, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fe8000000000bb159a820f000000000000000000bbe002000100"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100002000000000000"], 0xcc}}, 0x0) 4.075842151s ago: executing program 0 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="642f81a26421aa01c1cca619eac9a2b8fc2da6e77d338b4fdb2f3282fa7e66626d3f58047d81d1"], 0x1c}}, 0x0) 3.866969759s ago: executing program 3 (id=765): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = userfaultfd(0x80001) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$UFFDIO_ZEROPAGE(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x23, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x0, 0x80, 0xf1, 0x3, 0x33, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x10, 0x3, 0x6}}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xdc, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4040) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000200)={0x4, @win={{0x3, 0x2, 0x10001, 0x7}, 0x9, 0x101, 0x0, 0xd1, 0x0, 0x7}}) (async) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000200)={0x4, @win={{0x3, 0x2, 0x10001, 0x7}, 0x9, 0x101, 0x0, 0xd1, 0x0, 0x7}}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc0884123, 0x40944f9c780000) 3.777394115s ago: executing program 0 (id=766): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x0, "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"}) ptrace(0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_gettime(0x0, &(0x7f0000000000)) getsockopt$inet6_int(r2, 0x29, 0x19, 0x0, &(0x7f0000000140)) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x0, "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"}) (async) ptrace(0x10, r3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={0x0}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) getsockopt$inet6_int(r2, 0x29, 0x19, 0x0, &(0x7f0000000140)) (async) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) (async) 3.019984142s ago: executing program 4 (id=767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100b}) syz_open_dev$usbmon(&(0x7f0000000180), 0x7, 0x214002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r3, 0x0) getsockopt$bt_hci(r3, 0x84, 0x2, &(0x7f0000002340)=""/4107, &(0x7f00000000c0)=0x100b) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r2, 0x406, r2) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003380)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/56, 0x1335000, 0x1800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r8, 0xc01864cb, &(0x7f0000000440)={0x0, 0xffffffffffffffff}) 2.772822413s ago: executing program 0 (id=768): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x800020, &(0x7f00000002c0), 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x147982, 0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r3, 0x0) syz_clone(0x41080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.139163289s ago: executing program 4 (id=769): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x3f}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x8010, r0, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}) read$dsp(r0, &(0x7f00000006c0)=""/178, 0xb2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0xe8, 0xe8, 0x1d0, 0x0, 0xe8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xe, 0xe, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xff000000, 'macsec0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x11, 0x2, 0x8}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x1}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7f}}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'veth0_to_bridge\x00', '\x00', {}, {}, 0x88, 0x2, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@ah={{0x30}, {[0x9, 0x2], 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr=0x64010101, @rand_addr=0x64010102, 0xff000000, 0xffffff00, 'geneve0\x00', 'erspan0\x00', {0xff}, {}, 0x62, 0x2, 0x41}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x5, 0x7, 0xdadd0026384ae68a, 0x3, 0x5], 0x6}}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x7fff}, {@empty}, {@multicast1, 0xffd200}, {@broadcast}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x1}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x6aec43739a1e6a2e, {0x5000, 0xdddd0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de3040095c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) unshare(0x20040000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xfec0ffff00000000}}]}}}]}, 0x48}}, 0x0) 1.144289261s ago: executing program 3 (id=770): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000007b00b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.052152922s ago: executing program 3 (id=771): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) epoll_create1(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x2800, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xaf) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010003020000102505a1a4e2000102030109025c0002010900090904000001020d0000052406000105240007000d240f01060000001f00750c8a06241a020b0b09056903ff03101e060904010000020d00000904010102020d0000090582020002090708090503020002087f06"], 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYRES8=r1, @ANYRESHEX=0x0], 0x54}}, 0x0) 968.066479ms ago: executing program 3 (id=772): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_helper', 0x98400, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x8) poll(&(0x7f0000000140)=[{r1, 0x816c}, {r1, 0x100}], 0x2, 0x1004) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 0s ago: executing program 3 (id=773): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e0014000000000000000000008000"}}) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000dc0)={0x7c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x48a9dcbd}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x7c}}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYRES64=r5, @ANYRES64=r1], 0x1c}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000000)={{@host}, 0x2}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0xba8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0xad8, 0x20a, 0x278, 0xad8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x6, 0x0, 0x0, 0x3ff, 0x401}}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x888, 0x8f0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc08) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_lifetime={0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x88}}, 0x4000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x80800) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="200000002a00214800000000000000000400002c041985000e800800180085baf32507ff6077113ca8dead356651ab935ec6efa1ec1e922f8f1b3fb6a8c09b3a4cd49546a28c51a1e25addbe129dbd5a07da4a6c4fb56dd3c1eb5c0485b893b4674bf3cda57d1ba5ffb40675b543c6d20a8679edfd1046eebd235037a803fe063246948c36c9896439e4e5afb6f0178d99f326423ebbaa05203a9dc4d067285c4f6e04dece4ff3a66238b4718615ef1b89897d98e4"], 0x20}, 0x1, 0x3000000, 0x0, 0x11}, 0x0) kernel console output (not intermixed with test programs): cd.2/usb3/3-1/input/input12 [ 145.746189][ T6838] netlink: 68 bytes leftover after parsing attributes in process `syz.3.425'. [ 147.148415][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 147.212966][ T29] audit: type=1326 audit(1729231843.616:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3777dff9 code=0x7fc00000 [ 147.256277][ T5281] usb 3-1: USB disconnect, device number 21 [ 147.990434][ T3968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.003941][ T5281] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 148.104381][ T3968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.142588][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 148.172676][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 148.179698][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.190701][ T5281] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 148.212154][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.236146][ T3968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.240793][ T5281] usb 3-1: config 0 descriptor?? [ 148.275304][ T5281] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 148.292526][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 148.300729][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.330648][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.365034][ T9] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.400493][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.407959][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 148.418288][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.429286][ T9] usb 2-1: config 0 descriptor?? [ 148.429780][ T3968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.629126][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.640511][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.651150][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.665834][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.685589][ T5281] usb 3-1: USB disconnect, device number 22 [ 148.691781][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.710657][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.754715][ T3968] bridge_slave_1: left allmulticast mode [ 148.784200][ T3968] bridge_slave_1: left promiscuous mode [ 148.790060][ T3968] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.849085][ T9] hid-generic 0003:045E:05DA.0008: ignoring exceeding usage max [ 148.853684][ T3968] bridge_slave_0: left allmulticast mode [ 148.884139][ T9] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x7 [ 148.894481][ T3968] bridge_slave_0: left promiscuous mode [ 148.902315][ T3968] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.922673][ T9] hid-generic 0003:045E:05DA.0008: unbalanced collection at end of report description [ 148.950162][ T9] hid-generic 0003:045E:05DA.0008: probe with driver hid-generic failed with error -22 [ 149.047865][ T25] usb 2-1: USB disconnect, device number 25 [ 149.674562][ T6924] netlink: 'syz.1.449': attribute type 3 has an invalid length. [ 149.764093][ T3968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.793523][ T3968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.813913][ T3968] bond0 (unregistering): Released all slaves [ 150.744167][ T5237] Bluetooth: hci1: command tx timeout [ 150.799200][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 150.807114][ T5282] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 150.896123][ T3968] hsr_slave_0: left promiscuous mode [ 150.912081][ T3968] hsr_slave_1: left promiscuous mode [ 150.924425][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.936554][ T3968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.963671][ T3968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.980006][ T3968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.987485][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 151.014092][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.048402][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.052502][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 151.069819][ T3968] veth1_macvtap: left promiscuous mode [ 151.082603][ T5282] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.102498][ T3968] veth0_macvtap: left promiscuous mode [ 151.109694][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.118887][ T3968] veth1_vlan: left promiscuous mode [ 151.130621][ T3968] veth0_vlan: left promiscuous mode [ 151.141144][ T5282] usb 5-1: config 0 descriptor?? [ 151.164522][ T5282] hub 5-1:0.0: USB hub found [ 151.242524][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 151.254050][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 233: 215, using maximum allowed: 30 [ 151.282676][ T25] usb 3-1: config 0 interface 0 altsetting 233 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.317568][ T25] usb 3-1: config 0 interface 0 altsetting 233 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.348711][ T25] usb 3-1: config 0 interface 0 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 215 [ 151.365814][ T5282] hub 5-1:0.0: 1 port detected [ 151.372316][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.388156][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice=a8.00 [ 151.405260][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.433250][ T25] usb 3-1: config 0 descriptor?? [ 151.904656][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.942578][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.073563][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.106595][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.258596][ T25] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 152.385751][ T3968] team0 (unregistering): Port device team_slave_1 removed [ 152.570493][ T3968] team0 (unregistering): Port device team_slave_0 removed [ 152.624154][ T25] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 152.632707][ T25] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -71 [ 152.682615][ T25] usb 3-1: USB disconnect, device number 23 [ 152.828463][ T5237] Bluetooth: hci1: command tx timeout [ 153.459927][ T9] usb 5-1: USB disconnect, device number 19 [ 153.613262][ T6978] bridge_slave_1: left allmulticast mode [ 153.619084][ T6978] bridge_slave_1: left promiscuous mode [ 153.626518][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.637632][ T6978] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 153.848006][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.875808][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.893470][ T6896] bridge_slave_0: entered allmulticast mode [ 153.900599][ T6896] bridge_slave_0: entered promiscuous mode [ 153.922787][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.945145][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.982896][ T6896] bridge_slave_1: entered allmulticast mode [ 154.005858][ T6896] bridge_slave_1: entered promiscuous mode [ 154.073359][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 154.093157][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.111542][ T7000] netlink: 'syz.2.465': attribute type 29 has an invalid length. [ 154.121344][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.201282][ T7000] netlink: 'syz.2.465': attribute type 29 has an invalid length. [ 154.225187][ T6896] team0: Port device team_slave_0 added [ 154.243875][ T7003] netlink: 'syz.2.465': attribute type 