last executing test programs: 11.199316967s ago: executing program 3 (id=7402): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002800900020073797a300000000008000180ff"], 0xec}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x10) syz_usb_connect(0x0, 0x3d, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000b19a3640d219751284000002030109022b000207000000090400010079319c000904"], 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup2(r7, r9) 8.021502428s ago: executing program 3 (id=7414): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0xd5, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x2, 0x1, 0xd, 0x80, 0x96, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '1'}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x542, 0xd, 0x8, 0x9d}, {0x6, 0x24, 0x1a, 0x8e87, 0x18}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x9, 0x0, 0xf7, 0x5, 0x4}, @mdlm_detail={0x38, 0x24, 0x13, 0x5, "d33ed7528288a1d3e6adf557b1610b8f484b310883799a745c42352a68932f8215547453b536abb270786cb589bca9a9987dbbac"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7, 0xe}, @mdlm={0x15, 0x24, 0x12, 0xcd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x9e, 0x72}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x4, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe, 0x3, 0xb}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x6, 0x1, 0x1, 0x20, 0x7}, 0x19, 0x0, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2607}}, {0x45, &(0x7f0000000280)=ANY=[@ANYBLOB="45039da9b28cdf26cd5ffdb6341fbfef96eee239d8ad4ef777a721d0d28d8c7831606eea8df373fa4b7f74c9b21788972a60ff31445176280000"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x415}}]}) syz_open_dev$midi(0x0, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d018e76cf0d800cf0a8beac018e0e02030109021200010000000009040000002ac59800"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 7.6639952s ago: executing program 1 (id=7416): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, {{0xa, 0x0, 0x0, @private1, 0x2}}}, 0x108) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$tun(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="0000880901081bf19fbf3affadbc0c9680d174642cd8c47a56247d033dc32cbf9b8c4de1ea58c949ab839b8ef3792b266fd22f37ebb8e9550afe45e4448b708dc67383f4d8c9538a5c6e99b8079c5c0cd325198949104ccd5dc28ca0ece68172fb849fd6f150731edbf5eae73fdc62910e2a70e01fc3a5c8d4cd208935eedbed570d1d626e916d770e57b3fd2c3eb8e05bf43afac6de0b190291a6655cfac6ac3b"], 0xa1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x4, 0x6, 0x5, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fcd846404c05c3060000000003010902"], 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x80000, {0x0, 0x80}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x0, 0x8, 0x401}, 0x14}}, 0x8000) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x2, 0x0, 0x3}, {0x5, 0x80, 0x4, 0x8}]}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) 6.171620381s ago: executing program 3 (id=7424): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) write$apparmor_exec(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="737461636b200d381cd2a12f2f"], 0xf) read$FUSE(r0, &(0x7f0000003a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc00000010000104000000000000000000480000", @ANYRES32=r7, @ANYRES32=r7], 0xbc}, 0x1, 0x0, 0x0, 0x20048090}, 0x0) r8 = syz_usb_connect(0x0, 0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb90500000001090222000100000000090400000101035100090502fffffffff000072501"], 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1f94, 0x60000000, 0x3, 0x201, r0, 0x3, '\x00', 0x0, r0, 0x3, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r8, @ANYRESHEX=r5], &(0x7f0000001400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x10, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a000000000000010902240041000000897dde4e32b118000904000001030000810300"/54], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r4, 0x9}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) syz_usb_control_io$hid(r8, &(0x7f0000000480)={0x24, &(0x7f0000000340)={0x20, 0x31, 0x2d, {0x2d, 0x10, "c348b6675d44878ca02a5ddcef3a76feef5aa35ce6f9a388bdd189a3b48ea0c6ec4dd023f2887edadc667d"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000400)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x1, "c3fea793"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0xc, "a88058dc"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x75, 0x1, {0x22, 0xc1f}}}}, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x0, 0x31, 0x16, "3afc8d062ab9f5a9ee50c4ab06577d86e67d70f4fd60"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x1, 0x1e, "aa53c7c029dc45d87b5600ab824539f312da9ccac5c2f9cd4fef30bff82b"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x4}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.792644769s ago: executing program 4 (id=7425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0xfffbf7f5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000a0009000000d2dc5510407a00eccd31854bf8ac71dc3955fe07b0f11d6d8c81a797e2d28531341ac4913778aeabc6ce400b035b37fb9e1e0f3a5c404eb2bde4fa3f4e79ffcb"], 0x3c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) pwritev2(r2, &(0x7f0000001440)=[{&(0x7f0000000280)="cf", 0x1}], 0x1, 0x0, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$pidfd(0xffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000080)={0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080), 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x6, @loopback, 0x8}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000500)='y', 0xcd8c}], 0x1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) syz_open_pts(r8, 0x0) syz_open_pts(r8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000000)) 5.585320388s ago: executing program 4 (id=7426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f000001a180)=""/102398, 0x18ffe}], 0x1, 0x0, 0x0) syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x400}, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc33, 0x0, 0x0, 0x0, 0xfffffffffffffe88}}) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r6, 0x0, 0x1, 0xfc, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000}}) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/212, 0xd4, 0x1, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r9], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) 5.152155053s ago: executing program 2 (id=7428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x8000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000080ff00000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 5.151454038s ago: executing program 4 (id=7429): socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.989131708s ago: executing program 4 (id=7430): signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xfa, &(0x7f0000000000), &(0x7f0000000240)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) 4.949039734s ago: executing program 2 (id=7431): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x378, 0x2e8, 0x2e8, 0x378, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x34, 0x2, 0x8, 0x3, 'syz1\x00', 'syz1\x00', {0x80000001}}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xfe}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x3a010000, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 4.828083355s ago: executing program 2 (id=7432): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 4.816016775s ago: executing program 4 (id=7433): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a06000000000000000000000a000000ff0000000000000006001d004e230000"], 0x24}}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0xb020c2, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x0, 0xfffffad3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000000) io_uring_setup(0x1068, &(0x7f0000000540)={0x0, 0x408a, 0x1000, 0x3, 0x4}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) fstat(r3, &(0x7f0000000140)) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf0000000f0a00000000000004000000400000000500000000000000ff03000000000000000000000000000000000000000000000000000000e60000070000000500000000000000000000003c15000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/318]) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRES8=r2], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.539503187s ago: executing program 2 (id=7434): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0xd5, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x2, 0x1, 0xd, 0x80, 0x96, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '1'}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x542, 0xd, 0x8, 0x9d}, {0x6, 0x24, 0x1a, 0x8e87, 0x18}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x9, 0x0, 0xf7, 0x5, 0x4}, @mdlm_detail={0x38, 0x24, 0x13, 0x5, "d33ed7528288a1d3e6adf557b1610b8f484b310883799a745c42352a68932f8215547453b536abb270786cb589bca9a9987dbbac"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7, 0xe}, @mdlm={0x15, 0x24, 0x12, 0xcd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x9e, 0x72}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x4, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe, 0x3, 0xb}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x6, 0x1, 0x1, 0x20, 0x7}, 0x19, 0x0, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2607}}, {0x45, &(0x7f0000000280)=ANY=[@ANYBLOB="45039da9b28cdf26cd5ffdb6341fbfef96eee239d8ad4ef777a721d0d28d8c7831606eea8df373fa4b7f74c9b21788972a60ff31445176280000"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x415}}]}) syz_open_dev$midi(0x0, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d018e76cf0d800cf0a8beac018e0e02030109021200010000000009040000002ac59800"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 4.38413833s ago: executing program 1 (id=7435): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000000000008400840002000000000045000002000000000000", @ANYRES32=0x0, @ANYBLOB='0'], 0x50}, 0x0) 4.146723003s ago: executing program 1 (id=7436): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x87) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000800)={0x1, @pix_mp={0x0, 0x0, 0x34325241}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000004c0)={0x2, 0x0, 0x401, 0x7, 0x101, 0x7e, 0x6719}) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000002c0)=0x1ff, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3f00}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) ioctl$RTC_AIE_ON(r0, 0x7001) 3.644114203s ago: executing program 1 (id=7437): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0xfffffc}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2b72646d61202b64017669636573202b667265657a6572200072646d6120"], 0x1e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800001000700000005000400000000000900020073797a310000000011000300686173683a69702c706f727400"/85], 0x60}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r4, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) read$snddsp(r3, &(0x7f0000000740)=""/56, 0x38) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e0021001000000002800000128c", 0x2e}], 0x1}, 0x0) 3.251965788s ago: executing program 1 (id=7438): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) nanosleep(0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000024c0), 0x48000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000002500)=@v={0x93, 0xc, 0x0, 0x8, @MIDI_NOTEON=@note=0x45, 0x8, 0xb27b}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x100001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008840)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xee00, 0x0, 0x0, 0x20}}}, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f00000000c0)) 3.015795683s ago: executing program 3 (id=7439): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x454200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'veth1_to_batadv\x00', @remote}) io_uring_setup(0x5eea, &(0x7f00000001c0)={0x0, 0x201e2d, 0x2, 0x2, 0x13a}) r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x600002, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = getpid() socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000280)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0xffd) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000010dfeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000c800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) sched_setscheduler(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket(0x11, 0x800000003, 0x0) 2.718149435s ago: executing program 2 (id=7440): socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.618087914s ago: executing program 2 (id=7441): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaeeb507030c9688a8000081"], 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000), &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e}, 0x20) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a"], 0x34}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000080)={0xd, 0x8000000000000000, 0x1ff, 0x3, 0xf, 0x6, 0x3ff, 0x6}, &(0x7f00000000c0)={0x72, 0x480000, 0x40, 0x3, 0x8, 0x4dd, 0x7, 0x762}, &(0x7f0000000100)={0x40000, 0xfffffffffffffffe, 0x1, 0x7, 0x0, 0x1ff, 0x2, 0xa921}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x47]}, 0x8}) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, "d57f8080fc2b719aeafe679ea1376f83f99dfa2c00ff00"}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006cc0)=[{{&(0x7f0000000780)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000008000000000000000000000018000000000000002900000037000000000000000000000038c3e87f2119d91b33cfa9994dd2facad772fc69871106153b92e35bae42d83f7829df97c0b794f4f037329dfd5984756dcad5b8fe7e1e88137e01257c610f6d066a08efd2cea6cba88b5caefc1103fb02397f88bb7b794865b8cda5f2ca4e4e0bdccef223cd629033d7eb61d7877404776c7014697a5cf7ecb5269b5d"], 0x30}}], 0x1, 0x0) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x196c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0x5, 0x80, 0x9, 0x2, 0x8, 0x17cf, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x4, 0x6, 0x5, 0x4, 0x0, 0xf, 0x81, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x6, 0xd0a6, 0x9, 0x1, 0x0, 0x101, 0x3}}, {0xa, 0x2, [0x5, 0x1000, 0xf]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_tbf={{0x8}, {0x1858, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfffffff7, 0x1000, 0xa8, 0xe9e5799, 0x6, 0x473, 0x5, 0x8, 0xfff, 0x9, 0x800, 0xd, 0x3, 0x2, 0xffff, 0xc6a, 0x0, 0x81, 0x4, 0x1, 0x8, 0x8, 0x4, 0x9, 0xd, 0xe, 0x39b818f5, 0x6cb, 0x9, 0x3, 0x4, 0x3, 0x6, 0x3, 0x2, 0x10000, 0x5, 0x67, 0xffffffff, 0x65871c61, 0x8, 0x0, 0x1, 0x7, 0x2, 0x9, 0xfffffff8, 0x9, 0xa4c4, 0x14000000, 0x6, 0x80, 0xe61, 0x4, 0x8, 0x3, 0x0, 0xc, 0x1, 0x10000, 0x5a3, 0x80000000, 0x5, 0x800, 0x8, 0x7, 0x81, 0x9, 0x9, 0xffff, 0x7, 0x5, 0x7fff, 0x6, 0x7fffffff, 0x0, 0xffff0000, 0x6, 0x0, 0x800, 0x6, 0x6, 0x8, 0xb5, 0x9, 0xe, 0x6, 0x3, 0x7, 0x6, 0x8, 0x4, 0x427f, 0xf7f3, 0x5, 0xed, 0x0, 0x1, 0xc24, 0x776f, 0x3, 0x9, 0x5, 0x6, 0x8, 0x3, 0x3ff, 0x3dde, 0x2, 0x8, 0x7, 0x2, 0x4b, 0x3, 0x4, 0x9, 0x80000000, 0x1, 0x1, 0x4, 0xab8, 0x80, 0x80000000, 0x0, 0xfb, 0x2, 0x3, 0x4, 0xa, 0x3, 0x5, 0x6, 0x7, 0x401, 0x7, 0x3, 0xa5, 0x9, 0x6b71, 0xfffffff8, 0x1, 0xbc, 0x6, 0x81, 0x1, 0x5, 0x9d000, 0x80, 0x0, 0x273, 0x0, 0x0, 0x4, 0x765e6ef6, 0x2, 0xb8, 0x9, 0x7fff, 0x0, 0x1, 0x8, 0x779, 0x400, 0x6, 0x33, 0x9, 0x7, 0x8, 0x2, 0x3ff, 0x2, 0x4c, 0x0, 0xffffff4e, 0x4, 0xfffffff8, 0x3, 0x1, 0x482, 0x1, 0x200, 0xab67, 0x7, 0x0, 0x7, 0x8, 0xffffffff, 0x0, 0x81, 0x6, 0x5, 0x3ac, 0x2, 0x1, 0x1, 0x423, 0xff, 0x0, 0x8, 0x9, 0x5e, 0x2, 0x8, 0x7, 0xffffffff, 0xfffffffb, 0x0, 0x1000, 0xe, 0x7f, 0x2, 0x7, 0x5, 0x5, 0x100, 0x9, 0x1, 0x7, 0x8, 0xfffffffe, 0x29, 0x10, 0x10, 0x7, 0x5, 0x1, 0x10, 0x8, 0x2, 0x4, 0x775f, 0x80000001, 0x7f, 0x0, 0x0, 0xae, 0x1, 0x90, 0x401, 0x9, 0xff, 0x40, 0x54ba, 0xfffffffe, 0xffffffff, 0xfa3, 0x4, 0xf2, 0x5, 0x7, 0xffffff81, 0x37aa, 0x80000000, 0x7, 0x7f, 0x4]}, @TCA_TBF_RATE64={0xc, 0x4, 0x54a847b6f7355730}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x2, 0x932e, 0x5, 0x7, 0x2, 0x6, 0x8, 0x0, 0xffffffff, 0x4b7, 0x8, 0xac8, 0x4, 0x1ff, 0x5, 0x7, 0x6, 0x1, 0xf8000000, 0x3, 0x5, 0x4e, 0x4, 0x9, 0x5, 0x6, 0x6, 0xc, 0x5500000, 0x79d, 0x1, 0xffffffff, 0x311b, 0xd, 0x0, 0xff, 0x1, 0xa0000000, 0xfa, 0x0, 0xfffffff8, 0x101, 0x0, 0x3, 0x8, 0x8, 0x0, 0x5, 0x0, 0x3, 0x4, 0x40, 0xc46a, 0xffff, 0x2, 0x6, 0x9, 0x0, 0x2, 0x3e067cd0, 0x5, 0x4, 0x7f, 0x19, 0x10001, 0xfff, 0x8, 0x13, 0xa45, 0x9, 0x4, 0x4, 0x4, 0x101, 0xd010, 0x8, 0x10, 0x8, 0x4, 0xb, 0x2, 0x0, 0x6bc7, 0x9b, 0x5, 0x2, 0x7, 0x0, 0x2, 0x1, 0x2, 0x3, 0x3, 0x480, 0x3, 0x5393965e, 0x5, 0x4, 0xb, 0xfff, 0x9, 0x5, 0x1, 0x7, 0x0, 0x0, 0x2, 0xb, 0x1d, 0xffffff7f, 0x6, 0x3, 0xff, 0x8, 0x200, 0x6, 0x80, 0xfff, 0x2, 0x4e52, 0xb, 0x86, 0x1, 0x1, 0x1, 0x6, 0x1b, 0x3, 0x4, 0x1ff, 0x1, 0x3, 0x10000, 0xd0ebf81, 0x10000, 0x2, 0x7, 0xe9, 0xe, 0x5, 0x1, 0x8000, 0xfffffffe, 0xe6, 0x6, 0x5, 0x36, 0x0, 0x3, 0x8001, 0x2f29, 0x4, 0x8, 0xfffffff9, 0xd, 0x7, 0x8, 0x9, 0x2, 0x5, 0x6, 0x4, 0x4, 0x1, 0xc, 0x5, 0x5, 0xff, 0x0, 0x6, 0x1, 0x1, 0x35, 0x5, 0x800, 0x5, 0x6, 0xf, 0x81, 0x40, 0x4, 0x10, 0xfffffff7, 0x53, 0x8, 0x7, 0x3ff, 0x9, 0x6, 0x136c, 0xf0, 0x3, 0x40, 0xa0, 0x7, 0x0, 0x3, 0xd2a8, 0x80000000, 0x8, 0xb, 0xbbd, 0x6, 0x1, 0x8, 0xffffff7f, 0x80, 0x7, 0x4, 0x80, 0x1, 0x13, 0x80000001, 0x9, 0x2, 0x7, 0x3, 0xff, 0x1, 0x3, 0xfffffff9, 0x6d49, 0x7, 0x6, 0x3, 0x0, 0x10001, 0x200, 0x1, 0x0, 0x11, 0x6, 0xd932, 0xfff, 0x80000001, 0xfffffffd, 0x6, 0x43, 0x6, 0x74cd, 0x4, 0x1, 0x200, 0x1000, 0x80000001, 0xffffd3b7, 0x7, 0x9, 0x9, 0x221, 0x6, 0x6, 0x0, 0x200, 0xe00000]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x6, 0x4, 0xda, 0x8001}, {0x9a, 0x0, 0x7f20, 0x3, 0xfff0, 0xfffffffc}, 0xffffffff, 0x5, 0x3}}, @TCA_TBF_RTAB={0x404, 0x2, [0x10001, 0x6, 0x8, 0x7ff, 0x9, 0x1, 0x8, 0x8, 0xf1cb, 0x6, 0x6492, 0x400, 0x0, 0xffffff77, 0x200, 0x1e, 0x7fffffff, 0x5, 0x6253, 0xe00, 0x5, 0x630, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x8, 0x9940, 0x81, 0x2, 0x5, 0x1, 0x8, 0x2, 0x1, 0x4a0, 0x6, 0x8, 0xfffffffa, 0x6, 0x7, 0x80000000, 0xffffdfbe, 0xcdf, 0x2, 0xff, 0x1, 0xffffff09, 0x3, 0x3, 0x80000000, 0x3, 0x9, 0x2, 0x1, 0x100, 0x6, 0x3, 0x3, 0x3, 0x81, 0xda12, 0x8, 0x1ff, 0x2, 0x80, 0x0, 0x2, 0x1ff, 0x4, 0x850, 0x80, 0x5, 0x907, 0x9, 0x9, 0x1, 0x10001, 0x9, 0x7f12, 0x10000, 0x200, 0xfffffff4, 0x8001, 0x982a, 0x9, 0xd, 0x8, 0x6b, 0x9, 0x9, 0x7fff, 0x3, 0xfa, 0x3, 0x5, 0x8, 0x13bb, 0xb, 0x80000001, 0x6, 0x7, 0x4, 0x2, 0x5, 0x2a3, 0x1, 0x7, 0x50c73a24, 0x0, 0xa, 0xdac, 0x8, 0x2, 0x9, 0x9, 0x1000, 0x4, 0x8, 0x6f2c, 0x27, 0x80000001, 0x2, 0x80aa, 0x2, 0x2, 0x80000001, 0x0, 0x2, 0x0, 0xfffffff7, 0x33a, 0x85, 0x7, 0xb, 0x6, 0x1, 0xa430, 0x8, 0x0, 0x200000, 0x8, 0x1ff, 0x80000000, 0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0xffffffec, 0x1, 0x1, 0xfffffe01, 0xe, 0xc, 0x0, 0x7, 0x7f, 0x0, 0xffffff81, 0xcc, 0x8, 0x8000, 0x9, 0x2, 0x5, 0x1, 0x9, 0x6, 0xf, 0x7fffffff, 0x6, 0xf5, 0x8, 0x5, 0x101, 0x10000, 0x88f5, 0xdef, 0x42, 0x80000001, 0xfff, 0x8001, 0xcf, 0x9, 0x3de, 0x1, 0x1e2, 0xffffffff, 0x1, 0x6, 0x1, 0xb, 0xffffffb3, 0x9, 0x401, 0x4, 0x1, 0xbf, 0x6, 0x6, 0x8, 0xfffffc01, 0x0, 0x9, 0x33, 0x2, 0x1, 0x4, 0x7, 0xfffffffb, 0x2, 0x6, 0x8, 0x8, 0xfff, 0x5, 0xcc63, 0x401, 0x7fff, 0xffffffff, 0x3, 0x1ff, 0x0, 0xffffffff, 0x2, 0x7fff, 0x2, 0x4, 0xc, 0x9, 0x885, 0x8, 0xff, 0x6, 0xb9bb, 0xfffffffc, 0x70000, 0xfb, 0xffffff80, 0xb43, 0xfffff470, 0x9, 0x7ff, 0x6, 0x57c7bd56, 0x8, 0x800, 0xca000000, 0x79d8, 0x1, 0x2f2a474f, 0x1, 0x7, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0xff, 0x1, 0x9, 0x6, 0x4, 0x2daa, 0x9, 0x2, 0xffffffff, 0x5, 0xa, 0x6, 0x29, 0x6, 0x8, 0x6, 0x4, 0x9e9, 0x4, 0xa, 0x7, 0x7fff, 0x1, 0x101, 0x4, 0x0, 0xe, 0x3b4, 0x7, 0x8001, 0x101, 0x863, 0xf5, 0x2, 0x7f, 0xffffffff, 0xb1b, 0x4, 0x9daa, 0x800, 0x1, 0xffffffff, 0x87, 