last executing test programs: 8m2.462504292s ago: executing program 1 (id=1015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070900be0083000000000bf18e3bba88b092"], 0x0}, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x7, 0x3, 0x2, 0x7, 'syz0\x00', 0x7}, 0x6, 0x400, 0xb, 0x0, 0x8, 0xe, 'syz0\x00', &(0x7f0000000040)=['-@@\x00', '+\x00', '\x00', '\x00', '@@*\x00', ')\x00', '(^,\x00', '\xc6-\'\\,\x00'], 0x18}) 8m0.14341558s ago: executing program 1 (id=1021): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) 7m57.002346217s ago: executing program 1 (id=1028): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000001c0)={0xffff8000, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000240)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000280)={r3, 0x0, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000001c0)={0xffff8000, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000240)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000280)={r5, 0x0, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, r3, r5, r6, r7], &(0x7f0000000340)=[0x1, 0x6d1b6067, 0x249], 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000540)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r9}) r11 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000040)=r13) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000005c0)=[r8], &(0x7f0000000180), &(0x7f0000000280)=[r10], &(0x7f0000000040)}) sendfile(r0, r1, &(0x7f0000000040)=0x6, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) 7m55.936403736s ago: executing program 1 (id=1030): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000080)={{}, "c3d7a6c986aac2e8433a793c3c91c3120b4bbc3c65d390fb019a721956d1a855ec4153c512ae0a5eb05a29d6f7ca7a59d9e90208f45243452bbc10735eefcbe6363e5f33ae29ad71d3f431c1a4c85201fedc2d4bf79eaf1ece7f06e336b3745fa278764a308f8f3f7ecaee3106231dcf2677be03dbbc353519d96604ad41aedfd88431d58f6db461f597892f989415d0af1d148a3edee9ec03d069428e6a30248694c8aff38ca618c731facbef1b5e935f294615a599ebb466df1bd5ac250d4e97ae304a2c3ccf431a779eae9ef0be0b2da8302a1e98ad14e699652c215e2b1009cbe411ae17f153c524efc1441eda6b717c6fd5132ea560ae8e820eca6ba97723ff134ee734908b815e813c89da2b1f7e749deb1bdca9691e1de24ae8cf0a93eddbbbc3371234bf3d18f0788e66249e39ebccf4341502425172d4dfd2e687f1b475fca514bdde2068e4e6253ee8191d18e22203d00d44bde704f2c2cdf4a5ff0e6e51b363a345b4e255988c0e5c500351f501921065a87bb9f45fa6570b9662acdf6bbda8eac711d8cc9dffff4f583d65e688b0588bcfa16ea1d81364a5a13c58daac593da1d9bb07c8e8ee8596265e77b3bfd5b0561046c3f04b2717fca3ee5e115c2805d2fb777b16bffed8b1014e491feaf46848a7ba450223356ab43682f0e8e772174899db340a3f87ef23465d972aa626e8689948851f91b5597042d89bd3fffa22139867a120c0be0e7952c0ef06858fd260b09c299f637fd579314dbb12eac2a974922065eaf7af1a77d94d235e72b68b069aefe0da3bf8242242ea342f5649369fc57090f3ddc0a9ecd590b2fa68d11d1f0c47853fa5e1542555ddf5bfaca9ad93f588f861412e549107b04acbabb687f39f464e656eee5eb7b11a45a5bb13411ac458d6e2ca5770d1656f4baee85f0feb30f2cde93ffbefca358f7cc41937d905fda3959f627ddbb6a79f188626a4f8ecc0a73b0eac1fa1faf5c9d6eefdf0643f958f11b121524a35ccc9651c1438e43a071450e11a6c3f8690d9d37bf479611da99c51cf32bcc98085e59f0573255001349cab9d4dcef12047cdf15fda9ab38e8060797fea80d0b803a201e2e9a5940ec8ff47bdf66de41cc8ea6f1f50b2cba2a3ca13c84d027093845ff6ec3c095b568979baca16180d4688e218076f20ce7d5a6014d09b7f16fe8eb467a4046a78dbff74fe1201a72b5363f990c5484f06adab8ea5067c2fbb8044d35192aac78656fd13a6daab29fd5e25f48c068fe3c9bbb3dd5f3fcdfc558255eb291199ef29445d15cbaac29d3ef8c21ae44854fc1ded0c98d6b40f7ee309e74e729fc7ea441ec2e5a887622f7280b6b60e6a3a89483da1a2fcd39abb7bf2fd47bed8810e560dbb4f837158785ee19878a9d0dabd22ab4be0e0ede119bc98c4f6bf5b2b4c0531be173e2ae297626bbcdec04c5eb0c729bc3c65948cd364177fbf80b1358bf0c4d44451c5a6027c74a662b35e0aee778f85431507bbce1ee56b11095913b8fa735ce9cd37fdb8b6a6167548dd5f5351f431bd83fa51