29 has an invalid length. [ 154.284973][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.309314][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.322775][ T6896] team0: Port device team_slave_1 added [ 154.331508][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.344899][ T25] usb 2-1: Product: syz [ 154.350049][ T25] usb 2-1: Manufacturer: syz [ 154.367473][ T7000] netlink: 'syz.2.465': attribute type 29 has an invalid length. [ 154.372567][ T25] usb 2-1: SerialNumber: syz [ 154.532043][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.569990][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.644587][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.794771][ T6992] netlink: 766 bytes leftover after parsing attributes in process `syz.1.462'. [ 154.858135][ T7020] binder: 7012:7020 ioctl c028aa03 20000100 returned -22 [ 154.868898][ T7015] netlink: 'syz.1.462': attribute type 12 has an invalid length. [ 154.903223][ T5237] Bluetooth: hci1: command tx timeout [ 154.925369][ T7015] netlink: 'syz.1.462': attribute type 29 has an invalid length. [ 154.933773][ T7015] netlink: 'syz.1.462': attribute type 2 has an invalid length. [ 154.941964][ T7015] netlink: 128 bytes leftover after parsing attributes in process `syz.1.462'. [ 155.071487][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.090676][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.172593][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.266492][ T6992] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.462'. [ 155.340057][ T6896] hsr_slave_0: entered promiscuous mode [ 155.416612][ T6896] hsr_slave_1: entered promiscuous mode [ 155.439526][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.458484][ T6896] Cannot create hsr debugfs directory [ 155.479218][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.507113][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.702529][ T47] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 155.785474][ T25] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 155.805316][ T25] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 155.839721][ T25] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 155.854855][ T47] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.881235][ T47] usb 5-1: config 0 has no interface number 0 [ 155.908750][ T47] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.988820][ T47] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.000432][ T25] cdc_ncm 2-1:1.0: setting tx_max = 32 [ 156.046101][ T47] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 156.073177][ T25] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 156.106309][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.197243][ T47] usb 5-1: config 0 descriptor?? [ 156.207069][ T25] usb 2-1: USB disconnect, device number 26 [ 156.223116][ T25] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 156.477125][ T7049] xt_policy: output policy not valid in PREROUTING and INPUT [ 156.737715][ T47] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.000A/input/input13 [ 156.787715][ T6896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 156.827604][ T6896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 156.881153][ T6896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 156.916885][ T47] holtek_kbd 0003:04D9:A055.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 156.941411][ T6896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 156.976567][ T47] usb 5-1: USB disconnect, device number 20 [ 156.983016][ T5237] Bluetooth: hci1: command tx timeout [ 157.117088][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.186509][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.219288][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.226482][ T5743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.333762][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.340957][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.430560][ T6896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.543211][ T5281] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 157.545302][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.667206][ T6896] veth0_vlan: entered promiscuous mode [ 157.683337][ T5281] usb 2-1: device descriptor read/64, error -71 [ 157.729528][ T6896] veth1_vlan: entered promiscuous mode [ 157.778781][ T6896] veth0_macvtap: entered promiscuous mode [ 157.805627][ T6896] veth1_macvtap: entered promiscuous mode [ 157.857363][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.877956][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.902341][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.922389][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.945440][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.963044][ T5281] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 157.966352][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.988999][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.006460][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.018708][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.056024][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.092485][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.112790][ T5281] usb 2-1: device descriptor read/64, error -71 [ 158.118055][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.140164][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.165769][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.187235][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.201839][ T6896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.222689][ T5282] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 158.223258][ T6896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.233773][ T5281] usb usb2-port1: attempt power cycle [ 158.263550][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.315023][ T6896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.332588][ T6896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.341372][ T6896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.353214][ T6896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.440417][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 158.454978][ T5282] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=16.64 [ 158.466069][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.476242][ T5282] usb 3-1: Product: syz [ 158.480485][ T5282] usb 3-1: Manufacturer: syz [ 158.488135][ T5282] usb 3-1: SerialNumber: syz [ 158.503090][ T5282] usb 3-1: config 0 descriptor?? [ 158.521835][ T5282] usb 3-1: Found UVC 0.00 device syz (05ac:8501) [ 158.534061][ T5282] usb 3-1: No valid video chain found. [ 158.561789][ T5743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.584212][ T5743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.617626][ T3968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.632517][ T5281] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 158.642999][ T3968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.660967][ T5281] usb 2-1: device descriptor read/8, error -71 [ 158.737052][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.791836][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.821090][ T47] usb 3-1: USB disconnect, device number 24 [ 158.913692][ T5281] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 158.955098][ T5281] usb 2-1: device descriptor read/8, error -71 [ 159.067771][ T5281] usb usb2-port1: unable to enumerate USB device [ 159.261846][ C1] Unknown status report in ack skb [ 160.335199][ T47] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 160.448371][ T5281] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 160.504662][ T47] usb 3-1: device descriptor read/64, error -71 [ 160.623559][ T5281] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 160.646724][ T5281] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 160.658184][ T5281] usb 4-1: can't read configurations, error -61 [ 160.742460][ T47] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 160.792665][ T5281] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 160.882370][ T47] usb 3-1: device descriptor read/64, error -71 [ 160.953750][ T5281] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 160.975827][ T5281] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 160.983913][ T5281] usb 4-1: can't read configurations, error -61 [ 160.990576][ T5281] usb usb4-port1: attempt power cycle [ 160.992831][ T47] usb usb3-port1: attempt power cycle [ 161.122548][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 161.255200][ T5290] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 161.282463][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 161.289900][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.308970][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.319087][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.328903][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.339098][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.342431][ T47] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 161.349858][ T5281] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 161.364958][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 161.383242][ T47] usb 3-1: device descriptor read/8, error -71 [ 161.384703][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.405041][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.412656][ T5290] usb 5-1: Using ep0 maxpacket: 16 [ 161.433001][ T9] usb 2-1: Product: syz [ 161.434024][ T5290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.437269][ T9] usb 2-1: Manufacturer: syz [ 161.453208][ T5281] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 161.461207][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.477873][ T9] usb 2-1: SerialNumber: syz [ 161.483701][ T5281] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 161.491559][ T5281] usb 4-1: can't read configurations, error -61 [ 161.492463][ T5290] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.514148][ T5290] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.530762][ T5290] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.541680][ T5290] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.551494][ T5290] usb 5-1: Manufacturer: syz [ 161.566029][ T5290] usb 5-1: config 0 descriptor?? [ 161.632502][ T47] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 161.632746][ T5281] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 161.657420][ T47] usb 3-1: device descriptor read/8, error -71 [ 161.676945][ T5281] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 161.688983][ T5281] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 161.699753][ T5281] usb 4-1: can't read configurations, error -61 [ 161.709547][ T5281] usb usb4-port1: unable to enumerate USB device [ 161.776021][ T47] usb usb3-port1: unable to enumerate USB device [ 161.803347][ T5281] usb 5-1: USB disconnect, device number 21 [ 163.522423][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 163.707494][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 163.741680][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 163.781429][ T9] cdc_ncm 2-1:1.0: bind() failure [ 163.787573][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.818624][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 163.838973][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.861072][ T9] cdc_ncm 2-1:1.1: bind() failure [ 163.883040][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.911409][ T9] usb 2-1: USB disconnect, device number 31 [ 163.925260][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.989805][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 164.001381][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 164.013370][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.025984][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.037372][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 164.077438][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 164.085137][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 164.096521][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.136004][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.187862][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 164.245947][ T25] usb 5-1: string descriptor 0 read error: -22 [ 164.264216][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 164.283800][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.314039][ T25] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 164.467437][ T7288] netlink: 88 bytes leftover after parsing attributes in process `syz.0.528'. [ 164.726025][ T7299] ======================================================= [ 164.726025][ T7299] WARNING: The mand mount option has been deprecated and [ 164.726025][ T7299] and is ignored by this kernel. Remove the mand [ 164.726025][ T7299] option from the mount to silence this warning. [ 164.726025][ T7299] ======================================================= [ 164.832714][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.531'. [ 164.859344][ T7299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.912088][ T7299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.933323][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 164.963490][ T9] usb 5-1: USB disconnect, device number 22 [ 164.965276][ T7295] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 165.072816][ T8] usb 2-1: device descriptor read/64, error -71 [ 165.324552][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 165.353465][ T5281] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 165.473340][ T8] usb 2-1: device descriptor read/64, error -71 [ 165.504552][ T5281] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 165.514220][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.524728][ T5281] usb 4-1: config 0 descriptor?? [ 165.533815][ T5281] pwc: Samsung MPC-C10 USB webcam detected. [ 165.583678][ T8] usb usb2-port1: attempt power cycle [ 165.722497][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 165.738685][ T5281] pwc: send_video_command error -71 [ 165.744691][ T5281] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 165.753917][ T5281] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 165.765409][ T5281] usb 4-1: USB disconnect, device number 27 [ 165.882510][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 