0x1, 0x9, 0x9, 0x98e, 0x0, 0x1, 0x3b0, 0x5, 0x4, 0x10000000, 0x5, 0x593b204a, 0x6, 0x7, 0xe11, 0x0, 0x7, 0x401, 0x9, 0x9, 0x9, 0x3, 0x0, 0x8a9f, 0x4ac, 0x101, 0x8001, 0x6, 0x40, 0x3, 0x81, 0xc, 0x6, 0x101, 0x2, 0x4, 0x3, 0x2, 0x100, 0xd, 0x5, 0x0, 0x5, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4979, 0x5d913bbb, 0x7fff, 0x800, 0xfff, 0x3, 0xe, 0x7fff, 0x8001, 0xfffffffc, 0x2, 0x8, 0x9, 0x2, 0x5f40, 0x200, 0x41, 0x40, 0x6, 0x1, 0xfffffff8, 0xfffffffd, 0x7, 0x6d680000, 0x12000000, 0x7ff, 0x2, 0xa16, 0xdc24, 0x0, 0x7, 0x7, 0x7, 0x2, 0xbf0e, 0x1, 0x9, 0x400, 0x4, 0x0, 0x1, 0x0, 0x7d4, 0xcc, 0x4, 0x1, 0x8, 0x40, 0x7fff, 0x2, 0x2, 0x400, 0x5, 0x0, 0x4e1, 0x1, 0x2, 0x0, 0x9, 0x1, 0x61b58d8a, 0x6, 0x13f, 0x3ff, 0x4, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x4, 0x2, 0x8001, 0xa, 0x6, 0x1000, 0x2, 0x208e, 0x10, 0x8, 0x4, 0x4, 0xfffffffa, 0x6, 0x4, 0x7fffffff, 0x96, 0xb267482, 0x6, 0x8, 0x7f, 0x13, 0xe, 0x9, 0x10000, 0x9, 0x3, 0x0, 0x3ff, 0x1, 0x0, 0xa9, 0xce, 0x2, 0x9, 0x5, 0xda, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x8, 0xffffffff, 0x1, 0x10, 0x0, 0x2, 0xf3c, 0x1, 0xfffffff7, 0x40, 0x1ff, 0x3, 0x7, 0x71, 0x9, 0x1000, 0x7, 0x4f7, 0x3, 0x25d, 0x59f, 0x4, 0x401, 0x10, 0x1, 0x2, 0x3, 0x1, 0x7ff, 0x5, 0x2, 0x7, 0x0, 0xfffffffa, 0xffff8001, 0x14a, 0x2, 0x2, 0x6, 0x9, 0x7, 0x1, 0x3, 0x5, 0x0, 0x5, 0x6, 0x1, 0x6, 0x0, 0xffffff8f, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x8000, 0xe7a, 0x5, 0x4, 0x2a5b, 0x2, 0x1, 0x8, 0x7, 0x58000000, 0x2, 0x8, 0x3, 0xf25, 0x3, 0x5bc, 0x30, 0x5, 0xc9b4, 0x7, 0x92d, 0xb479, 0x2d2, 0x0, 0x8000, 0x0, 0x1ff, 0x0, 0x8, 0x1, 0xfffff001, 0x9, 0x39b8, 0xe3, 0x80, 0x54c, 0x1, 0x9, 0x3ff, 0x6, 0x3, 0x9, 0x3, 0x7d, 0x2, 0x5, 0xf, 0x8af, 0x5, 0x7, 0x9, 0xa, 0x7, 0x3, 0xe, 0x10001, 0x2, 0x5, 0x8, 0x9, 0x7fffffff, 0x2, 0x5, 0x80, 0x0, 0x8, 0x8, 0x1, 0x100, 0x0, 0x6, 0x4, 0x6, 0x800, 0x400, 0x0, 0x5, 0x6, 0x400, 0x4, 0xe, 0x80000001, 0x9, 0xffffffd7, 0x5, 0xcb6, 0x7f, 0xff, 0x1, 0x2, 0x800, 0xffffff99, 0x62a, 0xfffffff7, 0x3, 0x8000, 0xfffffffc, 0x800, 0x7, 0x2, 0xd, 0x0, 0x9, 0xffffff01, 0x6, 0x2, 0x4, 0xfffff295, 0x537, 0x6, 0xc1b, 0x7, 0x2, 0xf3, 0x3, 0x5, 0x3, 0x0, 0x5, 0x1, 0x80, 0x40, 0x4c3676b7, 0x5, 0x8001, 0x7fff, 0x1590, 0x1375, 0xa, 0x1, 0x1ff, 0x5, 0x4, 0x4, 0x100, 0x80000000, 0x2, 0x3, 0x10001, 0x7, 0xfffffffa, 0x5, 0x800, 0x0, 0xa, 0x8, 0x2, 0x7, 0x1, 0x3, 0x2, 0x4, 0x5, 0x1c, 0x5, 0x8, 0x6f4, 0x10, 0x2, 0x2be, 0x3, 0x40, 0x1, 0x6, 0xe6b, 0x669, 0x10000, 0x1, 0xed53, 0xd80b, 0xc91, 0x5, 0x0, 0x800, 0x0, 0x2, 0x2, 0x4, 0xfffffffe, 0x4fc, 0x0, 0x3, 0x6, 0x9, 0x8001, 0x71, 0x4, 0x5, 0x2, 0x2, 0x7, 0x3ff, 0x1, 0x0, 0xffff0c50, 0x3, 0x8ee2, 0xfa5c00, 0x8a, 0x0, 0x1000000, 0xffffff43, 0x300000, 0xfa73, 0x1, 0x6, 0x6, 0x5, 0x83, 0x3, 0x0, 0x0, 0x9, 0x0, 0x9, 0xb0, 0x266363f0, 0xaa, 0x8000000, 0x8, 0x9, 0xb, 0x95c, 0x267, 0x4b74, 0xfffffffe, 0x51, 0x45, 0x4b6e, 0x1, 0xd, 0x1, 0x1, 0x1, 0x0, 0xffff0000, 0x9, 0x8, 0x7f, 0x4, 0xfff, 0x1, 0x3, 0x200, 0x2, 0x7fff, 0x401, 0x7f, 0x6, 0x0, 0x1ff, 0x6, 0x400, 0x1, 0x89e]}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x1, 0x0, 0x6, 0x8, 0xffffffff, 0x4, 0x7b95, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x3, 0x10000, 0x1000, 0x265f6796, 0x1, 0x1ff, 0x6, 0x50, 0xfffffffc, 0x7, 0x80000000, 0x55, 0x40, 0x9, 0x40, 0x4, 0x8, 0x4, 0x3f, 0x2, 0x20b, 0x7, 0x5, 0xfe, 0x3, 0x1f9, 0x9, 0xff, 0x1000, 0x9, 0xd, 0x1331, 0x9, 0xfffffff7, 0x6, 0x1ff, 0x0, 0x27b, 0x1, 0x69, 0x0, 0x2, 0x7e47, 0x2, 0x8, 0x3ff, 0x6, 0x5, 0x2, 0x7fff, 0xf, 0xfffffffb, 0x8, 0x9, 0x2, 0x7fff, 0xfd, 0x9, 0x0, 0xfffffff7, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0x5, 0x8, 0x6ec, 0xffff, 0x4, 0x401, 0x9, 0x976, 0xffff8f69, 0x2, 0x3, 0xffff, 0x3, 0xfffffffe, 0x4, 0x1, 0x3, 0x0, 0x5, 0x4, 0x8a96, 0x5, 0x1, 0x9, 0x3, 0x5, 0x8, 0x2, 0x1, 0xe, 0x6, 0xf99a, 0x4, 0x88f0, 0x45, 0x7, 0x2, 0x9, 0x3, 0x2, 0x7fff, 0x6, 0x77e, 0x0, 0x194a, 0x2000, 0x0, 0x5, 0x40, 0x1, 0x3000000, 0x3, 0x2, 0x8, 0x437, 0x6a9, 0x6, 0x4, 0x8, 0x755e, 0x8001, 0x6, 0x40, 0x6, 0x59, 0x7, 0x5, 0x6, 0x6, 0x0, 0x80, 0x9, 0x5, 0x7ca, 0x4, 0x1, 0x8000, 0x2, 0xc, 0x2, 0x3, 0x1, 0x0, 0xd9a8, 0x1, 0x80000000, 0x0, 0x9, 0x6, 0x3b2d, 0xc8, 0xf, 0x3e, 0x1ff, 0x4, 0x6, 0x267e, 0x2, 0xfff, 0x1, 0x5, 0x200, 0x42, 0x2, 0xfffffffd, 0x6, 0x7fffffff, 0xdd58, 0x9f5, 0x4, 0xa0, 0x100, 0x3, 0x80000001, 0x3, 0x7ff, 0x9, 0xfd, 0x0, 0x401, 0x19a8, 0xa, 0x1, 0xa06, 0x5, 0x878, 0x7, 0x4, 0x5, 0x10000, 0xbe, 0x5, 0x1, 0xee, 0x8000, 0x6, 0x7, 0x7, 0x800, 0x5, 0x7, 0x7, 0xfffffffe, 0x5, 0x9, 0x9ad, 0x80000001, 0x1ff, 0x9, 0xf23, 0x3, 0xb7e, 0x10, 0x5, 0xffffb69c, 0x80000000, 0x15b5, 0x8, 0x7ff, 0x8, 0x80, 0x9, 0x40, 0x1, 0x0, 0x8, 0x1, 0xffff, 0x10, 0xa, 0xffff, 0x200, 0x1e, 0x8, 0x2, 0x8, 0x6, 0x5]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1eff}]}}]}, 0x196c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff"], 0x0}, 0x90) io_uring_setup(0x1f0f, &(0x7f0000000540)={0x0, 0x4995, 0x8, 0x3, 0x2e1}) 2.268175583s ago: executing program 0 (id=7442): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x1}) 2.090263492s ago: executing program 0 (id=7443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x378, 0x2e8, 0x2e8, 0x378, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x34, 0x2, 0x8, 0x3, 'syz1\x00', 'syz1\x00', {0x80000001}}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xfe}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x78030000, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 1.976758658s ago: executing program 0 (id=7444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.799858637s ago: executing program 0 (id=7445): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000a5691690861aabd8a08cd70000", @ANYRES16=r1, @ANYBLOB], 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000a5691690861aabd8a08cd70000", @ANYRES16=r1, @ANYBLOB], 0x20}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) (async) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xa2000721) pipe2$watch_queue(&(0x7f0000000040), 0x80) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x2, @sliced={0xf1, [0x82, 0x9, 0x7f, 0x7, 0x4, 0x9cc, 0x1, 0x5, 0x4, 0x1, 0xe7a0, 0x8, 0x9, 0x7ff, 0x5, 0xa3fb, 0x3, 0x1, 0x3, 0x2, 0x6, 0x7, 0x24a, 0x1, 0x9, 0x7, 0xff7f, 0x7, 0x0, 0x9, 0x9, 0xfd4e, 0x996, 0x68, 0xd2, 0x5, 0x7ff, 0x3, 0x63, 0x6, 0x631a, 0x2, 0x80, 0x2, 0xfa9, 0x3, 0xfff, 0x800], 0x9}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7f, 0x0) ioctl$VIDIOC_S_FBUF(r5, 0x4030560b, &(0x7f0000000300)={0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) (async) r6 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r6, &(0x7f0000000000)='net/rt6_stats\x00') r7 = socket(0xa, 0x3, 0x3a) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800d}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) 1.613325156s ago: executing program 4 (id=7446): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, {{0xa, 0x0, 0x0, @private1, 0x2}}}, 0x108) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$tun(r2, &(0x7f0000000640)={@val={0x0, 0x8809}, @void, @x25={0x1, 0x8, 0x1b, "f19fbf3affadbc0c9680d174642cd8c47a56247d043dc32cbf9b8c4de1ea58c949ab839b8ef3792b266fd22f37ebb8e9550afe45e4448b708dc67383f4d8c9538a5c6e99b8079c5c0cd325198949104ccd5dc28ca0ece68172fb849fd6f150731edbf5eae73fdc62910e2a70e01fc3a5c8d4cd208935eedbed570d1d626e916d770e57b3fd2c3eb8e05bf43afac6de0b190291a6655cfac6ac3b"}}, 0xa1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x4, 0x6, 0x5, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xe, 0x0, 0x3], 0x0, [0x8], [0x18]}}]}}]}, 0x8c}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fcd846404c05c3060000000003010902"], 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x80000, {0x0, 0x80}}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r8, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) 1.548933656s ago: executing program 0 (id=7447): syz_open_dev$evdev(0x0, 0x3, 0x100400) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x700000000, 0x10000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x3, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40005) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300000000000000", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4014) socket(0xa, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r6, 0x80206433, &(0x7f0000000080)=""/12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000440)={0x4, 0x5e}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071100a000000000006000000000023009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 818.02804ms ago: executing program 3 (id=7448): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x440, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff000}]}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000180)="dd0bb7bb306a3273d59ed211b877147e006648090011e5b1bf4a1fe044bb60b1afd70cad976ec0bd4161da6dddf3b64ec1e210838b835482b0dcf16c64bac7fc043ace87168e0f9db1388190c8db9177d0cf5abe2bed7a082fbe005989276716b4f28f60e2024aa9439d20e9d32c23c0f62f582be5fe988fe4e2efd94f1c4e85d76f2c31"}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) write$hidraw(0xffffffffffffffff, &(0x7f0000000080)="68b02aca4f37", 0x6) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000040)=r4) (async) dup3(r0, r4, 0x0) 755.502779ms ago: executing program 3 (id=7449): socket$inet6_tcp(0xa, 0x1, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) getpid() r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a0ca86055b501030000000000000000000000090400000067d18400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x1de) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r4, 0x4, 0x2c00) sendto$inet6(r3, &(0x7f0000000040)="88", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x1a, &(0x7f0000000180), &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="77e94cb1d5b20100331368c06011954bf17bf17352f1109a34a9bbc136d2fa30d8561bee33196c320eebd078d581345885b670ccd77c517f546e94e9f98319254fd3361647bb638aa93d7668962a2b126fb14cdd36a6d8197a8b3d475895e8a97d452a9b9733dabe4aaf62e3"], 0x9) sendto$inet6(r2, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0xd}, 0x8) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, 0x0) 587.927156ms ago: executing program 0 (id=7450): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0xd5, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x2, 0x1, 0xd, 0x80, 0x96, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '1'}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x542, 0xd, 0x8, 0x9d}, {0x6, 0x24, 0x1a, 0x8e87, 0x18}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x9, 0x0, 0xf7, 0x5, 0x4}, @mdlm_detail={0x38, 0x24, 0x13, 0x5, "d33ed7528288a1d3e6adf557b1610b8f484b310883799a745c42352a68932f8215547453b536abb270786cb589bca9a9987dbbac"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7, 0xe}, @mdlm={0x15, 0x24, 0x12, 0xcd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x9e, 0x72}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x4, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe, 0x3, 0xb}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x6, 0x1, 0x1, 0x20, 0x7}, 0x19, 0x0, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2607}}, {0x45, &(0x7f0000000280)=ANY=[@ANYBLOB="45039da9b28cdf26cd5ffdb6341fbfef96eee239d8ad4ef777a721d0d28d8c7831606eea8df373fa4b7f74c9b21788972a60ff31445176280000"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x415}}]}) syz_open_dev$midi(0x0, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d018e76cf0d800cf0a8beac018e0e02030109021200010000000009040000002ac59800"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 0s ago: executing program 1 (id=7451): socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): _slave_0 [ 2730.437668][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2730.452571][T13559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2730.572740][T13559] veth1_macvtap: left promiscuous mode [ 2730.578376][T13559] veth0_macvtap: left promiscuous mode [ 2730.596799][T13559] veth1_vlan: left promiscuous mode [ 2730.615912][T13559] veth0_vlan: left promiscuous mode [ 2730.743174][T26952] Bluetooth: hci1: command tx timeout [ 2731.328698][T13559] team0 (unregistering): Port device team_slave_1 removed [ 2731.401928][T13559] team0 (unregistering): Port device team_slave_0 removed [ 2732.019532][T26952] Bluetooth: hci5: command tx timeout [ 2732.500138][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7146'. [ 2732.673244][T13632] chnl_net:caif_netlink_parms(): no params data found [ 2732.825046][T26952] Bluetooth: hci1: command tx timeout [ 2732.992925][ T29] audit: type=1400 audit(1725578698.281:9104): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=13682 comm="syz.2.7147" [ 2733.014817][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 2733.029869][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 2733.045907][T13632] bridge_slave_0: entered allmulticast mode [ 2733.062992][T13632] bridge_slave_0: entered promiscuous mode [ 2733.093044][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 2733.101592][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 2733.108934][T13632] bridge_slave_1: entered allmulticast mode [ 2733.130690][T13632] bridge_slave_1: entered promiscuous mode [ 2733.168507][T13684] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7147'. [ 2733.281083][T13632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2733.384713][T27856] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2733.418106][T13632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2733.593262][T13559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.606362][T27856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2733.621335][T13487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2733.641707][T27856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2733.651245][T13487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2733.666181][T27856] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2733.675459][T27856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2733.723968][T27856] usb 3-1: config 0 descriptor?? [ 2733.751523][T13685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2733.771753][T27856] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2733.906445][T13559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2733.927640][T13487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2733.969029][T13632] team0: Port device team_slave_0 added [ 2733.989757][T13684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2734.020681][T13684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2734.066154][T13487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2734.138373][T13559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.166638][T13632] team0: Port device team_slave_1 added [ 2734.271099][T13559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2734.365312][T13632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2734.376814][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2734.403023][ C1] vkms_vblank_simulate: vblank timer overrun [ 2734.412275][T13632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2734.427174][T13632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2734.436551][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2734.464972][T13632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2734.581099][T27856] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 2734.616672][T27856] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2734.626259][T27856] usb 3-1: MIDIStreaming interface descriptor not found [ 2734.744500][T13632] hsr_slave_0: entered promiscuous mode [ 2734.773153][T13632] hsr_slave_1: entered promiscuous mode [ 2734.899634][T26952] Bluetooth: hci1: command tx timeout [ 2735.067545][T13559] bridge_slave_1: left allmulticast mode [ 2735.077296][T13559] bridge_slave_1: left promiscuous mode [ 2735.085763][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 2735.096831][T13559] bridge_slave_0: left allmulticast mode [ 2735.103101][T13559] bridge_slave_0: left promiscuous mode [ 2735.109990][T13559] bridge0: port 1(bridge_slave_0) entered disabled state [ 2735.755419][T13559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2735.768698][T13559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2735.788471][T13559] bond0 (unregistering): Released all slaves [ 2735.933949][ T7640] usb 3-1: USB disconnect, device number 89 [ 2736.117474][T13705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7154'. [ 2736.159577][T13539] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2736.183613][T13539] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2736.322439][T13539] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2736.354719][T13539] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2736.403190][T13487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2736.571631][T13708] tipc: Started in network mode [ 2736.576670][T13708] tipc: Node identity ac14140f, cluster identity 4711 [ 2736.605211][T13708] tipc: New replicast peer: 255.255.255.255 [ 2736.614111][T13708] tipc: Enabled bearer , priority 10 [ 2736.719142][T13559] hsr_slave_0: left promiscuous mode [ 2736.731816][T26354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2736.745369][T26354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2736.756069][T13559] hsr_slave_1: left promiscuous mode [ 2736.759912][T26354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2736.770999][T26354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2736.778946][T26354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2736.786508][T26354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2736.793887][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2736.822703][T13559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2736.841242][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2736.848699][T13559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2736.908533][T13559] veth1_macvtap: left promiscuous mode [ 2736.915449][T13559] veth0_macvtap: left promiscuous mode [ 2736.921259][T13559] veth1_vlan: left promiscuous mode [ 2736.926707][T13559] veth0_vlan: left promiscuous mode [ 2736.963495][ T29] audit: type=1400 audit(1725578702.251:9105): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=13714 comm="syz.2.7159" [ 2736.983225][ C1] vkms_vblank_simulate: vblank timer overrun [ 2736.990594][T26354] Bluetooth: hci1: command tx timeout [ 2737.351479][T11108] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2737.544222][T11108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2737.576207][T11108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2737.588170][T11108] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2737.600299][T11108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2737.611557][T11108] usb 3-1: config 0 descriptor?? [ 2737.617509][T13718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2737.629655][T27857] tipc: Node number set to 2886997007 [ 2737.656213][T11108] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2737.878477][T13559] team0 (unregistering): Port device team_slave_1 removed [ 2737.898536][T13718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2737.920997][T13718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2737.976684][T13559] team0 (unregistering): Port device team_slave_0 removed [ 2738.490674][T11108] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 2738.518853][T11108] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2738.538753][T11108] usb 3-1: MIDIStreaming interface descriptor not found [ 2738.899635][T26354] Bluetooth: hci2: command tx timeout [ 2738.919102][T13487] 8021q: adding VLAN 0 to HW filter on device team0 [ 2739.000767][T13717] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7159'. [ 