053b54a31f0dbf2e588967c5df80a585f5f059d62987669f277d1043a095bed110217e1453ff15551bb0b649d42d088651a8edcd00e63c55543c187762fd9d89c6a1d7ab4852febd1ae964ab93b79a37f11f986d8a1a7f5acf8eefb4ee09a86a6c89138875144d1a711c293491d87b9564a339e6dc0e1e48757e39a6ba46e9b6b6c079310181b921c17de783f0f76ac2f9722c3042ec79ecc2291a6592324dc8c94ac450e4279130e9a9539d19ca20e8d1e3f22741bad993055202d553b7a0a8be4d090bd564e6f1569d87d0f74a11b32dcd5ae156ae7da19acb8653e6f57318f138493e0b7ec896ee297ea3d6253074fa55afbf3e8dfed375d6a310aeb900f4c6383c8cb67abb03af558691dd5bd1c843268321957fe75ae1e60ac73f5e6b2556adf4fbd80b710b3335450f8a5d8b2bb52de96884724fc720bd53815d9d7b0af6e52d4dc3ed2245b0abc591322d14b5970c29b9c450c21f8b9744c4bf63531a4ef0ad4cd42f1fead3aa8d63b3000b4f96c0ed0d183b5d9d201fc7b8da9855aa51e4e80d376fb9e6cecb7b4d4c95f213b415e56ebd07109cea7d30c4e230c567177bc8185954866816078730313cf5ea06c10dde352c7c8e4dd7b5eb73ceda9eccdacb419ae082c4d72415e87ddb1ad01b3f04bf193f9e6f39943f2acdcae5cc2e20cba2a02e2f8cf8a787d6d7574eec76d2d0c2e7dc5985b999745f84c30749309319a57e99b84bd9a794bb4ed99c975731f51a4c02d96bcbd911c2f671e7a52d5ba543a146b4734ba6bb4e1905056da2ca5456af36156082c2bb89259119594a9b98fb72dd8608c194193d4e959a34c19dfba295a14c7696a5dd83152c7f19f1ecb049c7837f1aa8f25d234565e9480aa7c7d7d43ace4668e3ee2ef872d21c7115d4400c2d90784dd6689ce5e21fa6533eb2e9f373c40d23e743dd4bea1eb8b58bc02ec1bcc42a864e28c47c7d67b786b0e85232d9af55f705bc7539d9a762741a4983f28247eeaa770c47c4ef643e4205c0a84fb929f74211cad02e6791d19094710541d36060ed20173021378cde3e5b500e8f1a1af2b5130d1908241f17363a23b4e9790c432f0c378e2aa4acd82d23bb5a60582dbe9ddc7ce873ee815ae5613dca7f32f3300952aa090d07241573873cfcf11fe84f3ed2f9a1448c1df6a6eb095fd577cc0389016691ae550514aef95ad68870b1fcdf65a4c7f64f8a616cfd29b11d50a4fccc1d36badee7f4c240750e45c9aede6101b2ba9d82b08a3ff6fea2a0e24645017caef3788c849d87495a7e58b35cf5b135a157c63960ed158c808c76d616b975b8e979760b5fa0b6c5df45857f84db4fc2cb13e828d097b6a734fdbd8151c3820084696f7645293e22612761be501f670d712fe6e0199ab5232a13f81708a0f8c3bd5f1765207b46e676032e0c51704bdd1ee5fa60e69fa45a0673aa62158330fa3c433e56fe0f26d8431858e166075a1ae5f8ab5c044378b3f965553be21c04e2b2c4fac48dbe9c99e921560a1da22cc4487d78d3f3d353353e2adc2a21abe1f6c5a8d0f8927893c976aef03c2efd859dfd61eb55b69f36a7c89fd97041bb8aa37321f2a192e6e193621876b4f6bc6fd6dde02c2bc58c211de6b8af8c7e212907bc01d3a2881e2d0a4b5452d6f7a6c8c43837190aa5dde822e155f0363a65b7454fdea65cd494afb287232117228d501a956c8fa28a7991a275290c09fe9e834220ef584e1119a25d6f0bd1f74f982c66eeb362e148619a53f6a2348f4fc86d3d760e14c9ffbfedf4d514066cdc16c4df079aaa0184d930d1a7a5c4ebd17cf79906e26277c79d25544359a583116b7a36b6b17d17fd60844021c70bda2954b2d1272cbc9ac043857e73a1b50f64da5e16ad82f362555e4f310aee62296b7e904ddc789eaf60d212ae864cbaf7451361f403deb1f517a9aeceec2b976a48712c92d48c8b8f018fcd5a6222ff319dff5966205b94e122eccc42d02d97a9a727c5c281e6ee3450daffa95ae2a9cf75cd60fb005d455fc07ec41813aa29caa3fb2fc92ac9e66f10ba8ce27cb8de61e736441cea17d5f5e63501addc394172bc1e596d51504a76974cb906b0baf2bbe75fa036fcbd7109d9510fa1000fee173d5115da5a673fe67fcfaaf4d14f55918401fd0e953d4775b7154b6e804bea1d2551cead597da60aa13a9e10162c2549c6213fc2adef0b320f7d455a5100dbf747936bff9f2527c2403c82e56783855bfa906224000e0cd5357666af926cb9bdaf5c9d1b76c5e713dd9c45c63539fbb49ab75bae33d6d8854e052c182230afd07a750d9d374234af053e81f2e7440dfe72a28c128a7fe990d27a42c6bfb75de24da2e20b2b1b1f22a0bf86b5632738b54bd4eb0e3ff9bae107a3103ed4360dca7b56c325a4d156d7d754483bc704e658c729992d2a151e9d0e4661548155291f1d72dab83edcb867dcc7c963c552ed372e2cf5374d7e7b1003b86aa0be604770dd10665c37cf60f927065c5af552e5e6be05154d127371e5c467f28c4ac28590f63c474ded3b991c0a66c8d392a2630daa756c641ae81f308333dd1339223524e84a635fb1053d1c4bb1dbb46623f82b8f74f95ab201077024db8f79889c12d52468ced83214d80c94236a3cc498d895d4733ca5b620c76bec0e6dec6cfa25cc3191506291964ea023745a6f72c8b4c03bf4acc44fb55a3