165.890371][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.900356][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.915708][ T9] usb 3-1: New USB device found, idVendor=0d57, idProduct=e999, bcdDevice=a7.63 [ 165.928039][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 165.935797][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.948161][ T9] usb 3-1: Product: syz [ 165.952593][ T9] usb 3-1: Manufacturer: syz [ 165.958811][ T9] usb 3-1: SerialNumber: syz [ 165.964729][ T8] usb 2-1: device descriptor read/8, error -71 [ 165.973435][ T9] usb 3-1: config 0 descriptor?? [ 166.060220][ T5739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.181129][ T5739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.212646][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 166.219576][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 166.247576][ T8] usb 2-1: device descriptor read/8, error -71 [ 166.274884][ T5739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.364219][ T25] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 166.374203][ T8] usb usb2-port1: unable to enumerate USB device [ 166.383015][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.389656][ T5739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.405291][ T25] usb 4-1: config 0 descriptor?? [ 166.412556][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.422891][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.433049][ T25] pwc: Samsung MPC-C10 USB webcam detected. [ 166.440580][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.449477][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.459388][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.467768][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.612672][ T5739] bridge_slave_1: left allmulticast mode [ 166.618463][ T5739] bridge_slave_1: left promiscuous mode [ 166.626325][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.635350][ T5739] bridge_slave_0: left allmulticast mode [ 166.641040][ T5739] bridge_slave_0: left promiscuous mode [ 166.647436][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.870471][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 166.900483][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 166.910964][ T25] pwc: recv_control_msg error -32 req 04 val 1700 [ 166.928045][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 166.935277][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 166.942677][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 166.950245][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 166.957686][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 167.203797][ T5739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.217678][ T5739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.230812][ T5739] bond0 (unregistering): Released all slaves [ 167.266458][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 167.279008][ T25] pwc: recv_control_msg error -71 req 02 val 2200 [ 167.286656][ T25] pwc: recv_control_msg error -71 req 06 val 0600 [ 167.302810][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 167.309872][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 167.325674][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 167.340462][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 167.349200][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 167.362126][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 167.370927][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 167.385343][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 167.399751][ T25] pwc: Registered as video71. [ 167.406886][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 167.420153][ T25] usb 4-1: USB disconnect, device number 28 [ 167.855440][ T5739] hsr_slave_0: left promiscuous mode [ 167.866718][ T5739] hsr_slave_1: left promiscuous mode [ 167.910957][ T5739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.952944][ T5739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.983072][ T5739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.990548][ T5739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.073000][ T7345] netlink: 76 bytes leftover after parsing attributes in process `syz.0.545'. [ 168.084094][ T5739] veth1_macvtap: left allmulticast mode [ 168.090087][ T5739] veth1_macvtap: left promiscuous mode [ 168.096872][ T5739] veth0_macvtap: left promiscuous mode [ 168.103976][ T5739] veth1_vlan: left promiscuous mode [ 168.118618][ T5739] veth0_vlan: left promiscuous mode [ 168.489304][ T25] usb 3-1: USB disconnect, device number 29 [ 168.502501][ T5237] Bluetooth: hci3: command tx timeout [ 168.733548][ T5739] team0 (unregistering): Port device team_slave_1 removed [ 168.781216][ T5739] team0 (unregistering): Port device team_slave_0 removed [ 168.983697][ T5279] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 169.163444][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.185485][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 169.203091][ T5279] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 169.215798][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.224281][ T7348] team0: entered promiscuous mode [ 169.229370][ T7348] team_slave_0: entered promiscuous mode [ 169.237687][ T5279] usb 3-1: config 0 descriptor?? [ 169.267213][ T7348] team_slave_1: entered promiscuous mode [ 169.272677][ T7360] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.274028][ T7348] team0: left promiscuous mode [ 169.284065][ T5279] hub 3-1:0.0: USB hub found [ 169.312300][ T7348] team_slave_0: left promiscuous mode [ 169.319211][ T7348] team_slave_1: left promiscuous mode [ 169.333967][ T7345] ÊügáG: entered promiscuous mode [ 169.362055][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 169.380856][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 169.498149][ T5279] hub 3-1:0.0: 2 ports detected [ 169.744391][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.770587][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.780865][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.793909][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.801255][ T7317] bridge_slave_0: entered allmulticast mode [ 169.810409][ T7317] bridge_slave_0: entered promiscuous mode [ 169.820545][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.829087][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.837018][ T7317] bridge_slave_1: entered allmulticast mode [ 169.843373][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.856377][ T7317] bridge_slave_1: entered promiscuous mode [ 169.902829][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.007921][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.045452][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.062385][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 170.159325][ T5279] hub 3-1:0.0: set hub depth failed [ 170.173074][ T7317] team0: Port device team_slave_0 added [ 170.191848][ T7317] team0: Port device team_slave_1 added [ 170.202866][ T9] usb 4-1: device descriptor read/64, error -71 [ 170.221101][ T5279] usb 3-1: USB disconnect, device number 30 [ 170.336583][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.352621][ T5281] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 170.362980][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.421747][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.452422][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 170.461315][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.482297][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.532514][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 170.550094][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.565813][ T5281] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 170.582428][ T5237] Bluetooth: hci3: command tx timeout [ 170.592237][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.612820][ T9] usb 4-1: device descriptor read/64, error -71 [ 170.621569][ T5281] usb 2-1: config 0 descriptor?? [ 170.644519][ T5281] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 170.662913][ T5281] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 170.722870][ T9] usb usb4-port1: attempt power cycle [ 170.844728][ T7317] hsr_slave_0: entered promiscuous mode [ 170.865551][ T7317] hsr_slave_1: entered promiscuous mode [ 170.882051][ T7317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.882668][ T7370] usb usb2: usbfs: process 7370 (syz.1.553) did not claim interface 0 before use [ 170.902459][ T7317] Cannot create hsr debugfs directory [ 171.072312][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 171.093094][ T9] usb 4-1: device descriptor read/8, error -71 [ 171.122290][ T5281] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 171.273009][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 171.292513][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.328629][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 171.341018][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 171.373390][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 171.396229][ T9] usb 4-1: device descriptor read/8, error -71 [ 171.424701][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 171.459040][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 171.502817][ T5281] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 171.518152][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 171.527022][ T9] usb usb4-port1: unable to enumerate USB device [ 171.536678][ T5281] usb 3-1: Product: syz [ 171.540891][ T5281] usb 3-1: Manufacturer: syz [ 171.562565][ T5281] usb 3-1: SerialNumber: syz [ 171.581094][ T5281] usb 3-1: config 0 descriptor?? [ 171.812431][ T5281] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 171.819282][ T5281] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 171.870953][ T7317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.902150][ T7317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.928479][ T7317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.958682][ T7317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.002916][ T5281] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 172.010654][ T5281] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 172.051434][ T5281] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 172.208038][ T5281] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 172.219366][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.296440][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.330877][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.338071][ T5743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.387529][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.394739][ T5743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.596983][ T7317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.615176][ T7317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.673735][ T5237] Bluetooth: hci3: command tx timeout [ 172.683564][ T9] usb 2-1: USB disconnect, device number 36 [ 172.723769][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.757761][ T7317] veth0_vlan: entered promiscuous mode [ 172.769436][ T7317] veth1_vlan: entered promiscuous mode [ 172.805716][ T7317] veth0_macvtap: entered promiscuous mode [ 172.817024][ T7317] veth1_macvtap: entered promiscuous mode [ 172.836363][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.847093][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.858219][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.868931][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.878977][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.889539][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.899553][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.910260][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.922398][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.933861][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.944457][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.954665][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.965809][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.975731][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.986541][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.996638][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.007176][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.018585][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.038955][ T7317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.055737][ T7317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.064971][ T7317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.073905][ T7317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.291280][ T5281] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 173.300146][ T5281] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 173.433386][ T5743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.441276][ T5743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.543010][ T5739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.551410][ T5739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.572504][ T5282] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 173.724132][ T5282] usb 4-1: config 0 has an invalid interface number: 63 but max is 0 [ 173.733592][ T5282] usb 4-1: config 0 has no interface number 0 [ 173.740827][ T5282] usb 4-1: config 0 interface 63 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 173.742878][ T5290] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 173.765685][ T5282] usb 4-1: config 0 interface 63 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 173.797573][ T5282] usb 4-1: New USB device found, idVendor=0499, idProduct=1016, bcdDevice=c2.bc [ 173.820148][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.838843][ T5282] usb 4-1: Product: syz [ 173.850586][ T5282] usb 4-1: Manufacturer: syz [ 173.856730][ T5282] usb 4-1: SerialNumber: syz [ 173.868284][ T5282] usb 4-1: config 0 descriptor?? [ 173.915159][ T5290] usb 2-1: config 27 has an invalid descriptor of length 197, skipping remainder of the config [ 173.934991][ T5290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 63422, setting to 1024 [ 173.948223][ T5290] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 173.959092][ T5290] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.976748][ T5290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.989931][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.004515][ T7431] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 174.019347][ T5290] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.038221][ T5290] usb 2-1: invalid MIDI out EP 0 [ 174.084375][ T25] usb 3-1: USB disconnect, device number 31 [ 174.092463][ T5281] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 174.245001][ T5290] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 174.254137][ T5282] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.263577][ T5281] usb 5-1: Invalid ep0 maxpacket: 16 [ 174.269973][ T5290] usb 2-1: USB disconnect, device number 37 [ 174.315482][ T5282] snd-usb-audio 4-1:0.63: probe with driver snd-usb-audio failed with error -2 [ 174.370932][ T5282] usb 4-1: USB disconnect, device number 33 [ 174.417213][ T5226] udevd[5226]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.63/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.444287][ T5281] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 174.623233][ T5281] usb 5-1: Invalid ep0 maxpacket: 16 [ 174.633810][ T5281] usb usb5-port1: attempt power cycle [ 174.743442][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 174.749728][ T5237] Bluetooth: hci3: command tx timeout [ 174.864112][ T7474] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 174.872934][ T7474] PKCS7: Only support pkcs7_signedData type [ 174.942557][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 174.972406][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 174.987588][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 175.004776][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.008742][ T5281] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 175.038236][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.051758][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.057890][ T5281] usb 5-1: Invalid ep0 maxpacket: 16 [ 175.076768][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.122611][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 175.130040][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.158171][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.170251][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.173097][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 175.184179][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.201326][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.213656][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 175.221140][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.221459][ T5281] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 175.253468][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.262388][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.276985][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.290192][ T8] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 175.290482][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.299380][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.302080][ T8] usb 4-1: config 0 descriptor?? [ 175.324975][ T5281] usb 5-1: Invalid ep0 maxpacket: 16 [ 175.333615][ T5281] usb usb5-port1: unable to enumerate USB device [ 175.392758][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.427672][ T25] usb 3-1: string descriptor 0 read error: -22 [ 175.443371][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 175.482484][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.527919][ T25] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 175.740434][ T8] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 175.747645][ T8] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 175.762338][ T8] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 175.772933][ T8] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 175.780091][ T8] ntrig 0003:1B96:000A.000B: unknown main item tag 0x0 [ 175.793873][ T7503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.832167][ T8] ntrig 0003:1B96:000A.000B: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 175.838922][ T7503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.882553][ T5281] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 176.052699][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 176.065522][ T5281] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.098814][ T5281] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.120087][ T5281] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 176.133235][ T5281] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 176.145663][ T5281] usb 2-1: Product: syz [ 176.150135][ T5281] usb 2-1: Manufacturer: syz [ 176.173409][ T5281] hub 2-1:4.0: USB hub found [ 176.369479][ T5281] hub 2-1:4.0: 2 ports detected [ 176.834293][ T5281] hub 2-1:4.0: set hub depth failed [ 176.894772][ T5281] usb 2-1: USB disconnect, device number 38 [ 177.613548][ T5281] usb 3-1: USB disconnect, device number 32 [ 177.967899][ T8] usb 4-1: USB disconnect, device number 34 [ 178.031760][ T5282] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 178.074560][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 178.109231][ T7545] bridge2: entered promiscuous mode [ 178.127081][ T7545] bridge2: entered allmulticast mode [ 178.173432][ T5282] usb 5-1: device descriptor read/64, error -71 [ 178.248119][ T9] usb 2-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 178.263811][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.270488][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 178.363279][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.396758][ T9] usb 2-1: config 0 descriptor?? [ 178.403370][ T7552] Cannot find add_set index 4 as target [ 178.463054][ T5282] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 178.602476][ T5282] usb 5-1: device descriptor read/64, error -71 [ 178.631896][ T7556] netlink: 'syz.2.582': attribute type 16 has an invalid length. [ 178.714890][ T5281] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 178.723274][ T5282] usb usb5-port1: attempt power cycle [ 178.822434][ T9] usb 2-1: ucan: probing device on interface #0 [ 178.828797][ T9] usb 2-1: ucan: invalid endpoint configuration [ 178.837067][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 178.850628][ T9] usb 2-1: USB disconnect, device number 39 [ 178.872501][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 178.888433][ T5281] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 178.898614][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.909908][ T5281] usb 4-1: Product: syz [ 178.920879][ T5281] usb 4-1: Manufacturer: syz [ 178.929447][ T5281] usb 4-1: SerialNumber: syz [ 178.940474][ T5281] r8152-cfgselector 4-1: Unknown version 0x0000 [ 178.949379][ T5281] r8152-cfgselector 4-1: config 0 descriptor?? [ 178.968072][ T7563] loop0: detected capacity change from 0 to 7 [ 178.975734][ T7563] Dev loop0: unable to read RDB block 7 [ 178.981377][ T7563] loop0: AHDI p1 p2 p3 p4 [ 178.986429][ T7563] loop0: partition table partially beyond EOD, truncated [ 178.994509][ T7563] loop0: p1 start 1633771873 is beyond EOD, truncated [ 179.001691][ T7563] loop0: p2 start 1633771873 is beyond EOD, truncated [ 179.009062][ T7563] loop0: p3 start 1633904498 is beyond EOD, truncated [ 179.072449][ T5282] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 179.103811][ T5282] usb 5-1: device descriptor read/8, error -71 [ 179.206122][ T7570] loop2: detected capacity change from 0 to 7 [ 179.221859][ T7570] Dev loop2: unable to read RDB block 7 [ 179.229385][ T7570] loop2: unable to read partition table [ 179.240871][ T7570] loop2: partition table beyond EOD, truncated [ 179.247171][ T7570] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.342926][ T5282] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 179.381030][ T5282] usb 5-1: device descriptor read/8, error -71 [ 179.440519][ T7575] FAULT_INJECTION: forcing a failure. [ 179.440519][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 179.455452][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.1.587 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 179.466107][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.476206][ T7575] Call Trace: [ 179.479503][ T7575] [ 179.482441][ T7575] dump_stack_lvl+0x241/0x360 [ 179.487140][ T7575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.492438][ T7575] ? __pfx__printk+0x10/0x10 [ 179.497040][ T7575] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 179.502949][ T7575] ? __pfx___might_resched+0x10/0x10 [ 179.508357][ T7575] should_fail_ex+0x3b0/0x4e0 [ 179.513097][ T7575] ? __d_alloc+0x31/0x700 [ 179.513160][ T5282] usb usb5-port1: unable to enumerate USB device [ 179.517450][ T7575] should_failslab+0xac/0x100 [ 179.528505][ T7575] ? __d_alloc+0x31/0x700 [ 179.532887][ T7575] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 179.538663][ T7575] __d_alloc+0x31/0x700 [ 179.542862][ T7575] ? _raw_spin_unlock+0x28/0x50 [ 179.547745][ T7575] d_make_root+0x4a/0xe0 [ 179.552007][ T7575] simple_fill_super+0x214/0x640 [ 179.557063][ T7575] ? sget_fc+0x909/0x9c0 [ 179.561341][ T7575] bm_fill_super+0x195/0x220 [ 179.565966][ T7575] ? __pfx_bm_fill_super+0x10/0x10 [ 179.571146][ T7575] get_tree_keyed+0xde/0x170 [ 179.575773][ T7575] vfs_get_tree+0x90/0x2b0 [ 179.580220][ T7575] vfs_cmd_create+0xa0/0x1f0 [ 179.584829][ T7575] ? __se_sys_fsconfig+0xa15/0xf70 [ 179.589978][ T7575] __se_sys_fsconfig+0xa1f/0xf70 [ 179.594942][ T7575] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 179.600420][ T7575] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 179.606438][ T7575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.612790][ T7575] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 179.619104][ T7575] ? syscall_user_dispatch+0x4e/0x90 [ 179.624519][ T7575] ? __x64_sys_fsconfig+0x20/0xc0 [ 179.629579][ T7575] do_syscall_64+0xf3/0x230 [ 179.634106][ T7575] ? clear_bhb_loop+0x35/0x90 [ 179.638816][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.644738][ T7575] RIP: 0033:0x7fa6fb37dff9 [ 179.649795][ T7575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.669418][ T7575] RSP: 002b:00007fa6fc1b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 179.677875][ T7575] RAX: ffffffffffffffda RBX: 00007fa6fb535f80 RCX: 00007fa6fb37dff9 [ 179.685871][ T7575] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 179.693855][ T7575] RBP: 00007fa6fc1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 179.701851][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.709836][ T7575] R13: 0000000000000000 R14: 00007fa6fb535f80 R15: 00007fa6fb65fa28 [ 179.717839][ T7575] [ 179.980846][ T7585] bridge3: entered promiscuous mode [ 179.988249][ T5282] r8152-cfgselector 4-1: USB disconnect, device number 35 [ 179.999047][ T7585] bridge3: entered allmulticast mode [ 180.422816][ T7593] loop0: detected capacity change from 0 to 7 [ 180.430195][ T7593] Dev loop0: unable to read RDB block 7 [ 180.436467][ T7593] loop0: AHDI p1 p2 p3 p4 [ 180.441315][ T7593] loop0: partition table partially beyond EOD, truncated [ 180.448758][ T7593] loop0: p1 start 1633771873 is beyond EOD, truncated [ 180.456423][ T7593] loop0: p2 start 1633771873 is beyond EOD, truncated [ 180.463453][ T7593] loop0: p3 start 1633904498 is beyond EOD, truncated [ 180.680244][ T7597] loop2: detected capacity change from 0 to 7 [ 180.697195][ T7597] Dev loop2: unable to read RDB block 7 [ 180.712747][ T7597] loop2: unable to read partition table [ 180.718601][ T7597] loop2: partition table beyond EOD, truncated [ 180.761906][ T7597] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.862615][ T5281] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 181.036927][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 181.059187][ T5281] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.079701][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.088289][ T5281] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 181.098072][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.117593][ T5281] usb 3-1: config 0 descriptor?? [ 181.142534][ T5282] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 181.325785][ T5282] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.338033][ T5282] usb 4-1: not running at top speed; connect to a high speed hub [ 181.357539][ T5282] usb 4-1: config 115 has an invalid interface number: 67 but max is 2 [ 181.368890][ T7595] program syz.2.