2739.157521][T13571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2739.164758][T13571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2739.315061][T13571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2739.322282][T13571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2739.656109][T13487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2739.799164][T13539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2740.004248][T13539] 8021q: adding VLAN 0 to HW filter on device team0 [ 2740.015039][T13632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2740.053997][T13632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2740.158414][T13559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.175884][T27856] usb 3-1: USB disconnect, device number 90 [ 2740.204348][T13632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2740.228999][T13632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2740.276440][T22808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2740.283654][T22808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2740.388436][T13559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.455314][T22808] bridge0: port 2(bridge_slave_1) entered blocking state [ 2740.462550][T22808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2740.490707][T13715] chnl_net:caif_netlink_parms(): no params data found [ 2740.565801][T13559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.608216][T13487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2740.735784][T13559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.923690][T13715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2740.935261][T13715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2740.961922][T13715] bridge_slave_0: entered allmulticast mode [ 2740.979703][T26354] Bluetooth: hci2: command tx timeout [ 2740.988892][T13715] bridge_slave_0: entered promiscuous mode [ 2741.070761][T13715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2741.077950][T13715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2741.104974][T13715] bridge_slave_1: entered allmulticast mode [ 2741.120181][T13715] bridge_slave_1: entered promiscuous mode [ 2741.286549][T13487] veth0_vlan: entered promiscuous mode [ 2741.432933][T13715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2741.481562][T13715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2741.503827][T13487] veth1_vlan: entered promiscuous mode [ 2741.621296][T13559] bridge0: port 3(hsr0) entered disabled state [ 2741.636445][T13559] bridge_slave_1: left allmulticast mode [ 2741.649424][T13559] bridge_slave_1: left promiscuous mode [ 2741.655266][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 2741.682889][T13559] bridge_slave_0: left allmulticast mode [ 2741.688588][T13559] bridge_slave_0: left promiscuous mode [ 2741.711184][T13559] bridge0: port 1(bridge_slave_0) entered disabled state [ 2742.301782][T26952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2742.326993][T26952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2742.337474][T26952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2742.366164][T26952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2742.405343][T26952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2742.417609][T26952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2742.721960][T13559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2742.744001][T13559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2742.760136][T13559] bond0 (unregistering): Released all slaves [ 2742.784231][T13559] bond1 (unregistering): Released all slaves [ 2742.813863][T13715] team0: Port device team_slave_0 added [ 2742.825266][T13715] team0: Port device team_slave_1 added [ 2742.836714][T13539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2743.015643][T13715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2743.022885][T13715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2743.049342][T13715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2743.059700][T26354] Bluetooth: hci2: command tx timeout [ 2743.096542][T13715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2743.103720][T13715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2743.131913][T13715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2743.273021][T13487] veth0_macvtap: entered promiscuous mode [ 2743.294818][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2743.362152][T13715] hsr_slave_0: entered promiscuous mode [ 2743.369069][T13715] hsr_slave_1: entered promiscuous mode [ 2743.376431][T13715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2743.384512][T13715] Cannot create hsr debugfs directory [ 2743.394725][T13487] veth1_macvtap: entered promiscuous mode [ 2743.433014][T13559] hsr_slave_0: left promiscuous mode [ 2743.439036][T13559] hsr_slave_1: left promiscuous mode [ 2743.447377][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2743.455812][T13559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2743.464428][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2743.472459][T13559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2743.500517][T13559] veth1_macvtap: left promiscuous mode [ 2743.506123][T13559] veth0_macvtap: left promiscuous mode [ 2743.512387][T13559] veth1_vlan: left promiscuous mode [ 2743.517768][T13559] veth0_vlan: left promiscuous mode [ 2744.255158][T13559] team0 (unregistering): Port device team_slave_1 removed [ 2744.320411][T13559] team0 (unregistering): Port device team_slave_0 removed [ 2744.503923][T26354] Bluetooth: hci0: command tx timeout [ 2745.017834][T13632] 8021q: adding VLAN 0 to HW filter on device team0 [ 2745.141113][T26354] Bluetooth: hci2: command tx timeout [ 2745.149988][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 2745.157075][T12217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2745.170308][T13487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2745.180808][T13487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2745.191873][T13487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2745.202646][T13487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2745.214018][T13487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2745.243304][T13487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2745.254046][T13487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2745.263989][T13487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2745.274473][T13487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2745.297016][T13487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2745.320873][T13539] veth0_vlan: entered promiscuous mode [ 2745.337418][T13571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2745.344605][T13571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2745.392336][T13487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2745.401440][T13487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2745.410818][T13487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2745.419859][T13487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2745.515482][T13539] veth1_vlan: entered promiscuous mode [ 2745.816695][T13808] chnl_net:caif_netlink_parms(): no params data found [ 2745.844335][T13539] veth0_macvtap: entered promiscuous mode [ 2746.086148][T13559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.201527][T13539] veth1_macvtap: entered promiscuous mode [ 2746.222204][T13808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2746.229544][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2746.236802][T13808] bridge_slave_0: entered allmulticast mode [ 2746.246339][T13808] bridge_slave_0: entered promiscuous mode [ 2746.260517][T13808] bridge0: port 2(bridge_slave_1) entered blocking state [ 2746.267624][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2746.275962][T13808] bridge_slave_1: entered allmulticast mode [ 2746.284804][T13808] bridge_slave_1: entered promiscuous mode [ 2746.333841][T13559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.359272][ T1787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2746.367637][ T1787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2746.386514][T13808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2746.403435][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2746.414393][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2746.426160][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2746.437091][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2746.447018][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2746.457717][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2746.468824][T13539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2746.480112][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2746.490846][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2746.501306][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2746.512691][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2746.522622][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2746.533108][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2746.544561][T13539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2746.570655][T13808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2746.589820][T26354] Bluetooth: hci0: command tx timeout [ 2746.635149][T13559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.687048][T13632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2746.705647][T13539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2746.714560][T13539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2746.724147][T13539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2746.733113][T13539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2746.758804][T13808] team0: Port device team_slave_0 added [ 2746.769109][T13808] team0: Port device team_slave_1 added [ 2746.799003][T13559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.824353][ T7685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2746.839576][ T7685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2746.940478][T13808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2746.947469][T13808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2746.974765][T13808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2746.990990][T13808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2746.998410][T13808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2747.024994][T13808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2747.225508][T13808] hsr_slave_0: entered promiscuous mode [ 2747.239058][T13808] hsr_slave_1: entered promiscuous mode [ 2747.250096][T13808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2747.259650][T13808] Cannot create hsr debugfs directory [ 2747.362683][T13715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2747.385015][T13715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2747.399961][T27853] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2747.424693][T13715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2747.549678][T13715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2747.554748][T22808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2747.585691][T22808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2747.606831][T27853] usb 1-1: config index 0 descriptor too short (expected 65535, got 36) [ 2747.620865][T27853] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2747.638066][T27853] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2747.667572][T27853] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2747.720140][T27853] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 2747.727488][T13559] bridge_slave_1: left allmulticast mode [ 2747.729222][T27853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2747.735235][T13559] bridge_slave_1: left promiscuous mode [ 2747.769441][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 2747.785753][T27853] usb 1-1: SerialNumber: syz [ 2747.810378][T13559] bridge_slave_0: left allmulticast mode [ 2747.816063][T13559] bridge_slave_0: left promiscuous mode [ 2747.845480][T13559] bridge0: port 1(bridge_slave_0) entered disabled state [ 2748.665468][T26354] Bluetooth: hci0: command tx timeout [ 2748.853708][T13559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2748.877512][T13559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2748.896213][T13559] bond0 (unregistering): Released all slaves [ 2748.990962][ T7685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2748.998831][ T7685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2749.037368][T13559] tipc: Disabling bearer [ 2749.044337][T13559] tipc: Left network mode [ 2749.054366][T13632] veth0_vlan: entered promiscuous mode [ 2749.144256][T13632] veth1_vlan: entered promiscuous mode [ 2749.641639][T13632] veth0_macvtap: entered promiscuous mode [ 2749.685149][T13632] veth1_macvtap: entered promiscuous mode [ 2749.723319][T13559] hsr_slave_0: left promiscuous mode [ 2749.748976][T13559] hsr_slave_1: left promiscuous mode [ 2749.757564][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2749.770762][T13559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2749.788596][T13559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2749.796846][T13559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2749.861920][T13559] veth1_macvtap: left promiscuous mode [ 2749.876038][T13559] veth0_macvtap: left promiscuous mode [ 2749.882062][T13559] veth1_vlan: left promiscuous mode [ 2749.889098][T13559] veth0_vlan: left promiscuous mode [ 2750.125433][ T7640] usb 1-1: USB disconnect, device number 5 [ 2750.298282][ T29] audit: type=1400 audit(1725578715.581:9106): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=13900 comm="syz.0.7167" [ 2750.649592][ T7640] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2750.742284][T26354] Bluetooth: hci0: command tx timeout [ 2750.878063][ T7640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2750.889540][ T7640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2750.900799][ T7640] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2750.909912][ T7640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.937427][ T7640] usb 1-1: config 0 descriptor?? [ 2750.950690][T13903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2750.960867][ T7640] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2751.104731][T13559] team0 (unregistering): Port device team_slave_1 removed [ 2751.168820][T13903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2751.195734][T13903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2751.232348][T13559] team0 (unregistering): Port device team_slave_0 removed [ 2751.757647][ T7640] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 2751.778444][ T7640] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2751.810517][ T7640] usb 1-1: MIDIStreaming interface descriptor not found [ 2752.300859][T13902] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7167'. [ 2752.347370][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2752.359281][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2752.369654][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2752.384622][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2752.396198][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2752.407883][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2752.422884][T13632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2752.477521][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2752.493213][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2752.507398][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2752.530047][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2752.541349][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2752.552945][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2752.581345][T13632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2752.616019][T13632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2752.642678][T13632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2752.655004][T13632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2752.668332][T13632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2753.042381][T13715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2753.233227][T13715] 8021q: adding VLAN 0 to HW filter on device team0 [ 2753.324017][T13808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2753.376257][T22808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2753.383548][T22808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2753.427638][ T7640] usb 1-1: USB disconnect, device number 6 [ 2753.467114][T13571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2753.497652][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 2753.503559][T13571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2753.504859][T12217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2753.560392][T13808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2753.639716][ T1787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2753.639742][ T1787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2753.662880][T13808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2753.805443][T26952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2753.819014][T26952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2753.836216][T26952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2753.848688][T22808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2753.869696][T26952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2753.884111][T26952] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2753.891373][T13808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2753.905126][T26952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2754.025328][T22808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2754.137805][T22808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2754.219973][T11108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2754.317448][T22808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2754.328870][T13929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2754.384141][T13715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2754.392173][T13929] wlan1: authenticate with 50:50:50:50:50:50 (local address=08:02:11:00:00:01) [ 2754.405917][T13929] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 2754.431792][T11108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2754.452142][T12217] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 2754.454789][T13931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2754.473348][T11108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2754.498326][T11108] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2754.516503][T11108] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2754.527075][T11108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.536654][T11108] usb 1-1: Product: syz [ 2754.557906][T11108] usb 1-1: Manufacturer: syz [ 2754.563328][T11108] usb 1-1: SerialNumber: syz [ 2754.669060][T22808] bridge_slave_1: left allmulticast mode [ 2754.678054][T22808] bridge_slave_1: left promiscuous mode [ 2754.684677][T22808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2754.696724][T22808] bridge_slave_0: left allmulticast mode [ 2754.702730][T22808] bridge_slave_0: left promiscuous mode [ 2754.708507][T22808] bridge0: port 1(bridge_slave_0) entered disabled state [ 2755.057831][T13934] FAULT_INJECTION: forcing a failure. [ 2755.057831][T13934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2755.075677][T13934] CPU: 1 UID: 0 PID: 13934 Comm: syz.3.7173 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 2755.086475][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2755.096565][T13934] Call