210897ea3b9f31f36522573b33e461aa9d358f9b66874c6c2bcacb98f8e1e7e7580f0f191a4c550a433dc22c886dea81bb31a52968b8e2e52dedd4ac70455c76e81862235675e6f2fc9f4bb6eb9b6a5202cdba1c3778087c61f76d9fb14d2bddb54a80999915dfb955ff4ee761e3cb2cceb0362c4826830bc3d3d0c67ba7c2f2078ec1f6f051f1c89e1edcf4016f9e2819f504a6f4429236dc63b593164c2307f510c14a40dd3141f2c04e2bdb4655fb77d3d3a8ece2bde1d8388815f1d230f166e5b52dbc3543b367ca44e53c1f2e8863fced061c9de2d97d7227763157a8a8f21e091eb88aeb6fde6a32095225c2b69a68b1f83199143eced7053fe519cc85d1e69cfac704dbffc53a7f34be977789a6e926fe6263f4f1ac7b54973c14b1b4f1f39088b222132761e5ac72f5476325c11c6b626cb9f7aea5b8f8a569f5f64f721e03274c73a5ea8c8ec7b82093905cdac03790a7a745de1d2560645eda246789a6ea2607bd563d4690181041634f55d9adb5e6dc0c913476a4b022e6fd81dba6ffb4137fb9032ac130163b03910540675c127e674ec78e4b27b1afa553596f1c801a5cbc56d4840dfa1f4970e1c2a0c461b70d9f7fb0b424b213b303c3075636fe7def9ee159cbb2deae4b92f7d1c361dcab6482ea93af93c91f261c733d7acee325a1b244f6e24d31e6f649eaf9695f6e9b4248debbb617353073b7e428dae9c839e58a64fb52b3651cf05038fb9140ef91d35d069784f714d02a64df0e79c76fe0cf88239157382958d7c889958b0728a76cc24fbb606e95aff7e501ce21f6a7fb22321f06cab7cacf11cecedff876c7b50a53c7cfa9a9d74b0ca37636c15562aa632fd99abb0064509458b084c19d093240ad542971f812291102294aa754e8c6c0333116d47238d13890d17f4d1d4c292ccc529e210895dc96805007ed68d97f68e45e31c41d96de9d4b0fb55c2cd69c51d4c4c3468b7b89c086acbf77eb550b40137f3916a373a97596deffc6166d2ab60611fd2d9f83a529e355e9e95223c3abc684b321ce70bd2095aa9b477fd38a19f4448bd35602c50d326cf2ee8a10a8ec2f7a10be7655610bca0def90aecd7116d84846c39b3b8b0ed2812a6277060d5e1890b9ff4f4c0a0c3983577276b4660d6d6afd0ec95f9f9a3f6132979910475fe7adaf89da90af022db7b8588aa8a03ccb464dc5a1bcfaa43b8b54a1df13b28c0f2fc794e4191c09a42b0fedba8c610cd724cb4736550b9cb91a6576c53d81e472b08b9b67a4951e68654f0bc3c04b338a3adfcc8d6aee3b2e8710f15b107365a0624d1abfc04e0d2a10acd2ad906a27003a2c5ee97e0b3d777f673ef316fca40f2af219d6938bdb33c5f29925914bd75ca4a3bfbb5396906328aa96c5ca709a7f194cbe5db5cea8bae8a6413564a22aea8e030e5970105273ef19a7d78a203670c8c899cd754c45ef050dc750311e486bd03e45709a1864dec164169f2cad0008220409a249871df6a4549c3"}) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) 7m55.512802592s ago: executing program 1 (id=1031): r0 = socket(0x10, 0x6, 0xfffffff3) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x69, 0x6, 0x6, 0x5, 0x2, 0x9, 0x1, 0x5}}, {0xe, 0x2, [0x4, 0x6, 0x79, 0x1ff, 0x3]}}]}]}, 0x54}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r4, 0x40045431, &(0x7f0000000000)) 7m55.223038464s ago: executing program 1 (id=1032): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000435e81c30000000000edffffffffffff3350d09750f2c8ff1d000000004b4bbf3859eaa1ab09dec7ae2e1dcd9db9dc129f829dd1dc4e613798dd88600000000000000000"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ee9ff2820"], 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 47.116584788s ago: executing program 4 (id=2068): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x280, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3275eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f000000a2c0), 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1dfa0000000000020000002000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x8949, &(0x7f0000000340)={'bond_slave_1\x00', @ifru_mtu=0x6}) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f00000003c0)={0x7fffffff}) fcntl$lock(r4, 0x5, &(0x7f0000000200)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000000104050000000000000000000000000006000640000000000800054000000000050001"], 0x7c}}, 0x24004800) 43.723680609s ago: executing program 4 (id=2081): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5405b40861a22753635010203010902120001000000000904"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5405b40861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x2, "53bf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0xfffffffd}, 