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.378639][ T5282] usb 4-1: config 115 has an invalid interface number: 230 but max is 2 [ 181.391687][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 181.402611][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.411261][ T5282] usb 4-1: config 115 has an invalid interface number: 93 but max is 2 [ 181.427483][ T5282] usb 4-1: config 115 has no interface number 0 [ 181.434927][ T5282] usb 4-1: config 115 has no interface number 1 [ 181.443968][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.458194][ T5282] usb 4-1: config 115 has no interface number 2 [ 181.473801][ T5282] usb 4-1: config 115 interface 67 has no altsetting 0 [ 181.491819][ T5281] usbhid 3-1:0.0: can't add hid device: -71 [ 181.505994][ T5282] usb 4-1: config 115 interface 230 has no altsetting 0 [ 181.514306][ T5281] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 181.523852][ T5282] usb 4-1: config 115 interface 93 has no altsetting 0 [ 181.540109][ T5281] usb 3-1: USB disconnect, device number 33 [ 181.549312][ T5282] usb 4-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=aa.60 [ 181.560866][ T7621] openvswitch: netlink: Actions may not be safe on all matching packets [ 181.563693][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.597683][ T9] usb 2-1: config 0 has no interfaces? [ 181.613411][ T5282] usb 4-1: Product: syz [ 181.619158][ T5282] usb 4-1: Manufacturer: syz [ 181.626431][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 181.635818][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.644238][ T5282] usb 4-1: SerialNumber: syz [ 181.651689][ T9] usb 2-1: Product: syz [ 181.657465][ T9] usb 2-1: Manufacturer: syz [ 181.665288][ T9] usb 2-1: SerialNumber: syz [ 181.710145][ T9] usb 2-1: config 0 descriptor?? [ 181.763940][ T7624] loop0: detected capacity change from 0 to 7 [ 181.774342][ T7624] Dev loop0: unable to read RDB block 7 [ 181.780048][ T7624] loop0: AHDI p1 p2 p3 p4 [ 181.790247][ T7624] loop0: partition table partially beyond EOD, truncated [ 181.797929][ T7624] loop0: p1 start 1633771873 is beyond EOD, truncated [ 181.805215][ T7624] loop0: p2 start 1633771873 is beyond EOD, truncated [ 181.812041][ T7624] loop0: p3 start 1633904498 is beyond EOD, truncated [ 181.879508][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.917745][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.938523][ T25] usb 2-1: USB disconnect, device number 40 [ 181.942785][ T5282] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 181.968536][ T5282] usb 4-1: selecting invalid altsetting 0 [ 181.990524][ T7631] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 182.003145][ T2038] pvrusb2: Invalid write control endpoint [ 182.014831][ T5282] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 182.057389][ T5282] usb 4-1: selecting invalid altsetting 0 [ 182.075140][ T5282] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 182.092723][ T5282] usb 4-1: selecting invalid altsetting 0 [ 182.100544][ T5282] usb 4-1: USB disconnect, device number 36 [ 182.185078][ T2038] pvrusb2: Invalid write control endpoint [ 182.191060][ T2038] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 182.218691][ T7641] loop2: detected capacity change from 0 to 7 [ 182.220323][ T7637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.232098][ T7641] Dev loop2: unable to read RDB block 7 [ 182.239251][ T7641] loop2: unable to read partition table [ 182.245642][ T7641] loop2: partition table beyond EOD, truncated [ 182.248992][ T7637] bond1: (slave bond2): making interface the new active one [ 182.252062][ T7641] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.278044][ T2038] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 182.313974][ T2038] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 182.333707][ T7637] bond1: (slave bond2): Enslaving as an active interface with an up link [ 182.362468][ T2038] pvrusb2: Device being rendered inoperable [ 182.384005][ T2038] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 182.412894][ T2038] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 182.441506][ T2038] pvrusb2: Attached sub-driver cx25840 [ 182.579176][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 182.623898][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 182.631968][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 182.658176][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 182.692883][ T2038] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 182.959830][ T2038] TUNER: Unable to find symbol tda829x_probe() [ 183.090282][ T2038] DVB: Unable to find symbol tda9887_attach() [ 183.114131][ T2038] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 183.162523][ T2038] pvrusb2: Attached sub-driver tuner [ 183.176453][ T2038] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 183.244921][ T2038] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 183.274781][ T2038] pvrusb2: Invalid write control endpoint [ 183.307291][ T7675] loop0: detected capacity change from 0 to 7 [ 183.377549][ T7675] Dev loop0: unable to read RDB block 7 [ 183.402823][ T7675] loop0: AHDI p1 p2 p3 p4 [ 183.414545][ T7675] loop0: partition table partially beyond EOD, truncated [ 183.416911][ T2038] pvrusb2: Invalid write control endpoint [ 183.431172][ T7675] loop0: p1 start 1633771873 is beyond EOD, truncated [ 183.449487][ T7675] loop0: p2 start 1633771873 is beyond EOD, truncated [ 183.453035][ T7680] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.457920][ T2038] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 183.482703][ T7675] loop0: p3 start 1633904498 is beyond EOD, truncated [ 183.499895][ T2038] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.524833][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 183.533569][ T2038] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.588132][ T2038] pvrusb2: Device being rendered inoperable [ 183.601073][ T7682] pimreg: entered allmulticast mode [ 183.628649][ T2038] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 183.644513][ T2038] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 183.673017][ T7680] pimreg: left allmulticast mode [ 183.681598][ T2038] pvrusb2: Attached sub-driver cx25840 [ 183.690082][ T7684] loop2: detected capacity change from 0 to 7 [ 183.731549][ T7684] Dev loop2: unable to read RDB block 7 [ 183.750326][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 183.760562][ T7684] loop2: unable to read partition table [ 183.766534][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 183.775003][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 183.783486][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 183.791494][ T2038] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 183.822603][ T7684] loop2: partition table beyond EOD, truncated [ 183.930785][ T7688] netlink: 68 bytes leftover after parsing attributes in process `syz.3.623'. [ 183.940066][ T7684] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.202577][ T7688] netlink: 112 bytes leftover after parsing attributes in process `syz.3.623'. [ 184.363559][ T2038] TUNER: Unable to find symbol tda829x_probe() [ 184.459735][ T2038] DVB: Unable to find symbol tda9887_attach() [ 184.467483][ T2038] tuner: 2-0043: Tuner 4 found with type(s) Radio TV. [ 184.493158][ T2038] pvrusb2: Attached sub-driver tuner [ 184.511719][ T2038] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 184.525088][ T2038] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 184.568809][ T2038] pvrusb2: Invalid write control endpoint [ 184.677259][ T2038] pvrusb2: Invalid write control endpoint [ 184.692475][ T2038] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 184.716558][ T2038] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 184.740785][ T2038] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 184.782547][ T2038] pvrusb2: Device being rendered inoperable [ 184.816679][ T2038] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 184.852374][ T2038] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 184.918196][ T2038] pvrusb2: Attached sub-driver cx25840 [ 184.928469][ T7715] usb usb2: usbfs: process 7715 (syz.4.627) did not claim interface 0 before use [ 185.212324][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 185.229085][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 185.238441][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 185.252889][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 185.273770][ T2038] pvrusb2: Attempted to execute control transfer when device not ok [ 185.298720][ T2038] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 185.372515][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 185.397301][ T8] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 185.422480][ T8] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 185.452432][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 185.471898][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 185.507897][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 185.522524][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 185.533861][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 42318, setting to 1024 [ 185.548249][ T8] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 185.558096][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.566956][ T8] usb 2-1: Product: syz [ 185.571468][ T8] usb 2-1: Manufacturer: syz [ 185.578060][ T8] usb 2-1: SerialNumber: syz [ 185.584413][ T8] usb 2-1: config 0 descriptor?? [ 185.590354][ T7710] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.642485][ T29] audit: type=1326 audit(1729231882.037:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3011b7dff9 code=0x7fc00000 [ 185.665851][ T8] hub 2-1:0.0: bad descriptor, ignoring hub [ 185.682507][ T8] hub 2-1:0.0: probe with driver hub failed with error -5 [ 185.701259][ T8] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 185.808580][ T2038] TUNER: Unable to find symbol tda829x_probe() [ 185.837275][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.849312][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.860508][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 185.878657][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.889553][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.902852][ T9] usb 5-1: config 0 descriptor?? [ 185.989103][ T7736] fuse: Unexpected value for 'default_permissions' [ 186.058683][ T2038] DVB: Unable to find symbol tda9887_attach() [ 186.082634][ T2038] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 186.092786][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.142664][ T2038] pvrusb2: Attached sub-driver tuner [ 186.182804][ T2038] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 186.185579][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.209541][ T7738] loop0: detected capacity change from 0 to 7 [ 186.216139][ T7740] loop2: detected capacity change from 0 to 7 [ 186.225297][ T8] usb 2-1: USB disconnect, device number 41 [ 186.236808][ T5298] Dev loop2: unable to read RDB block 7 [ 186.256502][ T5298] loop2: unable to read partition table [ 186.262786][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 186.270803][ T2038] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 186.288569][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.298850][ T5298] loop2: partition table beyond EOD, truncated [ 186.314484][ T7738] Dev loop0: unable to read RDB block 7 [ 186.320102][ T7738] loop0: AHDI p1 p2 p3 p4 [ 186.342820][ T7738] loop0: partition table partially beyond EOD, truncated [ 186.358476][ T7738] loop0: p1 start 1633771873 is beyond EOD, truncated [ 186.367144][ T7738] loop0: p2 start 1633771873 is beyond EOD, truncated [ 186.368850][ T7740] Dev loop2: unable to read RDB block 7 [ 186.375280][ T7738] loop0: p3 start 1633904498 is beyond EOD, truncated [ 186.405078][ T7740] loop2: unable to read partition table [ 186.410936][ T7740] loop2: partition table beyond EOD, truncated [ 186.443719][ T7740] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.575163][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.832688][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.886912][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.007482][ T5739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.019445][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.164841][ T5739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.304417][ T5739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.485319][ T5739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.533237][ T29] audit: type=1326 audit(1729231883.937:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.603934][ T29] audit: type=1326 audit(1729231883.967:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.671447][ T29] audit: type=1326 audit(1729231883.987:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.748219][ T29] audit: type=1326 audit(1729231883.987:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.764418][ T5739] bridge_slave_0: left allmulticast mode [ 187.778168][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.782669][ T5739] bridge_slave_0: left promiscuous mode [ 187.791186][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.824134][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.833053][ T29] audit: type=1326 audit(1729231883.987:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.858232][ T29] audit: type=1326 audit(1729231883.987:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.858602][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.880885][ T29] audit: type=1326 audit(1729231883.987:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.880936][ T29] audit: type=1326 audit(1729231883.997:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.880975][ T29] audit: type=1326 audit(1729231883.997:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 187.972122][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.981445][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 187.989503][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.565300][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 188.578352][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 188.604032][ T9] usb 5-1: USB disconnect, device number 31 [ 188.772579][ T5282] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 188.911321][ T5739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.923593][ T5739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.935312][ T5739] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 188.947922][ T5739] bond0 (unregistering): Released all slaves [ 188.952624][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 188.967604][ T5739] bond1 (unregistering): (slave bond2): Releasing backup interface [ 188.968231][ T5282] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 188.988227][ T5282] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 188.989637][ T5739] bond1 (unregistering): Released all slaves [ 188.998334][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.015471][ T5282] usb 3-1: Product: syz [ 189.019800][ T5282] usb 3-1: Manufacturer: syz [ 189.024866][ T5282] usb 3-1: SerialNumber: syz [ 189.033411][ T5282] usb 3-1: config 0 descriptor?? [ 189.043848][ T5282] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 189.165844][ T5739] bond2 (unregistering): Released all slaves [ 189.181440][ T7768] tipc: Started in network mode [ 189.186732][ T7768] tipc: Node identity ac1414aa, cluster identity 4711 [ 189.195766][ T7768] tipc: Enabled bearer , priority 10 [ 189.331297][ T5739] ÊügáG: left promiscuous mode [ 189.699561][ T7808] FAULT_INJECTION: forcing a failure. [ 189.699561][ T7808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.754965][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.1.651 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 189.765632][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.775722][ T7808] Call Trace: [ 189.779021][ T7808] [ 189.781987][ T7808] dump_stack_lvl+0x241/0x360 [ 189.786687][ T7808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.791898][ T7808] ? __pfx__printk+0x10/0x10 [ 189.796505][ T7808] ? snprintf+0xda/0x120 [ 189.800775][ T7808] should_fail_ex+0x3b0/0x4e0 [ 189.805477][ T7808] _copy_to_user+0x2f/0xb0 [ 189.809920][ T7808] simple_read_from_buffer+0xca/0x150 [ 189.815317][ T7808] proc_fail_nth_read+0x1e9/0x250 [ 189.820377][ T7808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.825959][ T7808] ? rw_verify_area+0x55e/0x6f0 [ 189.830839][ T7808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.836417][ T7808] vfs_read+0x201/0xbc0 [ 189.840605][ T7808] ? __pfx_lock_release+0x10/0x10 [ 189.845660][ T7808] ? __pfx_vfs_read+0x10/0x10 [ 189.850364][ T7808] ? __fget_files+0x3f3/0x470 [ 189.855066][ T7808] ? fdget_pos+0x24e/0x320 [ 189.859590][ T7808] ksys_read+0x183/0x2b0 [ 189.863945][ T7808] ? __pfx_ksys_read+0x10/0x10 [ 189.868749][ T7808] ? do_syscall_64+0x100/0x230 [ 189.873545][ T7808] ? do_syscall_64+0xb6/0x230 [ 189.878234][ T7808] do_syscall_64+0xf3/0x230 [ 189.882756][ T7808] ? clear_bhb_loop+0x35/0x90 [ 189.887449][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.893364][ T7808] RIP: 0033:0x7fa6fb37ca3c [ 189.897816][ T7808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 189.917433][ T7808] RSP: 002b:00007fa6fc1b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.925956][ T7808] RAX: ffffffffffffffda RBX: 00007fa6fb535f80 RCX: 00007fa6fb37ca3c [ 189.933950][ T7808] RDX: 000000000000000f RSI: 00007fa6fc1b50a0 RDI: 0000000000000004 [ 189.941931][ T7808] RBP: 00007fa6fc1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 189.949920][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.957910][ T7808] R13: 0000000000000000 R14: 00007fa6fb535f80 R15: 00007fa6fb65fa28 [ 189.965910][ T7808] [ 190.022578][ T5233] Bluetooth: hci2: command tx timeout [ 190.154304][ T7765] chnl_net:caif_netlink_parms(): no params data found [ 190.245857][ T9] tipc: Node number set to 2886997162 [ 190.627978][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.669858][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.690237][ T7765] bridge_slave_0: entered allmulticast mode [ 190.734034][ T7765] bridge_slave_0: entered promiscuous mode [ 190.754692][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.761978][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.769722][ T7765] bridge_slave_1: entered allmulticast mode [ 190.777167][ T7765] bridge_slave_1: entered promiscuous mode [ 190.814826][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 190.912680][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.929805][ T7765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.968485][ T7765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.025284][ T5739] hsr_slave_0: left promiscuous mode [ 191.056758][ T5739] hsr_slave_1: left promiscuous mode [ 191.063944][ T5739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.071431][ T5739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.102650][ T8] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 191.105221][ T5739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.132960][ T5739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.182606][ T5290] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 191.213509][ T5739] veth1_macvtap: left promiscuous mode [ 191.229332][ T5739] veth0_macvtap: left promiscuous mode [ 191.243246][ T5739] veth1_vlan: left promiscuous mode [ 191.260864][ T5739] veth0_vlan: left promiscuous mode [ 191.284948][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 191.302951][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.353568][ T8] usb 2-1: config 0 descriptor?? [ 191.370987][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 191.401939][ T5290] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 191.429647][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 191.491548][ T5290] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 191.523539][ T5290] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 191.546857][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.576343][ T8] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 191.582412][ T5290] usb 4-1: Product: syz [ 191.598965][ T8] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 191.607364][ T5290] usb 4-1: Manufacturer: syz [ 191.635617][ T8] usb 2-1: USB disconnect, device number 42 [ 191.641687][ T5290] usb 4-1: SerialNumber: syz [ 191.656535][ T5290] usb 4-1: config 0 descriptor?? [ 191.682120][ T5290] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 191.923870][ T5290] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 192.021625][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.035113][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.046605][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.064377][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.086423][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 192.091914][ T7837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.102388][ T5237] Bluetooth: hci2: command tx timeout [ 192.106791][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.436098][ T5739] team0 (unregistering): Port device team_slave_1 removed [ 192.484675][ T5739] team0 (unregistering): Port device team_slave_0 removed [ 192.668404][ T5282] gspca_zc3xx: reg_w_i err -71 [ 192.712398][ T5282] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 192.725199][ T5282] usb 3-1: USB disconnect, device number 34 [ 193.080534][ T7765] team0: Port device team_slave_0 added [ 193.091823][ T7765] team0: Port device team_slave_1 added [ 193.100065][ T25] usb 4-1: USB disconnect, device number 37 [ 193.253608][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.269604][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.332744][ T7765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.372015][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.379398][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.406381][ T7765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.556196][ T7765] hsr_slave_0: entered promiscuous mode [ 193.611978][ T7765] hsr_slave_1: entered promiscuous mode [ 193.847548][ T7887] loop2: detected capacity change from 0 to 7 [ 193.919186][ T7887] Dev loop2: unable to read RDB block 7 [ 193.985356][ T7887] loop2: unable to read partition table [ 193.991224][ T7887] loop2: partition table beyond EOD, truncated [ 194.096044][ T7887] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.183435][ T5237] Bluetooth: hci2: command tx timeout [ 194.189821][ T5233] Bluetooth: hci3: command tx timeout [ 194.267943][ T7899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.670'. [ 194.285805][ T7860] chnl_net:caif_netlink_parms(): no params data found [ 194.427821][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.435636][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.447839][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.710705][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.842260][ T7933] bridge2: entered promiscuous mode [ 194.847650][ T7933] bridge2: entered allmulticast mode [ 195.062915][ T5290] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 195.073844][ T7937] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.682'. [ 195.111645][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.125440][ T7938] delete_channel: no stack [ 195.199529][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.209684][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.226140][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.240987][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.258236][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.270711][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.279239][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.290087][ T5290] usb 2-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 195.299708][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.313660][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.331154][ T5290] usb 2-1: config 0 descriptor?? [ 195.343904][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.365799][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.383642][ T7860] bridge_slave_0: entered allmulticast mode [ 195.402463][ T7860] bridge_slave_0: entered promiscuous mode [ 195.446140][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.462551][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.470314][ T7860] bridge_slave_1: entered allmulticast mode [ 195.481887][ T7860] bridge_slave_1: entered promiscuous mode [ 195.506773][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.604968][ T7936] delete_channel: no stack [ 195.765613][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.782124][ T7860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.802999][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.808107][ T7860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.822094][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.851308][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.877154][ T5290] usbhid 2-1:0.0: can't add hid device: -71 [ 195.884389][ T5290] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.932731][ T5290] usb 2-1: USB disconnect, device number 43 [ 196.037758][ T7860] team0: Port device team_slave_0 added [ 196.051812][ T7860] team0: Port device team_slave_1 added [ 196.212822][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.219840][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.253291][ T7860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.272274][ T5233] Bluetooth: hci3: command tx timeout [ 196.273553][ T5237] Bluetooth: hci2: command tx timeout [ 196.352670][ T35] bridge_slave_1: left allmulticast mode [ 196.358468][ T35] bridge_slave_1: left promiscuous mode [ 196.370455][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.388378][ T35] bridge_slave_0: left allmulticast mode [ 196.394275][ T35] bridge_slave_0: left promiscuous mode [ 196.399935][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.782095][ T7972] FAULT_INJECTION: forcing a failure. [ 196.782095][ T7972] name failslab, interval 1, probability 0, space 0, times 0 [ 196.808389][ T7972] CPU: 1 UID: 0 PID: 7972 Comm: syz.1.695 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 196.819407][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.829472][ T7972] Call Trace: [ 196.832757][ T7972] [ 196.835695][ T7972] dump_stack_lvl+0x241/0x360 [ 196.840386][ T7972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.845595][ T7972] ? __pfx__printk+0x10/0x10 [ 196.850195][ T7972] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 196.853248][ T938] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 196.856096][ T7972] ? __pfx___might_resched+0x10/0x10 [ 196.868965][ T7972] should_fail_ex+0x3b0/0x4e0 [ 196.873664][ T7972] ? alloc_inode+0x87/0x1a0 [ 196.878179][ T7972] should_failslab+0xac/0x100 [ 196.882975][ T7972] ? alloc_inode+0x87/0x1a0 [ 196.887534][ T7972] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 196.893273][ T7972] alloc_inode+0x87/0x1a0 [ 196.897617][ T7972] new_inode+0x22/0x1d0 [ 196.901788][ T7972] simple_fill_super+0x323/0x640 [ 196.906750][ T7972] bm_fill_super+0x195/0x220 [ 196.911359][ T7972] ? __pfx_bm_fill_super+0x10/0x10 [ 196.916500][ T7972] get_tree_keyed+0xde/0x170 [ 196.921099][ T7972] vfs_get_tree+0x90/0x2b0 [ 196.925538][ T7972] vfs_cmd_create+0xa0/0x1f0 [ 196.930162][ T7972] ? __se_sys_fsconfig+0xa15/0xf70 [ 196.935287][ T7972] __se_sys_fsconfig+0xa1f/0xf70 [ 196.940246][ T7972] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 196.945753][ T7972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.951776][ T7972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.958126][ T7972] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 196.964488][ T7972] ? syscall_user_dispatch+0x4e/0x90 [ 196.969796][ T7972] ? __x64_sys_fsconfig+0x20/0xc0 [ 196.974855][ T7972] do_syscall_64+0xf3/0x230 [ 196.979369][ T7972] ? clear_bhb_loop+0x35/0x90 [ 196.984068][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.990014][ T7972] RIP: 0033:0x7fa6fb37dff9 [ 196.994454][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.014090][ T7972] RSP: 002b:00007fa6fc1b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 197.022543][ T7972] RAX: ffffffffffffffda RBX: 00007fa6fb535f80 RCX: 00007fa6fb37dff9 [ 197.030528][ T7972] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 197.038508][ T7972] RBP: 00007fa6fc1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 197.046485][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.054469][ T7972] R13: 0000000000000000 R14: 00007fa6fb535f80 R15: 00007fa6fb65fa28 [ 197.062461][ T7972] [ 197.090090][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 197.100992][ T938] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.120123][ T938] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.149235][ T938] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.173389][ T938] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 197.200519][ T938] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 197.210784][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.435374][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.447713][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.459704][ T35] bond0 (unregistering): Released all slaves [ 197.472845][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.479983][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.507352][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 197.516627][ T7860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.552532][ T7964] netlink: 'syz.2.692': attribute type 21 has an invalid length. [ 197.584437][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 197.648581][ T938] ntrig 0003:1B96:000A.000C: unknown main item tag 0x0 [ 197.665658][ T938] ntrig 0003:1B96:000A.000C: unknown main item tag 0x0 [ 197.672276][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 197.672655][ T938] ntrig 0003:1B96:000A.000C: unknown main item tag 0x0 [ 197.686373][ T938] ntrig 0003:1B96:000A.000C: unknown main item tag 0x0 [ 197.695079][ T938] ntrig 0003:1B96:000A.000C: unknown main item tag 0x0 [ 197.705267][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.715848][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 197.725265][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.749272][ T25] usb 2-1: config 0 descriptor?? [ 197.750399][ T938] ntrig 0003:1B96:000A.000C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 197.775301][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 197.821264][ T7765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.837139][ T7765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.904066][ T7765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.939567][ T938] usb 3-1: USB disconnect, device number 35 [ 197.966501][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 197.991700][ T7860] hsr_slave_0: entered promiscuous mode [ 198.021746][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.044662][ T7860] hsr_slave_1: entered promiscuous mode [ 198.051220][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.070475][ T7860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.088362][ T7860] Cannot create hsr debugfs directory [ 198.095843][ T7765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.185389][ T25] gspca_vc032x: reg_r err -71 [ 198.190304][ T25] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 198.202643][ T25] usb 2-1: USB disconnect, device number 44 [ 198.342747][ T5237] Bluetooth: hci3: command tx timeout [ 198.394670][ T35] hsr_slave_0: left promiscuous mode [ 198.401281][ T35] hsr_slave_1: left promiscuous mode [ 198.418928][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.427303][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.438969][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.446596][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.472058][ T35] veth1_macvtap: left promiscuous mode [ 198.478044][ T35] veth0_macvtap: left promiscuous mode [ 198.483828][ T35] veth1_vlan: left promiscuous mode [ 198.489321][ T35] veth0_vlan: left promiscuous mode [ 198.642268][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 198.795163][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 198.818870][ T25] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 198.839319][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.848425][ T25] usb 2-1: Product: syz [ 198.853090][ T25] usb 2-1: Manufacturer: syz [ 198.860144][ T25] usb 2-1: SerialNumber: syz [ 198.883121][ T25] usb 2-1: config 0 descriptor?? [ 199.113595][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.144293][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.155920][ T938] usb 2-1: USB disconnect, device number 45 [ 199.189107][ T8006] openvswitch: netlink: Actions may not be safe on all matching packets [ 199.398813][ T35] team0 (unregistering): Port device team_slave_1 removed [ 199.460982][ T35] team0 (unregistering): Port device team_slave_0 removed [ 199.674161][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 199.848699][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 199.864470][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.875613][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.885770][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.899015][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 199.908377][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.962800][ T9] usb 4-1: config 0 descriptor?? [ 200.382084][ T9] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 200.411927][ T9] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 200.425290][ T5237] Bluetooth: hci3: command tx timeout [ 200.459274][ T9] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 200.513760][ T9] microsoft 0003:045E:07DA.000D: no inputs found [ 200.520169][ T9] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 200.839928][ T7765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.960909][ T7765] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.043934][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.051083][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.068456][ T25] usb 4-1: USB disconnect, device number 39 [ 201.079539][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.086677][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.409379][ T7765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.576376][ T7765] veth0_vlan: entered promiscuous mode [ 201.626490][ T7860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.632371][ T5237] Bluetooth: hci0: command 0x0406 tx timeout [ 201.725150][ T7765] veth1_vlan: entered promiscuous mode [ 201.744010][ T7765] veth0_macvtap: entered promiscuous mode [ 201.752051][ T7765] veth1_macvtap: entered promiscuous mode [ 201.767568][ T7765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.778733][ T7765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.788842][ T7765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.799872][ T7765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.809958][ T7765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.820480][ T7765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.831788][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.841632][ T7860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.851465][ T7860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.942058][ T7765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.964646][ T7765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.984641][ T7765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.995403][ T7765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.005731][ T7765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.016487][ T7765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.027937][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.133371][ T7860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.154588][ T7765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.173608][ T7765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.246086][ T7765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.262733][ T7765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.660978][ T8090] netlink: 'syz.1.721': attribute type 2 has an invalid length. [ 202.702126][ T3968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.710464][ T3968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.761196][ T8094] fuse: Bad value for 'user_id' [ 202.790224][ T8094] fuse: Bad value for 'user_id' [ 202.799549][ T7860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.817971][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.852764][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.896298][ T7860] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.917467][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.924654][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.987250][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.994467][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.114418][ T7860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.148673][ T7860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.317453][ T7860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.513173][ T7860] veth0_vlan: entered promiscuous mode [ 203.545979][ T7860] veth1_vlan: entered promiscuous mode [ 203.637347][ T7860] veth0_macvtap: entered promiscuous mode [ 203.657409][ T7860] veth1_macvtap: entered promiscuous mode [ 203.752089][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.781606][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.870780][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.907057][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.937811][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.972753][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.999055][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.034580][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.076740][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.140197][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.180583][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.209828][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.224804][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.235151][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.246411][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.272236][ T7860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.292376][ T7860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.323996][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.360968][ T7860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.392787][ T7860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.422757][ T7860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.439668][ T7860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.657262][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.725905][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.739565][ T5233] Bluetooth: hci1: link tx timeout [ 204.745253][ T5233] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.798388][ T5739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.848538][ T5739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.049197][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 205.049218][ T29] audit: type=1326 audit(1729231901.457:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.120504][ T29] audit: type=1326 audit(1729231901.487:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.144637][ T8165] openvswitch: netlink: Actions may not be safe on all matching packets [ 205.202296][ T29] audit: type=1326 audit(1729231901.487:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.260880][ T29] audit: type=1326 audit(1729231901.497:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.394390][ T29] audit: type=1326 audit(1729231901.497:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.485547][ T29] audit: type=1326 audit(1729231901.497:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.520657][ T8172] loop2: detected capacity change from 0 to 7 [ 205.540575][ T8172] Dev loop2: unable to read RDB block 7 [ 205.570342][ T8172] loop2: unable to read partition table [ 205.589430][ T8172] loop2: partition table beyond EOD, truncated [ 205.598356][ T29] audit: type=1326 audit(1729231901.497:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.628395][ T8172] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.707387][ T29] audit: type=1326 audit(1729231901.497:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.802397][ T29] audit: type=1326 audit(1729231901.497:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 205.856062][ T29] audit: type=1326 audit(1729231901.497:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb26db7dff9 code=0x7ffc0000 [ 206.419195][ T8185] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.740'. [ 206.446693][ T8187] binder: 8186:8187 ioctl c0306201 20000380 returned -14 [ 206.694104][ T8193] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 206.825334][ T5233] Bluetooth: hci1: command 0x0406 tx timeout [ 206.952701][ T5235] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 207.104243][ T5235] usb 2-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 207.122977][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 207.166131][ T5235] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.175773][ T5235] usb 2-1: config 1 has no interface number 0 [ 207.183615][ T5235] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.198361][ T5235] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 207.220183][ T5235] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.231105][ T5235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.240345][ T5235] usb 2-1: Product: syz [ 207.245167][ T5235] usb 2-1: Manufacturer: syz [ 207.249953][ T5235] usb 2-1: SerialNumber: syz [ 207.287990][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 207.299672][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 207.330943][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.378320][ T9] usb 4-1: Product: syz [ 207.419880][ T9] usb 4-1: Manufacturer: syz [ 207.437908][ T9] usb 4-1: SerialNumber: syz [ 207.449951][ T9] usb 4-1: config 0 descriptor?? [ 207.484889][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 207.490137][ T5235] cdc_ncm 2-1:1.1: bind() failure [ 207.556171][ T5235] usb 2-1: USB disconnect, device number 46 [ 207.652414][ T47] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 207.714887][ T35] usb 4-1: Failed to submit usb control message: -71 [ 207.715282][ T5282] usb 4-1: USB disconnect, device number 40 [ 207.731884][ T35] usb 4-1: unable to send the bmi data to the device: -71 [ 207.743755][ T35] usb 4-1: unable to get target info from device [ 207.750737][ T35] usb 4-1: could not get target info (-71) [ 207.760459][ T35] usb 4-1: could not probe fw (-71) [ 207.824625][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.836323][ T47] usb 3-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 207.847567][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.867348][ T47] usb 3-1: config 0 descriptor?? [ 208.092027][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.155528][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.177447][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.212931][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.228795][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.251673][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.270155][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.281207][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.299988][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.311228][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.632342][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 208.638372][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 208.668329][ T47] usb 3-1: USB disconnect, device number 36 [ 209.141614][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.224843][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 51050 - 0 [ 209.316641][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 35811 - 0 [ 209.720057][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.758524][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51050 - 0 [ 209.806014][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 35811 - 0 [ 210.020795][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.062379][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51050 - 0 [ 210.082023][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 35811 - 0 [ 210.206058][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.234453][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.242227][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51050 - 0 [ 210.260965][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.269432][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 35811 - 0 [ 