Trace: [ 2755.099865][T13934] [ 2755.102790][T13934] dump_stack_lvl+0x241/0x360 [ 2755.107466][T13934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2755.112657][T13934] ? __pfx__printk+0x10/0x10 [ 2755.117234][T13934] ? __pfx_lock_release+0x10/0x10 [ 2755.122337][T13934] should_fail_ex+0x3b0/0x4e0 [ 2755.127010][T13934] _copy_from_user+0x2f/0xe0 [ 2755.131591][T13934] __se_sys_sched_setattr+0x180/0x7f0 [ 2755.136957][T13934] ? __pfx___se_sys_sched_setattr+0x10/0x10 [ 2755.142838][T13934] ? __secure_computing+0x125/0x370 [ 2755.148025][T13934] do_syscall_64+0xf3/0x230 [ 2755.152517][T13934] ? clear_bhb_loop+0x35/0x90 [ 2755.157203][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2755.163087][T13934] RIP: 0033:0x7fbf7b17cef9 [ 2755.167489][T13934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2755.187109][T13934] RSP: 002b:00007fbf7bf46038 EFLAGS: 00000246 ORIG_RAX: 000000000000013a [ 2755.195522][T13934] RAX: ffffffffffffffda RBX: 00007fbf7b335f80 RCX: 00007fbf7b17cef9 [ 2755.203583][T13934] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 2755.211539][T13934] RBP: 00007fbf7bf46090 R08: 0000000000000000 R09: 0000000000000000 [ 2755.219495][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2755.227541][T13934] R13: 0000000000000000 R14: 00007fbf7b335f80 R15: 00007fbf7b45fa28 [ 2755.235541][T13934] [ 2755.238633][ C1] vkms_vblank_simulate: vblank timer overrun [ 2755.259714][ T11] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 2755.267303][ T11] wlan1: authentication with 50:50:50:50:50:50 timed out [ 2755.681314][T22808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2755.700954][T22808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2755.727535][T22808] bond0 (unregistering): Released all slaves [ 2755.835711][T13715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2756.007771][T13808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2756.030451][T26952] Bluetooth: hci5: command tx timeout [ 2756.110068][T13922] chnl_net:caif_netlink_parms(): no params data found [ 2756.297654][T25302] usb 1-1: USB disconnect, device number 7 [ 2756.343806][T13808] 8021q: adding VLAN 0 to HW filter on device team0 [ 2756.414997][T22808] hsr_slave_0: left promiscuous mode [ 2756.427979][T22808] hsr_slave_1: left promiscuous mode [ 2756.441122][T22808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2756.456527][T22808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2756.486014][T22808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2756.511311][T22808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2756.575202][T22808] veth1_macvtap: left promiscuous mode [ 2756.582597][T22808] veth0_macvtap: left promiscuous mode [ 2756.591127][T22808] veth1_vlan: left promiscuous mode [ 2756.601219][T22808] veth0_vlan: left promiscuous mode [ 2757.907689][T22808] team0 (unregistering): Port device team_slave_1 removed [ 2758.005871][T22808] team0 (unregistering): Port device team_slave_0 removed [ 2758.110064][T26952] Bluetooth: hci5: command tx timeout [ 2758.289767][T25302] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2758.516713][T25302] usb 1-1: Using ep0 maxpacket: 32 [ 2758.549646][T25302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2758.560815][T25302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2758.570902][T25302] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2758.580044][T25302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2758.606873][T25302] usb 1-1: config 0 descriptor?? [ 2758.629155][T25302] hub 1-1:0.0: USB hub found [ 2758.856111][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7177'. [ 2758.866048][T13952] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2759.030784][T25302] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2759.102432][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 2759.109686][ T7685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2759.138191][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2759.145452][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2759.164463][T13922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2759.179634][T13922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2759.194828][T13922] bridge_slave_0: entered allmulticast mode [ 2759.204835][T13922] bridge_slave_0: entered promiscuous mode [ 2759.224156][T13922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2759.236787][T13922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2759.246335][T13922] bridge_slave_1: entered allmulticast mode [ 2759.260214][T13922] bridge_slave_1: entered promiscuous mode [ 2759.272403][T13715] veth0_vlan: entered promiscuous mode [ 2759.379737][T13715] veth1_vlan: entered promiscuous mode [ 2759.397953][T25302] usbhid 1-1:0.0: can't add hid device: -71 [ 2759.406325][T13922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2759.409716][T25302] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2759.433136][T13922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2759.469718][T25302] usb 1-1: USB disconnect, device number 8 [ 2759.556261][T13922] team0: Port device team_slave_0 added [ 2759.593194][T13922] team0: Port device team_slave_1 added [ 2759.681354][T17842] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2759.698847][T13922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2759.706807][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2759.737943][T13922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2759.773897][T13922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2759.788308][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2759.828386][T13922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2759.869650][T17842] usb 4-1: Using ep0 maxpacket: 32 [ 2759.877409][T17842] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2759.906853][T17842] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2759.926789][T17842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2759.958441][T17842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2759.979272][T17842] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2759.991459][T17842] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2759.992890][T13715] veth0_macvtap: entered promiscuous mode [ 2760.007410][T17842] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2760.020246][T17842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2760.055172][T17842] usb 4-1: config 0 descriptor?? [ 2760.185402][T13922] hsr_slave_0: entered promiscuous mode [ 2760.189901][T26952] Bluetooth: hci5: command tx timeout [ 2760.201453][T13922] hsr_slave_1: entered promiscuous mode [ 2760.210973][T13922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2760.218930][T13922] Cannot create hsr debugfs directory [ 2760.233843][T13715] veth1_macvtap: entered promiscuous mode [ 2760.304035][T17842] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 98 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2760.367813][T13715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.386882][T13715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.397489][T13715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.415030][T13715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.426195][T13715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2760.443813][T13715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.458527][T13715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2760.471500][T13715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2760.474446][T27848] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2760.496271][T13715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.513850][ C0] usblp0: nonzero read bulk status received: -71 [ 2760.529133][T17842] usb 4-1: USB disconnect, device number 98 [ 2760.537055][T13715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2760.557807][T13715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.568017][T13715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2760.585187][T13715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2760.600409][T13715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2760.667572][T13808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2760.672981][T27848] usb 1-1: Using ep0 maxpacket: 16 [ 2760.701985][T27848] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2760.713120][T13715] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.722329][T13715] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.734519][T27848] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2760.748001][T13715] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.757012][T27848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2760.766069][T13715] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.774873][T27848] usb 1-1: Product: syz [ 2760.779060][T27848] usb 1-1: Manufacturer: syz [ 2760.786580][T27848] usb 1-1: SerialNumber: syz [ 2760.802146][T27848] usb 1-1: config 0 descriptor?? [ 2760.815730][T27848] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2760.825490][T13980] ======================================================= [ 2760.825490][T13980] WARNING: The mand mount option has been deprecated and [ 2760.825490][T13980] and is ignored by this kernel. Remove the mand [ 2760.825490][T13980] option from the mount to silence this warning. [ 2760.825490][T13980] ======================================================= [ 2760.865539][T27848] usb 1-1: Detected FT232R [ 2760.871404][T13978] usblp0: removed [ 2761.018742][T27848] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2761.258761][T27848] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2761.289284][T12217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2761.298106][T12217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2761.341930][T13808] veth0_vlan: entered promiscuous mode [ 2761.376275][ T1787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2761.402907][ T1787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2761.405441][T13808] veth1_vlan: entered promiscuous mode [ 2761.463844][ T7640] usb 1-1: USB disconnect, device number 9 [ 2761.549907][ T7640] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2761.572000][ T7640] ftdi_sio 1-1:0.0: device disconnected [ 2761.573272][T13808] veth0_macvtap: entered promiscuous mode [ 2761.605894][T13808] veth1_macvtap: entered promiscuous mode [ 2761.718458][T13808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2761.789477][T13808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.804822][T13808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2761.833228][T13808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.855823][T13808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2761.873372][T13808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.884396][T13808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2761.895547][T13808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2761.934520][T13808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2762.042933][T13808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2762.094169][T13808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2762.131838][T13808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2762.157703][T13808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2762.183428][T13808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2762.214650][T13808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2762.239732][T13808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2762.259772][T26952] Bluetooth: hci5: command tx timeout [ 2762.261149][T13808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2762.326903][T13808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2762.399116][T13808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2762.435748][T13808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2762.469886][T13808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2762.478633][T13808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2762.555227][ T29] audit: type=1400 audit(1725578727.841:9107): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=14051 comm="syz.0.7187" [ 2762.592979][T13922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2762.627003][T14054] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7187'. [ 2762.637931][T13922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2762.676074][T13922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2762.723379][T13922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2762.739891][T14057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7189'. [ 2762.919755][T11108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2763.039687][T22808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2763.077482][T22808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2763.100137][ T29] audit: type=1326 audit(1725578728.381:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14061 comm="syz.3.7191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17cef9 code=0x0 [ 2763.134194][T11108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2763.168941][ T1787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2763.180681][T11108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2763.216608][ T1787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2763.236218][T11108] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2763.236251][T11108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2763.249991][T11108] usb 1-1: config 0 descriptor?? [ 2763.252036][T14054] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2763.255327][T11108] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2763.374215][T13922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2763.459113][T13922] 8021q: adding VLAN 0 to HW filter on device team0 [ 2763.467005][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2763.479111][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2763.492232][T22808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2763.492313][T22808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2763.512337][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 2763.512467][T12217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2763.531027][T14070] tipc: Started in network mode [ 2763.531049][T14070] tipc: Node identity ac14140f, cluster identity 4711 [ 2763.532029][T14070] tipc: New replicast peer: 255.255.255.255 [ 2763.532973][T14070] tipc: Enabled bearer , priority 10 [ 2763.842565][T13922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2763.922442][T13922] veth0_vlan: entered promiscuous mode [ 2763.944098][T13922] veth1_vlan: entered promiscuous mode [ 2764.004108][T11108] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 2764.011381][T11108] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2764.011432][T11108] usb 1-1: MIDIStreaming interface descriptor not found [ 2764.121946][T13922] veth0_macvtap: entered promiscuous mode [ 2764.152708][T13922] veth1_macvtap: entered promiscuous mode [ 2764.273101][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2764.273120][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.273128][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2764.273136][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.273143][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2764.273151][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.273158][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2764.273166][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.273173][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2764.273181][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.276686][T13922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2764.281320][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.281336][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.281344][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.281352][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.281359][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.281366][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.281373][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.281381][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.281455][T13922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2764.281470][T13922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2764.282428][T13922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2764.285160][T13922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2764.285183][T13922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2764.285200][T13922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2764.285215][T13922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2764.576705][T22808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2764.576731][T22808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2764.596742][ T4685] Dev loop7: unable to read RDB block 1 [ 2764.596790][ T4685] loop7: unable to read partition table [ 2764.596997][ T4685] loop7: partition table beyond EOD, truncated [ 2764.649720][T11108] tipc: Node number set to 2886997007 [ 2764.673266][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2764.673291][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2765.224904][T27857] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2765.409600][T27857] usb 2-1: Using ep0 maxpacket: 16 [ 2765.430087][T27857] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2765.451422][T27857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2765.484554][T27857] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2765.529854][T11108] usb 1-1: USB disconnect, device number 10 [ 2765.547205][T27857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2765.570219][T27857] usb 2-1: Product: syz [ 2765.574513][T27857] usb 2-1: Manufacturer: syz [ 2765.591461][T27857] usb 2-1: SerialNumber: syz [ 2765.613602][T27857] usb 2-1: config 0 descriptor?? [ 2765.647185][T27857] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2765.649575][T27856] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2765.679539][T27857] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2765.731001][T14110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7201'. [ 2765.829683][T27856] usb 5-1: device descriptor read/64, error -71 [ 2765.834634][T14113] tipc: Started in network mode [ 2765.844439][T14113] tipc: Node identity ac14140f, cluster identity 4711 [ 2765.853493][T14113] tipc: New replicast peer: 255.255.255.255 [ 2765.865067][T14113] tipc: Enabled bearer , priority 10 [ 2766.076154][T14119] netlink: 'syz.3.7204': attribute type 10 has an invalid length. [ 2766.099589][T27856] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2766.114490][T14119] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2766.140438][T14119] netlink: 'syz.3.7204': attribute type 10 has an invalid length. [ 2766.246844][T27857] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2766.263214][T27857] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 2766.279808][T27856] usb 5-1: device descriptor read/64, error -71 [ 2766.400451][T27856] usb usb5-port1: attempt power cycle [ 2766.496719][T27857] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 2766.521079][T27857] em28xx 2-1:0.0: No AC97 audio processor [ 2766.829754][T27856] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2766.869554][T25302] tipc: Node number set to 2886997007 [ 2766.870259][T27856] usb 5-1: device descriptor read/8, error -71 [ 2767.022086][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.165270][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.179515][T27856] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2767.222662][T27856] usb 5-1: device descriptor read/8, error -71 [ 2767.229645][T25302] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2767.326894][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.360040][T27856] usb usb5-port1: unable to enumerate USB device [ 2767.425005][T25302] usb 1-1: Using ep0 maxpacket: 32 [ 2767.444680][T25302] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 2767.445822][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.481694][T25302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.531006][T25302] usb 1-1: Product: syz [ 2767.543279][T25302] usb 1-1: Manufacturer: syz [ 2767.563664][T25302] usb 1-1: SerialNumber: syz [ 2767.599597][T26354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2767.614158][T26354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2767.622843][T25302] usb 1-1: config 0 descriptor?? [ 2767.633286][T26354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2767.643296][T26354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2767.651548][T26354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2767.667704][T27856] usb 2-1: USB disconnect, device number 86 [ 2767.668061][T26354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2767.731373][T27856] em28xx 2-1:0.0: Disconnecting em28xx [ 2767.831587][T27856] em28xx 2-1:0.0: Freeing device [ 2767.903572][T25302] gspca_main: pac207-2.14.0 probing 093a:2476 [ 2767.915226][T25302] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 2767.935420][ T11] bridge_slave_1: left allmulticast mode [ 2767.966574][T25302] usb 1-1: USB disconnect, device number 11 [ 2767.972998][ T11] bridge_slave_1: left promiscuous mode [ 2768.007381][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2768.061074][ T11] bridge_slave_0: left allmulticast mode [ 2768.073531][ T11] bridge_slave_0: left promiscuous mode [ 2768.083965][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2768.201886][T14145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7213'. [ 2768.350853][T14152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7214'. [ 2768.483312][T14158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2768.949788][ T7640] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2769.194282][ T7640] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2769.205049][ T7640] usb 4-1: config 0 has no interface number 0 [ 2769.213709][ T7640] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2769.261628][ T7640] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2769.272821][ T7640] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2769.292096][ T7640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.307151][ T7640] usb 4-1: config 0 descriptor?? [ 2769.450521][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2769.463945][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2769.475409][ T11] bond0 (unregistering): Released all slaves [ 2769.697617][ T11] tipc: Disabling bearer [ 2769.710867][ T11] tipc: Left network mode [ 2769.756673][ T7640] uclogic 0003:256C:006D.00B2: unknown main item tag 0x0 [ 2769.784754][T26952] Bluetooth: hci0: command tx timeout [ 2769.798451][ T7640] uclogic 0003:256C:006D.00B2: unknown main item tag 0x0 [ 2769.827225][ T7640] uclogic 0003:256C:006D.00B2: unknown main item tag 0x0 [ 2769.842364][ T7640] uclogic 0003:256C:006D.00B2: unknown main item tag 0x0 [ 2769.849826][ T7640] uclogic 0003:256C:006D.00B2: unknown main item tag 0x0 [ 2769.857738][ T7640] uclogic 0003:256C:006D.00B2: No inputs registered, leaving [ 2769.885465][ T7640] uclogic 0003:256C:006D.00B2: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 2770.137323][T14194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2770.175124][T14194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2770.543400][ T11] hsr_slave_0: left promiscuous mode [ 2770.576196][ T11] hsr_slave_1: left promiscuous mode [ 2770.594984][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2770.609579][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2770.635060][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2770.643190][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2770.695805][ T5290] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2770.738044][ T11] veth1_macvtap: left promiscuous mode [ 2770.754137][ T11] veth0_macvtap: left promiscuous mode [ 2770.773524][ T11] veth1_vlan: left promiscuous mode [ 2770.785012][ T11] veth0_vlan: left promiscuous mode [ 2770.922079][ T5290] usb 5-1: Using ep0 maxpacket: 16 [ 2770.967574][ T5290] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2770.990185][T14221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7229'. [ 2771.008663][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.026099][ T5290] usb 5-1: Product: syz [ 2771.036767][ T5290] usb 5-1: Manufacturer: syz [ 2771.062521][ T5290] usb 5-1: SerialNumber: syz [ 2771.083822][ T5290] usb 5-1: config 0 descriptor?? [ 2771.106359][ T5290] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 2771.321057][ T5299] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2771.449105][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2771.465579][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2771.543587][ T5299] usb 1-1: Using ep0 maxpacket: 32 [ 2771.580387][ T5299] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2771.623449][ T5299] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2771.671920][T27853] usb 4-1: USB disconnect, device number 99 [ 2771.672741][ T5299] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2771.740631][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.787766][ T5299] usb 1-1: Product: syz [ 2771.796468][ T5299] usb 1-1: Manufacturer: syz [ 2771.801832][ T5299] usb 1-1: SerialNumber: syz [ 2771.825649][ T5299] usb 1-1: config 0 descriptor?? [ 2771.860076][T26952] Bluetooth: hci0: command tx timeout [ 2772.300047][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2772.406587][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2773.448284][ T5290] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 2773.476880][ T5290] visor 5-1:0.0: probe with driver visor failed with error -71 [ 2773.497679][ T5290] usb 5-1: USB disconnect, device number 50 [ 2773.753463][T14138] chnl_net:caif_netlink_parms(): no params data found [ 2773.943102][T26952] Bluetooth: hci0: command tx timeout [ 2774.083120][ T7640] usb 1-1: USB disconnect, device number 12 [ 2774.192498][T14138] bridge0: port 1(bridge_slave_0) entered blocking state [ 2774.235115][T14138] bridge0: port 1(bridge_slave_0) entered disabled state [ 2774.255855][T14138] bridge_slave_0: entered allmulticast mode [ 2774.278950][T14138] bridge_slave_0: entered promiscuous mode [ 2774.307653][T14238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7234'. [ 2774.320011][T14138] bridge0: port 2(bridge_slave_1) entered blocking state [ 2774.352045][T14138] bridge0: port 2(bridge_slave_1) entered disabled state [ 2774.370494][T14138] bridge_slave_1: entered allmulticast mode [ 2774.393108][T14138] bridge_slave_1: entered promiscuous mode [ 2774.537682][T14138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2774.604637][T14138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2774.854370][T14138] team0: Port device team_slave_0 added [ 2774.921868][T14138] team0: Port device team_slave_1 added [ 2775.163970][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.173790][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.585351][T14138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2775.592402][T14138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2775.627497][T14138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2775.678379][T14138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2775.708163][T14138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2775.734090][ C0] vkms_vblank_simulate: vblank timer overrun [ 2775.743185][T14289] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7246'. [ 2775.775878][T14138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2775.819918][ T7640] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 2775.883597][T14138] hsr_slave_0: entered promiscuous mode [ 2775.897900][T14138] hsr_slave_1: entered promiscuous mode [ 2775.911992][T14138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2775.919888][T14138] Cannot create hsr debugfs directory [ 2776.019674][T26952] Bluetooth: hci0: command tx timeout [ 2776.028038][ T7640] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2776.049485][ T7640] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2776.049495][ T5290] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2776.091685][ T7640] usb 4-1: config 0 has no interface number 0 [ 2776.099170][ T7640] usb 4-1: too many endpoints for config 0 interface 132 altsetting 49: 222, using maximum allowed: 30 [ 2776.116406][ T7640] usb 4-1: config 0 interface 132 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 222 [ 2776.130450][ T7640] usb 4-1: config 0 interface 132 has no altsetting 0 [ 2776.163611][ T7640] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 2776.176629][ T7640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2776.210878][ T7640] usb 4-1: Product: syz [ 2776.218601][ T7640] usb 4-1: Manufacturer: syz [ 2776.229522][ T5290] usb 5-1: Using ep0 maxpacket: 32 [ 2776.243313][ T7640] usb 4-1: SerialNumber: syz [ 2776.259835][ T5290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2776.280824][ T7640] usb 4-1: config 0 descriptor?? [ 2776.293214][ T7640] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 2776.304466][ T5290] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2776.313712][ T7640] dvb-usb: bulk message failed: -22 (3/0) [ 2776.344020][ T5290] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2776.357382][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2776.372432][ T5290] usb 5-1: Product: syz [ 2776.375931][ T7640] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2776.376702][ T5290] usb 5-1: Manufacturer: syz [ 2776.402022][ T5290] usb 5-1: SerialNumber: syz [ 2776.413624][ T5290] usb 5-1: config 0 descriptor?? [ 2776.437150][ T7640] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 2776.477539][ T7640] dvb_usb_umt_010 4-1:0.132: probe with driver dvb_usb_umt_010 failed with error -22 [ 2776.544042][ T7640] usb 4-1: USB disconnect, device number 100 [ 2776.734077][T14308] openvswitch: netlink: Message has 16 unknown bytes. [ 2777.576478][T14138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2777.603723][T14138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2777.650925][T14138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2777.687936][T14138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2778.053641][T14138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2778.127109][T14138] 8021q: adding VLAN 0 to HW filter on device team0 [ 2778.174442][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 2778.181649][T12217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2778.241841][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 2778.249154][T12217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2778.495239][T14138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2778.529711][ T5299] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2778.617333][T14138] veth0_vlan: entered promiscuous mode [ 2778.638314][T14138] veth1_vlan: entered promiscuous mode [ 2778.716452][T14138] veth0_macvtap: entered promiscuous mode [ 2778.735955][T27853] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2778.763914][T14138] veth1_macvtap: entered promiscuous mode [ 2778.771013][ T5299] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2778.807165][ T5299] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2778.824919][ T5290] usb 5-1: USB disconnect, device number 51 [ 2778.842042][ T5299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2778.856770][ T5299] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 2778.874640][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2778.888123][ T5299] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 2778.931516][T27853] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2778.934748][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2778.943146][T27853] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2778.962951][T27853] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2778.970902][ T5299] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2778.980245][T27853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2778.989073][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2779.001964][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2779.005001][T14358] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2779.017491][ T5299] usb 1-1: Product: syz [ 2779.026095][ T5299] usb 1-1: Manufacturer: syz [ 2779.039466][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.081852][ T5299] cdc_wdm 1-1:1.0: skipping garbage [ 2779.083039][T27853] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2779.087243][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2779.127911][ T5299] cdc_wdm 1-1:1.0: skipping garbage [ 2779.147354][ T5299] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2779.164350][ T5299] cdc_wdm 1-1:1.0: Unknown control protocol [ 2779.191543][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.217700][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2779.237318][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.256269][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2779.334251][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.394336][T14138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2779.473259][T14374] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 2779.495305][T25302] usb 4-1: USB disconnect, device number 101 [ 2779.509841][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2779.552215][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.571728][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2779.572255][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.652241][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2779.675139][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.686802][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2779.698804][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.711559][T14138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2779.723392][T14138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2779.737142][T14138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2779.755540][ T5290] usb 1-1: USB disconnect, device number 13 [ 2779.783466][T14378] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7263'. [ 2779.798839][T14138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2779.823976][T14138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2779.848264][T14138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2779.869281][T14138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2780.082528][ T29] audit: type=1400 audit(1725578745.361:9109): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=14386 comm="syz.1.7265" [ 2780.149808][T14389] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7265'. [ 2780.368703][ T1787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2780.419261][ T1787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2780.499661][ T5290] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2780.565542][ T29] audit: type=1400 audit(1725578745.851:9110): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=14396 comm="syz.0.7268" [ 2780.606354][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2780.611887][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7267'. [ 2780.619687][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2780.668863][T14401] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7268'. [ 2780.733260][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2780.785214][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2780.797168][ T5290] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2780.797188][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.817527][ T5290] usb 2-1: config 0 descriptor?? [ 2780.820264][T14393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2780.828232][ T5290] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2780.955561][T14384] PM: Enabling pm_trace changes system date and time during resume. [ 2780.955561][T14384] PM: Correct system time has to be restored manually after resume. [ 2780.994484][T27856] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2781.097716][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2781.132032][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2781.180754][T27856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2781.208802][T27856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2781.270627][T27856] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2781.303956][T27856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2781.407125][T27856] usb 1-1: config 0 descriptor?? [ 2781.428143][T14401] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2781.471338][T27856] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2781.660623][ T5290] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 2781.661777][ T5290] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2781.661809][ T5290] usb 2-1: MIDIStreaming interface descriptor not found [ 2781.750349][T14401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2781.811934][T14401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2782.001211][T27856] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 2782.050810][T27856] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2782.074890][T27856] usb 1-1: MIDIStreaming interface descriptor not found [ 2783.032396][T17842] usb 2-1: USB disconnect, device number 87 [ 2783.529786][T11108] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2783.751456][T25302] usb 1-1: USB disconnect, device number 14 [ 2783.769157][T11108] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2783.821877][T11108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2783.845617][T11108] usb 3-1: Product: syz [ 2783.856035][T11108] usb 3-1: Manufacturer: syz [ 2783.889855][T11108] usb 3-1: SerialNumber: syz [ 2783.899203][T11108] usb 3-1: config 0 descriptor?? [ 2783.924954][T11108] ch341 3-1:0.0: ch341-uart converter detected [ 2784.085411][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7279'. [ 2784.156215][T11108] usb 3-1: failed to receive control message: -121 [ 2784.172629][T11108] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 2784.679923][T27856] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2784.889485][T27856] usb 4-1: Using ep0 maxpacket: 16 [ 2784.900429][T11108] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2784.920477][T27856] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2784.942867][T27856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2784.970075][T27856] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2784.987409][T27856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2785.005889][T27856] usb 4-1: Product: syz [ 2785.018618][T27856] usb 4-1: Manufacturer: syz [ 2785.030348][T14519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2785.040289][T27856] usb 4-1: SerialNumber: syz [ 2785.047463][T27856] usb 4-1: config 0 descriptor?? [ 2785.075066][T27856] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2785.091015][T27856] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2785.119749][T11108] usb 2-1: Using ep0 maxpacket: 32 [ 2785.131502][T11108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2785.143275][T11108] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2785.153450][T14519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2785.184037][T11108] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2785.199896][T11108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2785.218876][T11108] usb 