0x9c) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.867028012s ago: executing program 4 (id=2083): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x35, 0x88, 0x5e, 0x10, 0x5032, 0xbb9, 0xc4d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x0, 0x36, 0xe5, 0xfa}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r6, &(0x7f0000000000)={0x10}, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 8.657798714s ago: executing program 0 (id=2138): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063010a000000000095000000000000001a253bc016889a33d0131ed604f449f3d72bd3682373698dbdeb073c3fe170274c6d0800000000000000dadeb6082896b447fcb617ae6501859b098bc35260fd3fdac49d7d49d5da366a3098215cbf8af0013265e3977bcf20a723907cf66eba8cfabd507b7e0c69f40d4047df1dc4f41c7e9ed6dbfdb57538c4be92334f00035b067936e90c785c6c58da91e8adec833adb79c6d99fe99210ac0d4a00352e4641ba"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) 8.156104855s ago: executing program 0 (id=2141): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) unshare(0x20000400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r1, 0x440) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) (fail_nth: 4) 7.031415612s ago: executing program 0 (id=2143): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) (async) r2 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) (async, rerun: 32) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) (rerun: 32) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], 0x0, 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, 0xffffffffffffffff, 0x8000000) r6 = syz_open_dev$dri(&(0x7f0000001400), 0x0, 0x0) (async, rerun: 32) r7 = socket$inet6(0xa, 0x6, 0x0) (rerun: 32) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @dev, @remote}}}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xffffffff, 0x1, 0xfffffffc}) (async) syz_io_uring_complete(r5) (async, rerun: 32) pread64(r0, &(0x7f0000002180)=""/4105, 0x137, 0x0) (rerun: 32) 6.651981892s ago: executing program 0 (id=2144): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r1, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite6\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/257, 0x101}], 0x1, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) timer_create(0x0, &(0x7f0000000280)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r6 = dup(0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000002140)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r6, &(0x7f0000002180)={0x2020}, 0x2020) ioctl$sock_TIOCOUTQ(r5, 0x8905, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000580)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 6.534618924s ago: executing program 4 (id=2084): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}]}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x400}}}}}]}}]}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x54, 0x13, 0x605, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, {0x0, 0x0, [], [], 0x0, [0x0, 0xffffdb95]}, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "81b3c981"}]}, 0x54}}, 0x4000040) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0xffffffffffffff3b}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 6.056247627s ago: executing program 3 (id=2145): keyctl$set_reqkey_keyring(0xe, 0x0) r0 = request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000580)='y\x05K\x9f\xde\xc0\x06@x\x00{\xa8\xa6\xd4\xc5\xf3\xc6\xb0\xe2\x03\x17C\x1b\xda<\xf7\xce\xf1s\x02\x95\xfeB\x95\x82o\xf8]\x1e\xfbP\xed\x87\xa0E<\x99b\xc2\x9c\x84>\x01V\xc1\xcd!\xb6\xe1\x1a\x90\x19\xb4\xa3{%w\xd9U\xd1\xc5\xe8\xaa\xfe>\xd8\xa1\xb3M\x82\xf1Q\xc7\x1e\b\x0f5\xb6\x93\xe4\xae\n\x9d\x81O\xde\xc6X$\t\x18\x1d,\xb3Z\n\xbby8H\x16w\xda\x84\x10\xf0\xe1D\xd3$k!