210.280605][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.292113][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.293067][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 210.312731][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.321107][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.490902][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 210.511586][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 210.564301][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.672841][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.681975][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.725570][ T8] usb 5-1: Product: syz [ 210.729798][ T8] usb 5-1: Manufacturer: syz [ 210.735551][ T8] usb 5-1: SerialNumber: syz [ 210.771637][ T8] usb 5-1: config 0 descriptor?? [ 210.777673][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 210.814833][ T8] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.838685][ T8] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 210.986008][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.016430][ T35] team0: left allmulticast mode [ 211.021666][ T35] bridge0: port 1(team0) entered disabled state [ 211.036555][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.070975][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 211.114263][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.144811][ T9] usb 4-1: config 6 has an invalid interface number: 30 but max is 0 [ 211.172438][ T9] usb 4-1: config 6 has no interface number 0 [ 211.210356][ T9] usb 4-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 211.252246][ T9] usb 4-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 211.292685][ T9] usb 4-1: config 6 interface 30 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 211.325444][ T9] usb 4-1: config 6 interface 30 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 211.366313][ T9] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 211.402477][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.427707][ T9] usb 4-1: Product: syz [ 211.440152][ T9] usb 4-1: Manufacturer: syz [ 211.445346][ T9] usb 4-1: SerialNumber: syz [ 211.474259][ T8242] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 211.499265][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.514134][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.522773][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.540646][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.553858][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.566583][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.582451][ T8] em28xx 5-1:0.0: chip ID is em28178 [ 211.813104][ T47] usb 5-1: USB disconnect, device number 32 [ 211.820061][ T47] em28xx 5-1:0.0: Disconnecting em28xx [ 211.860855][ T47] em28xx 5-1:0.0: Freeing device [ 212.247512][ T35] bond0 (unregistering): Released all slaves [ 212.375094][ T35] ɶƣ0GC¦: left promiscuous mode [ 212.422511][ T5237] Bluetooth: hci4: command tx timeout [ 212.491592][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 212.510953][ T35] tipc: Disabling bearer [ 212.517763][ T35] tipc: Left network mode [ 212.774968][ T8274] netlink: 'syz.4.762': attribute type 10 has an invalid length. [ 212.824887][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.854646][ T8274] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.940389][ T9] usbtest 4-1:6.30: usb test device [ 212.946088][ T9] usbtest 4-1:6.30: full-speed {control in/out bulk-out iso-out} tests (+alt) [ 212.959740][ T9] usb 4-1: USB disconnect, device number 41 [ 213.199312][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.206655][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.220770][ T8247] bridge_slave_0: entered allmulticast mode [ 213.263479][ T8247] bridge_slave_0: entered promiscuous mode [ 213.287427][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.326890][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.382626][ T8247] bridge_slave_1: entered allmulticast mode [ 213.414206][ T8247] bridge_slave_1: entered promiscuous mode [ 213.459849][ T8296] netlink: 'syz.3.765': attribute type 12 has an invalid length. [ 213.485462][ T8296] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.765'. [ 213.662535][ T5237] Bluetooth: hci0: command tx timeout [ 213.724455][ T8266] chnl_net:caif_netlink_parms(): no params data found [ 213.889867][ T8303] netlink: 'syz.3.765': attribute type 12 has an invalid length. [ 213.898031][ T8303] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.765'. [ 213.949268][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.043439][ T35] hsr_slave_0: left promiscuous mode [ 214.050260][ T35] hsr_slave_1: left promiscuous mode [ 214.106578][ T35] veth1_macvtap: left promiscuous mode [ 214.112143][ T35] veth0_macvtap: left promiscuous mode [ 214.135813][ T35] veth1_vlan: left promiscuous mode [ 214.152458][ T35] veth0_vlan: left promiscuous mode [ 214.502568][ T5237] Bluetooth: hci4: command tx timeout [ 214.546975][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 214.546997][ T29] audit: type=1800 audit(1729231910.957:179): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.768" name="/" dev="fuse" ino=1 res=0 errno=0 [ 215.712391][ T5237] Bluetooth: hci0: command tx timeout [ 215.754148][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.864214][ T8247] team0: Port device team_slave_0 added [ 216.006978][ T8247] team0: Port device team_slave_1 added [ 216.207784][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.222467][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.250139][ T8247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.265787][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.273880][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.305588][ T8247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.317732][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.326387][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.333742][ T8266] bridge_slave_0: entered allmulticast mode [ 216.341319][ T8266] bridge_slave_0: entered promiscuous mode [ 216.389252][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.396635][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.404182][ T8266] bridge_slave_1: entered allmulticast mode [ 216.411408][ T8266] bridge_slave_1: entered promiscuous mode [ 216.478334][ T8247] hsr_slave_0: entered promiscuous mode [ 216.488974][ T8247] hsr_slave_1: entered promiscuous mode [ 216.500696][ T8247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.508628][ T8247] Cannot create hsr debugfs directory [ 216.540282][ T8266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.565273][ T8266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.582705][ T5237] Bluetooth: hci4: command tx timeout [ 216.700505][ T8266] team0: Port device team_slave_0 added [ 216.722954][ T8266] team0: Port device team_slave_1 added [ 216.879901][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.887317][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.915154][ T8266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.968928][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.983573][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.018587][ T8266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.083694][ C0] ------------[ cut here ]------------ [ 217.089596][ C0] WARNING: CPU: 0 PID: 16 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x6fc/0x810 [ 217.099006][ C0] Modules linked in: [ 217.102981][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 217.113637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.123783][ C0] RIP: 0010:inet_sock_destruct+0x6fc/0x810 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 217.129651][ C0] Code: 5a f7 90 0f 0b 90 e9 17 fe ff ff e8 fe 77 5a f7 90 0f 0b 90 41 80 3c 2c 00 0f 85 40 fe ff ff e9 43 fe ff ff e8 e5 77 5a f7 90 <0f> 0b 90 e9 b3 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 00 fc [ 217.149340][ C0] RSP: 0018:ffffc900001579b0 EFLAGS: 00010246 [ 217.155510][ C0] RAX: ffffffff8a3a701b RBX: 0000000000000300 RCX: ffff88801ceb5a00 [ 217.163605][ C0] RDX: 0000000000000100 RSI: 0000000000000300 RDI: 0000000000000000 [ 217.171618][ C0] RBP: ffff8880329a2880 R08: ffffffff8a3a6eca R09: 1ffff11006534563 [ 217.179663][ C0] R10: dffffc0000000000 R11: ffffed1006534564 R12: 1ffff11006534515 [ 217.187712][ C0] R13: ffff8880329a2d68 R14: ffff8880329a28a8 R15: ffff8880329a2892 [ 217.195761][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 217.204761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.211378][ C0] CR2: 00007fb26e8656c0 CR3: 000000000e734000 CR4: 00000000003526f0 [ 217.219446][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.227516][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.235657][ C0] Call Trace: [ 217.238971][ C0] [ 217.241934][ C0] ? __warn+0x168/0x4e0 [ 217.246171][ C0] ? inet_sock_destruct+0x6fc/0x810 [ 217.251441][ C0] ? report_bug+0x2b3/0x500 [ 217.256036][ C0] ? inet_sock_destruct+0x6fc/0x810 [ 217.261297][ C0] ? handle_bug+0x60/0x90 [ 217.265720][ C0] ? exc_invalid_op+0x1a/0x50 [ 217.270438][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 217.275559][ C0] ? inet_sock_destruct+0x5aa/0x810 [ 217.280812][ C0] ? inet_sock_destruct+0x6fb/0x810 [ 217.286099][ C0] ? inet_sock_destruct+0x6fc/0x810 [ 217.291352][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 217.297083][ C0] ? rcu_core+0xa37/0x17a0 [ 217.301545][ C0] __sk_destruct+0x58/0x5f0 [ 217.306133][ C0] ? rcu_core+0xa37/0x17a0 [ 217.310589][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 217.315778][ C0] rcu_core+0xaaa/0x17a0 [ 217.320073][ C0] ? __pfx_rcu_core+0x10/0x10 [ 217.324896][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 217.330173][ C0] ? sched_clock+0x4a/0x70 [ 217.334692][ C0] ? sched_clock_cpu+0x76/0x490 [ 217.339597][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.345668][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.352050][ C0] ? __schedule+0x189d/0x4b30 [ 217.356823][ C0] handle_softirqs+0x2c5/0x980 [ 217.361639][ C0] ? run_ksoftirqd+0xca/0x130 [ 217.366408][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 217.371750][ C0] run_ksoftirqd+0xca/0x130 [ 217.376342][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 217.381515][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 217.387338][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 217.392523][ C0] smpboot_thread_fn+0x544/0xa30 [ 217.397514][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 217.402899][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 217.408420][ C0] kthread+0x2f0/0x390 [ 217.412567][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 217.418076][ C0] ? __pfx_kthread+0x10/0x10 [ 217.422734][ C0] ret_from_fork+0x4b/0x80 [ 217.427202][ C0] ? __pfx_kthread+0x10/0x10 [ 217.431837][ C0] ret_from_fork_asm+0x1a/0x30 [ 217.436699][ C0] [ 217.439760][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.447070][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 217.457685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.467769][ C0] Call Trace: [ 217.471077][ C0] [ 217.474037][ C0] dump_stack_lvl+0x241/0x360 [ 217.478760][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.483996][ C0] ? __pfx__printk+0x10/0x10 [ 217.488621][ C0] ? _printk+0xd5/0x120 [ 217.492807][ C0] ? __init_begin+0x41000/0x41000 [ 217.497880][ C0] ? vscnprintf+0x5d/0x90 [ 217.502263][ C0] panic+0x349/0x880 [ 217.506193][ C0] ? __warn+0x177/0x4e0 [ 217.510387][ C0] ? __pfx_panic+0x10/0x10 [ 217.514829][ C0] ? show_trace_log_lvl+0x3b2/0x410 [ 217.520060][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 217.525029][ C0] __warn+0x34b/0x4e0 [ 217.529063][ C0] ? inet_sock_destruct+0x6fc/0x810 [ 217.534315][ C0] report_bug+0x2b3/0x500 [ 217.538686][ C0] ? inet_sock_destruct+0x6fc/0x810 [ 217.543932][ C0] handle_bug+0x60/0x90 [ 217.548113][ C0] exc_invalid_op+0x1a/0x50 [ 217.552631][ C0] asm_exc_invalid_op+0x1a/0x20 [ 217.557492][ C0] RIP: 0010:inet_sock_destruct+0x6fc/0x810 [ 217.563318][ C0] Code: 5a f7 90 0f 0b 90 e9 17 fe ff ff e8 fe 77 5a f7 90 0f 0b 90 41 80 3c 2c 00 0f 85 40 fe ff ff e9 43 fe ff ff e8 e5 77 5a f7 90 <0f> 0b 90 e9 b3 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 00 fc [ 217.582946][ C0] RSP: 0018:ffffc900001579b0 EFLAGS: 00010246 [ 217.589056][ C0] RAX: ffffffff8a3a701b RBX: 0000000000000300 RCX: ffff88801ceb5a00 [ 217.597044][ C0] RDX: 0000000000000100 RSI: 0000000000000300 RDI: 0000000000000000 [ 217.605031][ C0] RBP: ffff8880329a2880 R08: ffffffff8a3a6eca R09: 1ffff11006534563 [ 217.613018][ C0] R10: dffffc0000000000 R11: ffffed1006534564 R12: 1ffff11006534515 [ 217.621010][ C0] R13: ffff8880329a2d68 R14: ffff8880329a28a8 R15: ffff8880329a2892 [ 217.629006][ C0] ? inet_sock_destruct+0x5aa/0x810 [ 217.634315][ C0] ? inet_sock_destruct+0x6fb/0x810 [ 217.639537][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 217.645185][ C0] ? rcu_core+0xa37/0x17a0 [ 217.649618][ C0] __sk_destruct+0x58/0x5f0 [ 217.654134][ C0] ? rcu_core+0xa37/0x17a0 [ 217.658558][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 217.663678][ C0] rcu_core+0xaaa/0x17a0 [ 217.667941][ C0] ? __pfx_rcu_core+0x10/0x10 [ 217.672635][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 217.677851][ C0] ? sched_clock+0x4a/0x70 [ 217.682284][ C0] ? sched_clock_cpu+0x76/0x490 [ 217.687148][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.693152][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.699498][ C0] ? __schedule+0x189d/0x4b30 [ 217.704206][ C0] handle_softirqs+0x2c5/0x980 [ 217.709018][ C0] ? run_ksoftirqd+0xca/0x130 [ 217.713717][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 217.719026][ C0] run_ksoftirqd+0xca/0x130 [ 217.723634][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 217.728758][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 217.734500][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 217.739624][ C0] smpboot_thread_fn+0x544/0xa30 [ 217.744575][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 217.749615][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 217.755085][ C0] kthread+0x2f0/0x390 [ 217.759160][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 217.764635][ C0] ? __pfx_kthread+0x10/0x10 [ 217.769232][ C0] ret_from_fork+0x4b/0x80 [ 217.773672][ C0] ? __pfx_kthread+0x10/0x10 [ 217.778275][ C0] ret_from_fork_asm+0x1a/0x30 [ 217.783064][ C0] [ 217.786425][ C0] Kernel Offset: disabled [ 217.790782][ C0] Rebooting in 86400 seconds..