2-1: Product: syz [ 2785.231209][T11108] usb 2-1: Manufacturer: syz [ 2785.236744][T11108] usb 2-1: SerialNumber: syz [ 2785.258395][T11108] usb 2-1: config 0 descriptor?? [ 2785.329494][ T5288] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2785.479450][ T5288] usb 5-1: device descriptor read/64, error -71 [ 2785.674447][T27856] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2785.682434][T27856] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 2785.749489][ T5288] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2785.841534][ T29] audit: type=1400 audit(1725578751.131:9111): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=14527 comm="syz.0.7294" [ 2785.877338][T14529] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7294'. [ 2785.909504][ T5288] usb 5-1: device descriptor read/64, error -71 [ 2786.014751][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.034450][ T5288] usb usb5-port1: attempt power cycle [ 2786.040427][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.169661][T11108] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2786.299651][T27856] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 2786.307470][T27856] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 2786.317623][T27856] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 2786.329321][T27856] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 2786.337989][T27856] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 2786.386063][T11108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2786.399910][T11108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2786.412111][T11108] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2786.421619][T11108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2786.439881][T11108] usb 1-1: config 0 descriptor?? [ 2786.456960][ T5288] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2786.471548][T14529] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 2786.491993][T11108] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2786.530872][ T5288] usb 5-1: device descriptor read/8, error -71 [ 2786.718526][T14529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.731193][T14529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.799510][ T5288] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2786.831059][ T5288] usb 5-1: device descriptor read/8, error -71 [ 2786.963672][ T5288] usb usb5-port1: unable to enumerate USB device [ 2787.114921][ T5288] usb 3-1: USB disconnect, device number 91 [ 2787.155436][ T5288] ch341 3-1:0.0: device disconnected [ 2787.260840][T11108] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 2787.295720][T11108] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2787.323915][T11108] usb 1-1: MIDIStreaming interface descriptor not found [ 2787.506025][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7296'. [ 2787.650234][T27848] usb 2-1: USB disconnect, device number 88 [ 2788.126470][T27848] usb 4-1: USB disconnect, device number 102 [ 2788.523000][T14558] netlink: 'syz.4.7303': attribute type 5 has an invalid length. [ 2788.549584][T14558] netlink: 'syz.4.7303': attribute type 11 has an invalid length. [ 2788.557719][T14558] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7303'. [ 2788.575793][T14562] vlan2: entered promiscuous mode [ 2788.598574][T14562] macvtap0: entered promiscuous mode [ 2788.627225][T14562] vlan2: entered allmulticast mode [ 2788.650302][T14562] macvtap0: entered allmulticast mode [ 2788.669567][T14562] veth0_macvtap: entered allmulticast mode [ 2788.707928][T14562] macvtap0: left allmulticast mode [ 2788.724485][T14562] veth0_macvtap: left allmulticast mode [ 2788.743816][T14562] macvtap0: left promiscuous mode [ 2788.810760][ T29] audit: type=1326 audit(1725578754.081:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da677cef9 code=0x7ffc0000 [ 2788.833313][ C0] vkms_vblank_simulate: vblank timer overrun [ 2788.912037][T17842] usb 1-1: USB disconnect, device number 15 [ 2788.922399][ T29] audit: type=1326 audit(1725578754.131:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3da677b890 code=0x7ffc0000 [ 2788.966575][ T29] audit: type=1326 audit(1725578754.131:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3da677b890 code=0x7ffc0000 [ 2789.008036][ T29] audit: type=1326 audit(1725578754.131:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da677cef9 code=0x7ffc0000 [ 2789.094664][ T29] audit: type=1326 audit(1725578754.131:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da677cef9 code=0x7ffc0000 [ 2789.135043][ T29] audit: type=1326 audit(1725578754.141:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3da677cef9 code=0x7ffc0000 [ 2789.168276][ T29] audit: type=1326 audit(1725578754.141:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da677cef9 code=0x7ffc0000 [ 2789.222485][ T29] audit: type=1326 audit(1725578754.141:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da677cef9 code=0x7ffc0000 [ 2789.321482][ T29] audit: type=1326 audit(1725578754.141:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.4.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f3da677cef9 code=0x7ffc0000 [ 2789.499551][T27848] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2789.507450][T14590] xt_TCPMSS: Only works on TCP SYN packets [ 2789.529656][T25302] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2789.599174][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7315'. [ 2789.691015][T14586] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2789.699573][T27848] usb 5-1: Using ep0 maxpacket: 32 [ 2789.721172][T25302] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2789.721354][T27848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2789.742920][T25302] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2789.755409][T25302] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2789.765432][T25302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2789.779124][T14579] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2789.791778][T25302] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2789.837098][T27848] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2789.904298][T27848] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2789.935215][T27848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2789.950533][T27848] usb 5-1: Product: syz [ 2789.954858][T27848] usb 5-1: Manufacturer: syz [ 2789.960735][T27848] usb 5-1: SerialNumber: syz [ 2789.994381][T27848] usb 5-1: config 0 descriptor?? [ 2789.994847][T25302] usb 2-1: USB disconnect, device number 89 [ 2790.744298][T14623] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7324'. [ 2790.953621][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 2790.953637][ T29] audit: type=1400 audit(1725578756.241:9179): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=14626 comm="syz.1.7326" [ 2791.022183][T14630] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7326'. [ 2791.060578][T27856] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2791.251900][T27856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2791.306285][T27856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2791.329716][T27848] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2791.368235][T27856] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2791.383640][T27856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.416091][T27856] usb 1-1: config 0 descriptor?? [ 2791.440164][T14623] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2791.466760][T27856] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2791.529653][T14636] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 2791.557851][T27848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2791.574971][T27848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2791.588061][T27848] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2791.599625][T27848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.621617][T27848] usb 2-1: config 0 descriptor?? [ 2791.643234][T14630] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2791.659587][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2791.678641][T27848] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2791.686375][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2791.963385][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2792.010940][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2792.174530][T11108] usb 5-1: USB disconnect, device number 56 [ 2792.220316][T27856] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 2792.253577][T27856] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2792.278468][T27856] usb 1-1: MIDIStreaming interface descriptor not found [ 2792.580794][T27848] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 2792.610838][T27848] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2792.626736][T27848] usb 2-1: MIDIStreaming interface descriptor not found [ 2792.759467][T11108] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2792.829472][T27856] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2792.930175][T11108] usb 5-1: device descriptor read/64, error -71 [ 2793.032649][T27856] usb 3-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 2793.094519][T27856] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2793.106007][T27856] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2793.117789][T27856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2793.128111][T27856] usb 3-1: Product: syz [ 2793.133928][T27856] usb 3-1: Manufacturer: syz [ 2793.141513][T27856] usb 3-1: SerialNumber: syz [ 2793.160596][T14652] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 2793.175944][T14652] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 2793.193328][T27856] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2793.239448][T11108] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2793.399513][T11108] usb 5-1: device descriptor read/64, error -71 [ 2793.411728][T14652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2793.438668][T14652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2793.449111][T27853] usb 3-1: USB disconnect, device number 92 [ 2793.549777][T11108] usb usb5-port1: attempt power cycle [ 2793.657735][ T5299] usb 1-1: USB disconnect, device number 16 [ 2793.660584][T27856] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2793.892361][T17842] usb 2-1: USB disconnect, device number 90 [ 2793.896286][T27856] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2793.941364][T27856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2793.967123][T27856] usb 4-1: Product: syz [ 2793.979686][T11108] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2793.995259][T27856] usb 4-1: Manufacturer: syz [ 2794.009559][T27853] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2794.026751][T27856] usb 4-1: SerialNumber: syz [ 2794.039044][T11108] usb 5-1: device descriptor read/8, error -71 [ 2794.058115][T27856] usb 4-1: config 0 descriptor?? [ 2794.079015][T27856] ch341 4-1:0.0: ch341-uart converter detected [ 2794.238751][T27853] usb 3-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 2794.252706][T27853] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2794.267488][T27853] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2794.283669][T27856] usb 4-1: failed to receive control message: -121 [ 2794.302996][T27853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2794.320688][T27856] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 2794.330981][T11108] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2794.349497][T27853] usb 3-1: Product: syz [ 2794.353712][T27853] usb 3-1: Manufacturer: syz [ 2794.369483][T27853] usb 3-1: SerialNumber: syz [ 2794.390072][T11108] usb 5-1: device descriptor read/8, error -71 [ 2794.398117][T14652] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2794.406220][T14652] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2794.421515][T27853] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2794.529930][T11108] usb usb5-port1: unable to enumerate USB device [ 2794.950853][T14683] xt_hashlimit: invalid interval [ 2795.431408][T27853] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2795.635944][T27853] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2795.648083][T27853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2795.672960][T27853] usb 2-1: Product: syz [ 2795.678568][T27853] usb 2-1: Manufacturer: syz [ 2795.688446][T27853] usb 2-1: SerialNumber: syz [ 2795.711490][ T5299] usb 3-1: USB disconnect, device number 93 [ 2795.740480][T27853] usb 2-1: config 0 descriptor?? [ 2795.784418][T27853] ch341 2-1:0.0: ch341-uart converter detected [ 2795.867612][T14700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7348'. [ 2795.992410][ T29] audit: type=1400 audit(1725578761.281:9180): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=14702 comm="syz.0.7349" [ 2796.026209][T14704] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7349'. [ 2796.065672][T14705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2796.086428][T14705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2796.299745][ T5299] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2796.310720][T27856] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2796.459713][ T5299] usb 3-1: device descriptor read/64, error -71 [ 2796.528680][T27856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2796.563395][T14712] netlink: 'syz.4.7351': attribute type 4 has an invalid length. [ 2796.580024][T27856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2796.589480][T14712] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7351'. [ 2796.604229][T27856] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2796.617478][T27856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2796.626446][T14712] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2796.646943][T27856] usb 1-1: config 0 descriptor?? [ 2796.671162][T14704] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2796.697329][T27856] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2796.716995][T14712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7351'. [ 2796.759498][ T5299] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2796.864574][T27853] ch341-uart ttyUSB1: break control not supported, using simulated break [ 2796.875272][T14714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2796.895180][T27853] usb 2-1: ch341-uart converter now attached to ttyUSB1 [ 2796.902674][T14704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2796.912883][T14714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2796.942042][T14704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2796.950528][ T5299] usb 3-1: device descriptor read/64, error -71 [ 2797.103894][T27853] usb 2-1: USB disconnect, device number 91 [ 2797.119943][ T5299] usb usb3-port1: attempt power cycle [ 2797.146921][T27853] ch341-uart ttyUSB1: ch341-uart converter now disconnected from ttyUSB1 [ 2797.169744][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7352'. [ 2797.196373][T27853] ch341 2-1:0.0: device disconnected [ 2797.346528][T11108] usb 4-1: USB disconnect, device number 103 [ 2797.399762][T11108] ch341 4-1:0.0: device disconnected [ 2797.483835][T27856] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 2797.498599][T27856] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2797.511348][T27856] usb 1-1: MIDIStreaming interface descriptor not found [ 2797.599826][ T5299] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2797.660593][ T5299] usb 3-1: device descriptor read/8, error -71 [ 2797.959722][ T5299] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2797.979397][T27856] IPVS: starting estimator thread 0... [ 2798.040705][ T5299] usb 3-1: device descriptor read/8, error -71 [ 2798.052924][T27848] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2798.089527][T14738] IPVS: using max 33 ests per chain, 79200 per kthread [ 2798.225402][ T5299] usb usb3-port1: unable to enumerate USB device [ 2798.239780][T27848] usb 4-1: Using ep0 maxpacket: 16 [ 2798.265567][T27848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2798.318294][T27848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2798.348706][T27848] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2798.370839][T27848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2798.395905][T27848] usb 4-1: Product: syz [ 2798.412023][T27848] usb 4-1: Manufacturer: syz [ 2798.417637][T27848] usb 4-1: SerialNumber: syz [ 2798.442280][T27848] usb 4-1: config 0 descriptor?? [ 2798.470733][T27848] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2798.488116][T27848] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2798.983595][T11108] usb 1-1: USB disconnect, device number 17 [ 2799.080306][T27848] em28xx 4-1:0.0: chip ID is em2874 [ 2799.104332][T14750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7359'. [ 2799.251755][T14757] x_tables: duplicate underflow at hook 3 [ 2799.290509][T11108] usb 4-1: USB disconnect, device number 104 [ 2799.324931][T11108] em28xx 4-1:0.0: Disconnecting em28xx [ 2799.343925][T11108] em28xx 4-1:0.0: Freeing device [ 2799.370382][T27856] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2799.519739][ T5299] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2799.573614][T27856] usb 5-1: config index 0 descriptor too short (expected 65535, got 36) [ 2799.590157][T27856] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2799.599509][T27856] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2799.614601][T27856] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2799.640449][T27856] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 2799.656622][T27856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2799.694301][T27856] usb 5-1: SerialNumber: syz [ 2799.742423][ T5299] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2799.770291][ T5299] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2799.801734][ T5299] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2799.830694][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2799.972831][ T29] audit: type=1326 audit(1725578765.261:9181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.3.7364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b17cef9 code=0x0 [ 2800.224443][T27856] usb 2-1: USB disconnect, device number 92 [ 2800.383564][T14776] netlink: 'syz.0.7366': attribute type 10 has an invalid length. [ 2800.421772][T14776] team0: Cannot enslave team device to itself [ 2800.513787][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7367'. [ 2800.902776][ T29] audit: type=1400 audit(1725578766.191:9182): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=14790 comm="syz.1.7370" [ 2800.942735][T14792] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7370'. [ 2801.229497][T27856] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2801.274636][T14796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7372'. [ 2801.361033][T11108] usb 5-1: USB disconnect, device number 61 [ 2801.473158][T27856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2801.523039][T27856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2801.560182][T27856] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2801.568605][T14800] pim6reg1: entered promiscuous mode [ 2801.570432][T27856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2801.605236][T14800] pim6reg1: entered allmulticast mode [ 2801.620480][T27856] usb 2-1: config 0 descriptor?? [ 2801.640907][T14792] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2801.657304][T27856] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2801.883630][T14792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2801.902149][T14792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.454772][T27856] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 2802.473483][T27856] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2802.521264][T27856] usb 2-1: MIDIStreaming interface descriptor not found [ 2802.865805][T14826] xt_hashlimit: invalid interval [ 2803.419597][ T5299] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2803.587144][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7386'. [ 2803.631898][ T5299] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2803.663291][ T5299] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2803.679447][ T5299] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2803.699883][T25302] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2803.709239][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2803.902071][T25302] usb 1-1: config index 0 descriptor too short (expected 65535, got 36) [ 2803.907415][T27856] usb 2-1: USB disconnect, device number 93 [ 2803.949636][T25302] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2803.994607][T25302] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2804.027463][T25302] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2804.066753][T25302] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 2804.084930][T25302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2804.124474][T25302] usb 1-1: SerialNumber: syz [ 2804.280714][T27856] usb 4-1: USB disconnect, device number 105 [ 2804.766837][T14859] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7389'. [ 2805.037437][T14865] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.7391'. [ 2805.401103][T14880] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2805.830642][T14895] vlan2: entered promiscuous mode [ 2805.848524][T14895] macvtap0: entered promiscuous mode [ 2805.874510][T14895] vlan2: entered allmulticast mode [ 2805.894279][T14895] macvtap0: entered allmulticast mode [ 2805.912125][T14895] veth0_macvtap: entered allmulticast mode [ 2805.924331][T14895] macvtap0: left allmulticast mode [ 2805.934083][T14895] veth0_macvtap: left allmulticast mode [ 2805.949707][T14895] macvtap0: left promiscuous mode [ 2805.989866][T14897] vlan0: entered promiscuous mode [ 2806.160403][T27848] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2806.349582][T27848] usb 3-1: Using ep0 maxpacket: 16 [ 2806.376522][T27848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2806.409074][T25302] usb 1-1: USB disconnect, device number 18 [ 2806.427981][T27848] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2806.439804][ T5299] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2806.447719][T27848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2806.456535][T27848] usb 3-1: Product: syz [ 2806.469330][T27848] usb 3-1: Manufacturer: syz [ 2806.476078][T27848] usb 3-1: SerialNumber: syz [ 2806.494133][T27848] usb 3-1: config 0 descriptor?? [ 2806.504633][T27848] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2806.514246][T27856] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2806.523519][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7405'. [ 2806.534017][T27848] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2806.567405][T14913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7405'. [ 2806.640400][T11108] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2806.652952][ T5299] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2806.677171][ T5299] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2806.693961][ T5299] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2806.709505][T27856] usb 2-1: Using ep0 maxpacket: 32 [ 2806.725022][T27856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2806.730700][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2806.746401][T27856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2806.781836][T27856] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2806.811108][T27856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2806.840918][T27856] usb 2-1: config 0 descriptor?? [ 2806.847935][T11108] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2806.868924][T27856] hub 2-1:0.0: USB hub found [ 2806.887405][T11108] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 2806.920101][T11108] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 2806.943186][T11108] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2806.954110][T11108] usb 4-1: Product: syz [ 2806.962052][T11108] usb 4-1: SerialNumber: syz [ 2806.975529][T11108] option 4-1:7.0: GSM modem (1-port) converter detected [ 2807.059941][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7408'. [ 2807.142194][T27848] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2807.234097][T26952] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 2807.303661][T27856] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 2807.546758][T11108] usb 5-1: USB disconnect, device number 62 [ 2807.598083][T27848] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2807.608413][T27848] em28xx 3-1:0.0: board has no eeprom [ 2807.919605][T27848] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2807.944146][T27848] em28xx 3-1:0.0: dvb set to bulk mode. [ 2807.970732][T27859] em28xx 3-1:0.0: Binding DVB extension [ 2808.054615][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2808.096727][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.155712][T25302] usb 3-1: USB disconnect, device number 98 [ 2808.173556][T14930] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2808.214501][T25302] em28xx 3-1:0.0: Disconnecting em28xx [ 2808.290568][T27859] em28xx 3-1:0.0: Registering input extension [ 2808.312617][T25302] em28xx 3-1:0.0: Closing input extension [ 2808.374285][T25302] em28xx 3-1:0.0: Freeing device [ 2808.609478][ T5299] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2808.811625][ T5299] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2808.824086][ T5299] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2808.843790][ T5299] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2808.850244][T14940] fuse: Unknown parameter 'Äwÿ' [ 2808.857330][ T5299] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2808.884628][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2808.896794][ T5299] usb 5-1: SerialNumber: syz [ 2808.909511][T27859] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2809.099728][T27859] usb 1-1: Using ep0 maxpacket: 16 [ 2809.120656][T27859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2809.157967][T27859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2809.171031][T27859] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2809.179852][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2809.194383][T27859] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2809.208383][T27859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2809.214585][ T5299] usb 4-1: USB disconnect, device number 106 [ 2809.234261][ T5299] option 4-1:7.0: device disconnected [ 2809.268551][T26952] Bluetooth: hci2: unexpected subevent 0x0e length: 244 > 15 [ 2809.279114][ T4685] Dev loop7: unable to read RDB block 1 [ 2809.302249][T27859] usb 1-1: config 0 descriptor?? [ 2809.310866][ T4685] loop7: unable to read partition table [ 2809.335720][ T4685] loop7: partition table beyond EOD, truncated [ 2809.410265][T27856] usbhid 2-1:0.0: can't add hid device: -71 [ 2809.436055][T27856] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2809.482702][T27856] usb 2-1: USB disconnect, device number 94 [ 2809.738448][T27859] usbhid 1-1:0.0: can't add hid device: -71 [ 2809.758073][T27859] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2809.782927][T27859] usb 1-1: USB disconnect, device number 19 [ 2809.829817][ T5299] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2810.041248][ T5299] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2810.054182][ T5299] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2810.059625][T27856] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2810.067973][ T5299] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2810.089506][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2810.142688][ T5299] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2810.201173][ T5299] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2810.236869][T12618] udevd[12618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2810.275957][T27856] usb 2-1: config index 0 descriptor too short (expected 65535, got 36) [ 2810.310011][T27856] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2810.330203][T27856] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2810.366421][T14943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.370980][T27856] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2810.392441][T27856] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 2810.411721][T27856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2810.425152][T27856] usb 2-1: SerialNumber: syz [ 2810.431779][T14943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.460728][T11108] usb 5-1: USB disconnect, device number 63 [ 2810.488862][T14943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.510866][T14943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.532601][ T7640] usb 4-1: USB disconnect, device number 107 [ 2810.649463][ T5299] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2810.841443][ T5299] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2810.853246][ T5299] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2810.863579][ T5299] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2810.874416][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2811.170540][T14977] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2811.258849][ T29] audit: type=1400 audit(1725578776.541:9183): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=14981 comm="syz.3.7424" [ 2811.291142][T14984] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7424'. [ 2811.305679][T26952] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2811.317535][T26952] Bluetooth: hci1: Injecting HCI hardware error event [ 2811.328498][T26952] Bluetooth: hci1: hardware error 0x00 [ 2811.516090][T11108] usb 3-1: USB disconnect, device number 99 [ 2811.640977][ T5299] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2811.853910][ T5299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 2811.883918][ T5299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 2811.912781][ T5299] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2811.915461][ T29] audit: type=1326 audit(1725578777.201:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14991 comm="syz.0.7427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ae6b7cef9 code=0x0 [ 2811.946691][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2811.972747][ T5299] usb 4-1: config 0 descriptor?? [ 2811.986074][T14985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2812.014717][ T5299] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2812.218536][T14984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2812.230234][T14984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2812.319580][T27859] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2812.511968][T27859] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2812.543202][T27859] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2812.565115][T27859] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2812.594108][T27859] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2812.611243][T27859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2812.645510][T27859] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2812.663793][T27859] usb 1-1: invalid MIDI out EP 0 [ 2812.760415][ T5299] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 2812.826354][T25302] usb 2-1: USB disconnect, device number 95 [ 2812.857540][T27859] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2812.861189][ T5299] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2812.901840][T11610] udevd[11610]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2812.917304][ T5299] usb 4-1: MIDIStreaming interface descriptor not found [ 2813.031381][T11108] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2813.209511][T11108] usb 5-1: device descriptor read/64, error -71 [ 2813.249480][T17842] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2813.393756][T15016] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2813.459841][T26952] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2813.475375][T17842] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2813.491836][T11108] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2813.519015][T17842] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2813.558842][T17842] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2813.572573][T17842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2813.617307][T17842] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2813.649772][T11108] usb 5-1: device descriptor read/64, error -71 [ 2813.736352][T17842] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2813.782144][T11108] usb usb5-port1: attempt power cycle [ 2813.827165][T15021] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7437'. [ 2813.839211][T15008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2813.858018][T15021] binder: BINDER_SET_CONTEXT_MGR already set [ 2813.867662][T15021] binder: 15020:15021 ioctl 4018620d 20000040 returned -16 [ 2813.867833][T15008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2813.878012][T15021] netlink: 'syz.1.7437': attribute type 33 has an invalid length. [ 2813.922198][T15008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2813.944311][T15008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2814.000458][T27859] usb 3-1: USB disconnect, device number 100 [ 2814.211430][T27848] usb 4-1: USB disconnect, device number 108 [ 2814.219501][T11108] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2814.290236][T11108] usb 5-1: device descriptor read/8, error -71 [ 2814.439474][T17842] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2814.569871][T11108] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2814.620357][T11108] usb 5-1: device descriptor read/8, error -71 [ 2814.631397][T17842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2814.648397][T17842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2814.683906][T17842] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2814.696136][T17842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2814.710126][T17842] usb 2-1: SerialNumber: syz [ 2814.733510][T27848] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2814.750672][T11108] usb usb5-port1: unable to enumerate USB device [ 2814.937304][T27859] usb 1-1: USB disconnect, device number 20 [ 2814.953461][T27848] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2814.980902][T27848] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2815.005825][T17842] usb 2-1: 0:2 : does not exist [ 2815.017217][T27848] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2815.056785][T27848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2815.149648][T27856] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2815.360989][T27856] usb 3-1: Using ep0 maxpacket: 8 [ 2815.399934][T27856] usb 3-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 2815.424338][T27856] usb 3-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 2815.439317][T27856] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 2815.457044][T27856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2815.506815][T27856] usb 3-1: Product: syz [ 2815.519049][T27856] usb 3-1: Manufacturer: syz [ 2815.525666][T27856] usb 3-1: SerialNumber: syz [ 2815.540518][T26952] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 2815.563518][T27856] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 2815.578159][T27856] dvb-usb: bulk message failed: -22 (3/0) [ 2815.616317][T27856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2815.630372][T27856] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 2815.651903][T27856] usb 3-1: media controller created [ 2815.688106][T27856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2815.739012][T27856] dvb-usb: bulk message failed: -22 (6/0) [ 2815.756934][T27856] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 2815.802521][T27856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75 [ 2815.833261][T27859] usb 4-1: USB disconnect, device number 109 [ 2815.858504][T27856] dvb-usb: schedule remote query interval to 150 msecs. [ 2815.871816][T27856] dvb-usb: bulk message failed: -22 (3/0) [ 2815.900793][T27856] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 2816.030517][T27856] dvb-usb: bulk message failed: -22 (1/0) [ 2816.036490][T27856] dvb-usb: error while querying for an remote control event. [ 2816.192409][T27848] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2816.213581][T27856] dvb-usb: bulk message failed: -22 (1/0) [ 2816.221761][T27856] dvb-usb: error while querying for an remote control event. [ 2816.389622][T27856] dvb-usb: bulk message failed: -22 (1/0) [ 2816.425791][T27848] usb 5-1: config index 0 descriptor too short (expected 65535, got 36) [ 2816.437278][T27856] dvb-usb: error while querying for an remote control event. [ 2816.451438][T27848] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2816.468652][T27848] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2816.486572][T27848] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2816.510611][T27848] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 2816.528512][T27848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2816.536794][T27848] usb 5-1: SerialNumber: syz [ 2816.609997][T27848] dvb-usb: bulk message failed: -22 (1/0) [ 2816.619286][T27848] dvb-usb: error while querying for an remote control event. [ 2816.779722][T27848] dvb-usb: bulk message failed: -22 (1/0) [ 2816.798573][T27848] dvb-usb: error while querying for an remote control event. [ 2816.912050][T17842] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2816.980281][T27856] dvb-usb: bulk message failed: -22 (1/0) [ 2816.986854][T27856] dvb-usb: error while querying for an remote control event. [ 2817.102314][T17842] usb 4-1: device descriptor read/64, error -71 [ 2817.109696][T27848] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2817.162824][T27856] usb 2-1: USB disconnect, device number 96 [ 2817.170812][T27853] dvb-usb: bulk message failed: -22 (1/0) [ 2817.187952][T27853] dvb-usb: error while querying for an remote control event. [ 2817.359650][T27859] dvb-usb: bulk message failed: -22 (1/0) [ 2817.371162][T27859] dvb-usb: error while querying for an remote control event. [ 2817.371278][T27848] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2817.390824][ T30] INFO: task syz.1.6907:12420 blocked for more than 143 seconds. [ 2817.398556][ T30] Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 2817.406573][T17842] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2817.425775][T27848] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2817.445398][T27848] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2817.454737][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2817.468000][T27848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2817.476256][ T30] task:syz.1.6907 state:D stack:26264 pid:12420 tgid:12420 ppid:11314 flags:0x00004004 [ 2817.491214][T27848] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2817.501534][ T30] Call Trace: [ 2817.507968][ T30] [ 2817.515709][ T30] __schedule+0x1800/0x4a60 [ 2817.534700][ T30] ? __pfx___schedule+0x10/0x10 [ 2817.566994][T27848] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2817.567113][ T30] ? __pfx_lock_release+0x10/0x10 [ 2817.574956][T12618] udevd[12618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2817.597461][T27853] dvb-usb: bulk message failed: -22 (1/0) [ 2817.609600][T17842] usb 4-1: device descriptor read/64, error -71 [ 2817.616040][T27853] dvb-usb: error while querying for an remote control event. [ 2817.623966][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2817.629457][T26952] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 2817.665360][ T30] ? schedule+0x90/0x320 [ 2817.670082][ T30] schedule+0x14b/0x320 [ 2817.674580][ T30] schedule_preempt_disabled+0x13/0x30 [ 2817.685136][ T30] __mutex_lock+0x6a4/0xd70 [ 2817.696256][T15061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2817.705006][ T30] ? __mutex_lock+0x527/0xd70 [ 2817.716084][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 2817.721337][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2817.726568][ T30] ? __pfx_up_write+0x10/0x10 [ 2817.733448][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2817.742063][T17842] usb usb4-port1: attempt power cycle [ 2817.744178][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 2817.755240][ T30] hugetlb_wp+0x104d/0x3a90 [ 2817.762899][ T30] ? mark_lock+0x9a/0x350 [ 2817.767371][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 2817.774870][ T30] ? __pfx___might_resched+0x10/0x10 [ 2817.799567][T27848] dvb-usb: bulk message failed: -22 (1/0) [ 2817.817294][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2817.826309][T27848] dvb-usb: error while querying for an remote control event. [ 2817.829432][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 2817.855084][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2817.866619][ T30] ? __filemap_get_folio+0x769/0xc10 [ 2817.880274][ T30] hugetlb_fault+0x27b2/0x3770 [ 2817.894458][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 2817.903302][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 2817.917114][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2817.929481][ T30] handle_mm_fault+0x1901/0x1bc0 [ 2817.939883][ T30] ? mtree_range_walk+0x6fd/0x8e0 [ 2817.963127][ T30] ? __pfx_lock_release+0x10/0x10 [ 2817.968774][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 2817.976590][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 2817.985492][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 2817.989633][T27848] dvb-usb: bulk message failed: -22 (1/0) [ 2817.999042][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 2818.005863][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2818.008180][T27848] dvb-usb: error while querying for an remote control event. [ 2818.027583][ T30] ? exc_page_fault+0x113/0x8c0 [ 2818.037897][ T30] exc_page_fault+0x459/0x8c0 [ 2818.049170][ T30] asm_exc_page_fault+0x26/0x30 [ 2818.054865][ T30] RIP: 0033:0x7fb5fa94497c [ 2818.066434][ T30] RSP: 002b:00007fb5fac5fb88 EFLAGS: 00010246 [ 2818.075766][ T30] RAX: 0000000020000680 RBX: 0000000000000004 RCX: 8000000000000010 [ 2818.085647][ T30] RDX: 0000000000000010 RSI: 00007fb5fa4003e4 RDI: 0000000020000680 [ 2818.113192][ T30] RBP: 00007fb5fab37a80 R08: 00007fb5fa800000 R09: 0000000000000001 [ 2818.123063][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000288f45 [ 2818.135953][ T30] R13: 00007fb5fac5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 2818.145993][ T30] [ 2818.161829][ T30] INFO: task syz.1.6907:12421 blocked for more than 144 seconds. [ 2818.166552][T15061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2818.186732][ T30] Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 2818.193165][ T5288] dvb-usb: bulk message failed: -22 (1/0) [ 2818.196569][T15061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2818.203271][ T5288] dvb-usb: error while querying for an remote control event. [ 2818.210801][T17842] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2818.233482][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2818.255055][ T30] task:syz.1.6907 state:D stack:22864 pid:12421 tgid:12420 ppid:11314 flags:0x00004004 [ 2818.269431][ T30] Call Trace: [ 2818.276006][ T30] [ 2818.289824][T17842] usb 4-1: device descriptor read/8, error -71 [ 2818.297953][ T30] __schedule+0x1800/0x4a60 [ 2818.309467][ T30] ? __pfx___schedule+0x10/0x10 [ 2818.317189][ T30] ? __pfx_lock_release+0x10/0x10 [ 2818.325708][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2818.336180][ T30] ? schedule+0x90/0x320 [ 2818.341883][ T30] schedule+0x14b/0x320 [ 2818.348356][ T30] io_schedule+0x8d/0x110 [ 2818.356087][ T30] folio_wait_bit_common+0x882/0x12b0 [ 2818.371059][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2818.380116][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 2818.382429][ T5288] dvb-usb: bulk message failed: -22 (1/0) [ 2818.397429][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2818.404910][ T5288] dvb-usb: error while querying for an remote control event. [ 2818.420456][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 2818.431722][ T30] __filemap_get_folio+0xb7/0xc10 [ 2818.448272][ T30] hugetlb_fault+0x1b72/0x3770 [ 2818.455745][ T30] ? __pfx_validate_chain+0x10/0x10 [ 2818.470922][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 2818.479516][ T30] ? mt_find+0x226/0x850 [ 2818.493286][ T30] ? __pfx_lock_release+0x10/0x10 [ 2818.505780][ T30] handle_mm_fault+0x1901/0x1bc0 [ 2818.518077][ T30] ? mt_find+0x62d/0x850 [ 2818.528149][ T30] ? mt_find+0x226/0x850 [ 2818.534894][ T30] ? __pfx_mt_find+0x10/0x10 [ 2818.548578][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 2818.559438][ T30] ? find_vma+0xf9/0x170 [ 2818.564497][ T30] ? __pfx_find_vma+0x10/0x10 [ 2818.573537][T17842] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2818.582874][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2818.586936][ T5288] dvb-usb: bulk message failed: -22 (1/0) [ 2818.593351][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2818.615142][ T5288] dvb-usb: error while querying for an remote control event. [ 2818.628043][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 2818.645461][T17842] usb 4-1: device descriptor read/8, error -71 [ 2818.655556][ T30] exc_page_fault+0x2b9/0x8c0 [ 2818.672493][ T30] asm_exc_page_fault+0x26/0x30 [ 2818.682617][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 2818.689424][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2818.719434][ T30] RSP: 0018:ffffc900031a7778 EFLAGS: 00050202 [ 2818.725792][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 2818.734186][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608d80 [ 2818.744141][ T30] RBP: ffffc900031a7ec8 R08: ffffffff90186faf R09: 1ffffffff2030df5 [ 2818.759718][ T30] R10: dffffc0000000000 R11: fffffbfff2030df6 R12: 1ffff92000634f7d [ 2818.769818][ T30] R13: 1ffff92000634f08 R14: 0000000020800000 R15: 0000000000800000 [ 2818.777963][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 2818.786660][ T30] ? stack_trace_save+0x118/0x1d0 [ 2818.791837][T27853] dvb-usb: bulk message failed: -22 (1/0) [ 2818.792024][T17842] usb usb4-port1: unable to enumerate USB device [ 2818.798457][T27853] dvb-usb: error while querying for an remote control event. [ 2818.812504][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2818.829795][ T30] ? stack_depot_save_flags+0x29/0x830 [ 2818.835513][ T30] ? kasan_save_track+0x51/0x80 [ 2818.840815][ T30] ? kasan_save_track+0x3f/0x80 [ 2818.845891][ T30] ? kasan_save_free_info+0x40/0x50 [ 2818.852598][ T30] ? poison_slab_object+0xe0/0x150 [ 2818.858277][ T30] ? __kasan_slab_free+0x37/0x60 [ 2818.863639][ T30] ? kfree+0x149/0x360 [ 2818.867757][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 2818.874032][ T30] ? security_file_ioctl+0x75/0xb0 [ 2818.879199][ T30] ? __se_sys_ioctl+0x47/0x170 [ 2818.884043][ T30] ? do_syscall_64+0xf3/0x230 [ 2818.888749][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2818.895003][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 2818.899987][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2818.905038][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2818.911466][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 2818.917126][ T30] ? __pfx_lock_release+0x10/0x10 [ 2818.922235][ T30] ? kfree+0x149/0x360 [ 2818.926467][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 2818.932867][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2818.938891][ T30] ? __fget_files+0x29/0x470 [ 2818.943603][ T30] ? __fget_files+0x3f6/0x470 [ 2818.948307][ T30] ? __fget_files+0x29/0x470 [ 2818.953020][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2818.958613][ T30] ? security_file_ioctl+0x87/0xb0 [ 2818.966054][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2818.971632][ T30] __se_sys_ioctl+0xfc/0x170 [ 2818.976258][ T30] do_syscall_64+0xf3/0x230 [ 2818.980919][ T30] ? clear_bhb_loop+0x35/0x90 [ 2818.985618][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2818.992085][ T30] RIP: 0033:0x7fb5fa97cef9 [ 2818.996541][ T30] RSP: 002b:00007fb5fb6b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2819.005049][ T30] RAX: ffffffffffffffda RBX: 00007fb5fab35f80 RCX: 00007fb5fa97cef9 [ 2819.013637][T27853] dvb-usb: bulk message failed: -22 (1/0) [ 2819.019529][T27853] dvb-usb: error while querying for an remote control event. [ 2819.025825][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 2819.035100][ T30] RBP: 00007fb5fa9ef01e R08: 0000000000000000 R09: 0000000000000000 [ 2819.045165][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2819.053292][ T30] R13: 0000000000000000 R14: 00007fb5fab35f80 R15: 00007fb5fac5fa28 [ 2819.062505][ T30] [ 2819.065690][ T30] [ 2819.065690][ T30] Showing all locks held in the system: [ 2819.073592][ T30] 1 lock held by khungtaskd/30: [ 2819.078510][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2819.095072][ T30] 2 locks held by getty/4988: [ 2819.100004][ T30] #0: ffff8880306850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2819.112388][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 2819.125086][ T30] 3 locks held by kworker/u8:1/22808: [ 2819.130575][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2819.142815][ T30] #1: ffffc90003297d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2819.153964][ T30] #2: ffffffff8fc8bdc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2819.167062][ T30] 6 locks held by kworker/u8:6/1787: [ 2819.173502][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2819.188101][T27853] dvb-usb: bulk message failed: -22 (1/0) [ 2819.190028][ T30] #1: ffffc9000cfbfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2819.201655][T27853] dvb-usb: error while querying for an remote control event. [ 2819.218726][ T30] #2: ffffffff8fc7f210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 2819.234043][ T30] #3: ffffffff8fc8bdc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 2819.250293][ T30] #4: ffff888061c95428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xba/0x1e0 [ 2819.267971][ T30] #5: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 2819.280272][ T30] 2 locks held by syz.1.6907/12420: [ 2819.285507][ T30] #0: ffff888069d7ddf0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 2819.305301][ T30] #1: ffff888020af0578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 2819.316200][ T30] 3 locks held by syz.1.6907/12421: [ 2819.321853][ T30] #0: ffff88805de6d718 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 2819.331955][ T30] #1: ffff888020af0578 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 2819.345727][ T30] #2: ffff888061c9a4e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 2819.355741][ T30] 3 locks held by syz-executor/13905: [ 2819.361206][ T30] #0: ffff88805aef8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2819.371993][ T30] #1: ffff88805aef8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2819.379760][ T5288] dvb-usb: bulk message failed: -22 (1/0) [ 2819.381862][ T30] #2: ffffffff8fdf78a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2819.396400][ T5288] dvb-usb: error while querying for an remote control event. [ 2819.397588][ T30] 1 lock held by syz.4.7446/15049: [ 2819.410341][ T30] #0: ffff88804e74f408 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 2819.420657][ T30] 1 lock held by syz.0.7450/15061: [ 2819.425780][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 2819.436835][ T30] [ 2819.438538][ T5288] usb 3-1: USB disconnect, device number 101 [ 2819.445918][T15061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2819.462557][ T30] ============================================= [ 2819.462557][ T30] [ 2819.483639][T25302] usb 5-1: USB disconnect, device number 68 [ 2819.531528][ T30] NMI backtrace for cpu 0 [ 2819.535913][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 2819.546427][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2819.556489][ T30] Call Trace: [ 2819.559773][ T30] [ 2819.562720][ T30] dump_stack_lvl+0x241/0x360 [ 2819.567424][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2819.572636][ T30] ? __pfx__printk+0x10/0x10 [ 2819.577232][ T30] ? vprintk_emit+0x667/0x7c0 [ 2819.581907][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 2819.586932][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2819.591870][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2819.597331][ T30] ? _printk+0xd5/0x120 [ 2819.601479][ T30] ? __pfx__printk+0x10/0x10 [ 2819.606058][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2819.610904][ T30] ? __pfx__printk+0x10/0x10 [ 2819.615507][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2819.620530][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2819.626510][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2819.632490][ T30] watchdog+0xff4/0x1040 [ 2819.636737][ T30] ? watchdog+0x1ea/0x1040 [ 2819.641165][ T30] ? __pfx_watchdog+0x10/0x10 [ 2819.645837][ T30] kthread+0x2f0/0x390 [ 2819.649996][ T30] ? __pfx_watchdog+0x10/0x10 [ 2819.654676][ T30] ? __pfx_kthread+0x10/0x10 [ 2819.659275][ T30] ret_from_fork+0x4b/0x80 [ 2819.663719][ T30] ? __pfx_kthread+0x10/0x10 [ 2819.668334][ T30] ret_from_fork_asm+0x1a/0x30 [ 2819.673136][ T30] [ 2819.677313][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2819.683124][ C1] NMI backtrace for cpu 1 [ 2819.683138][ C1] CPU: 1 UID: 0 PID: 13554 Comm: kworker/u8:11 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 2819.683158][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2819.683169][ C1] Workqueue: bat_events batadv_nc_worker [ 2819.683195][ C1] RIP: 0010:validate_chain+0xc/0x5900 [ 2819.683214][ C1] Code: 89 d9 e9 54 ff ff ff e8 f2 19 49 0a 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 e4 e0 48 81 ec c0 02 00 00 49 89 ce 89 54 24 [ 2819.683228][ C1] RSP: 0018:ffffc90004a3f870 EFLAGS: 00000086 [ 2819.683241][ C1] RAX: 1ffffffff2775c29 RBX: ffffffff93bae148 RCX: aecd1c49024e2631 [ 2819.683254][ C1] RDX: 0000000000000000 RSI: ffff88802786c730 RDI: ffff88802786bc00 [ 2819.683266][ C1] RBP: ffffc90004a3f880 R08: ffffffff941e4847 R09: 1ffffffff283c908 [ 2819.683279][ C1] R10: dffffc0000000000 R11: fffffbfff283c909 R12: 0000000000000000 [ 2819.683291][ C1] R13: ffff88802786c6d8 R14: 1ffff11004f0d8ea R15: ffff88802786c750 [ 2819.683303][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 2819.683317][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2819.683335][ C1] CR2: 00007f57d14fc178 CR3: 0000000029b64000 CR4: 00000000003506f0 [ 2819.683349][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2819.683360][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2819.683371][ C1] Call Trace: [ 2819.683378][ C1] [ 2819.683386][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2819.683405][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2819.683426][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2819.683452][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2819.683470][ C1] ? nmi_handle+0x14f/0x5a0 [ 2819.683486][ C1] ? nmi_handle+0x2a/0x5a0 [ 2819.683501][ C1] ? validate_chain+0xc/0x5900 [ 2819.683516][ C1] ? default_do_nmi+0x63/0x160 [ 2819.683535][ C1] ? exc_nmi+0x123/0x1f0 [ 2819.683553][ C1] ? end_repeat_nmi+0xf/0x53 [ 2819.683576][ C1] ? validate_chain+0xc/0x5900 [ 2819.683592][ C1] ? validate_chain+0xc/0x5900 [ 2819.683608][ C1] ? validate_chain+0xc/0x5900 [ 2819.683623][ C1] [ 2819.683629][ C1] [ 2819.683635][ C1] __lock_acquire+0x137a/0x2040 [ 2819.683661][ C1] lock_acquire+0x1ed/0x550 [ 2819.683679][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 2819.683703][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2819.683722][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 2819.683742][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 2819.683760][ C1] ? __pfx_lock_release+0x10/0x10 [ 2819.683778][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 2819.683800][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2819.683820][ C1] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 2819.683843][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 2819.683863][ C1] batadv_nc_process_nc_paths+0xd6/0x3a0 [ 2819.683883][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 2819.683905][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 2819.683927][ C1] batadv_nc_worker+0x42a/0x610 [ 2819.683949][ C1] ? process_scheduled_works+0x945/0x1830 [ 2819.683967][ C1] process_scheduled_works+0xa2c/0x1830 [ 2819.683997][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2819.684019][ C1] ? assign_work+0x364/0x3d0 [ 2819.684038][ C1] worker_thread+0x86d/0xd10 [ 2819.684063][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2819.684083][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2819.684101][ C1] kthread+0x2f0/0x390 [ 2819.684115][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2819.684133][ C1] ? __pfx_kthread+0x10/0x10 [ 2819.684147][ C1] ret_from_fork+0x4b/0x80 [ 2819.684166][ C1] ? __pfx_kthread+0x10/0x10 [ 2819.684180][ C1] ret_from_fork_asm+0x1a/0x30 [ 2819.684206][ C1] [ 2819.763240][ T5288] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 2820.089858][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2820.096815][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 2820.107294][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2820.117342][ T30] Call Trace: [ 2820.120609][ T30] [ 2820.123522][ T30] dump_stack_lvl+0x241/0x360 [ 2820.128188][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2820.133371][ T30] ? __pfx__printk+0x10/0x10 [ 2820.137937][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2820.143907][ T30] ? vscnprintf+0x5d/0x90 [ 2820.148395][ T30] panic+0x349/0x860 [ 2820.152294][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2820.158528][ T30] ? __pfx_panic+0x10/0x10 [ 2820.162923][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2820.168281][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2820.173830][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2820.179276][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2820.185693][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2820.191856][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2820.197996][ T30] watchdog+0x1033/0x1040 [ 2820.202318][ T30] ? watchdog+0x1ea/0x1040 [ 2820.206720][ T30] ? __pfx_watchdog+0x10/0x10 [ 2820.211378][ T30] kthread+0x2f0/0x390 [ 2820.215427][ T30] ? __pfx_watchdog+0x10/0x10 [ 2820.220089][ T30] ? __pfx_kthread+0x10/0x10 [ 2820.224659][ T30] ret_from_fork+0x4b/0x80 [ 2820.229059][ T30] ? __pfx_kthread+0x10/0x10 [ 2820.233644][ T30] ret_from_fork_asm+0x1a/0x30 [ 2820.238418][ T30] [ 2820.241538][ T30] Kernel Offset: disabled [ 2820.245873][ T30] Rebooting in 86400 seconds..