\v`\xb7\xaa`\xf1}\x89\xea\xe1~\'\xc5E,\x7f\x9b\tqf\x82\xcf\xa2x\x92\x80\x99t:0a\xa3\xbd\xb0\xee\xb4a/\x85\xa0\x1af\xb8\x1f<\xe9\xbe\x80\xf2\xbb]\xb0\x1b\x1f\x8c\xcdkg\xdc\xfd\xa08%\xde\x8b\xcc\xfb\x13\xf6\f\x0f<;h\xcf\'s\x95\xe0\r\xc6M\xea\xb8\xfe\xd5.\xe3\xc9\xc2\xcc\v\xd7n0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) (fail_nth: 5) 4.968296887s ago: executing program 0 (id=2147): prctl$PR_GET_THP_DISABLE(0x2a) r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x0, 0xc) getpriority(0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffce5) r1 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3, 0xb, 0xbb, 0x40, 0x7fa, 0x847, 0x60e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x2, 0x38, 0x38, 0x1d, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x79, 0x9, 0x9}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x5, 0x80, 0x40}}]}}]}}]}}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=""/8}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000001c0)={0x0, r5}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r7, 0x0) r8 = syz_io_uring_setup(0x331, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x3, 0x1c4}, &(0x7f0000000400)=0x0, &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, 0x0) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000380)=0x20) mmap$dsp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000007, 0x12, r2, 0x0) chroot(0x0) 4.844972143s ago: executing program 3 (id=2148): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000280)={0x0, 0x7b7b, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4c, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x48}}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0x0) bind$inet(r9, &(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10) r10 = dup(r7) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r11, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'vlan0\x00'}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lchown(&(0x7f0000000440)='./cgroup/cgroup.procs\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x51d829, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) unshare(0x26020480) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 3.835062809s ago: executing program 3 (id=2151): ftruncate(0xffffffffffffffff, 0xee72) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xffff, 0x101301) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045505, &(0x7f0000002a40)) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) (async) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000300)={0x8, r7}) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000040)={0x10, 0x0, r7}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) r8 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) (async) mmap(&(0x7f00001ff000/0x2000)=nil, 0x2000, 0x5, 0x4010, r11, 0xffffd000) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001", @ANYBLOB="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", @ANYRESDEC, @ANYRES64=r4], 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x788, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x200, 0x9, 0x4, 0x2, 0x40, 0x5}, 0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="050fbe000514100402a031cf7796024b30d70529374616ec830b1001060100403f0900f510100a7f0100000000f0b800c03f00000710020c82000083100ad738593a6beee32b60d08d731965ac43194bcf23f4ea674bcd238796a15aa45ef152a4e583c4a1e161f9c6fb6286f913fb86a0efed7741ffdc19c4427dac2f3211b0b977352b2a3e9f451eac1e842c15268756669dd4b2afa629637155425f2b914686ed90d465a29f95a0de07cc7bc146bdb635020c068a673b2e57527877354cba2b3902daae2358c7baeebfd2c70782877bf9ec3d613cffc876d9ce09a235f59e3cb89834d667fe"], 0x5, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1401}}, {0x9, &(0x7f0000000c40)=ANY=[@ANYBLOB="09d991e2ad3f55b3da"]}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1c09}}]}) 3.603983051s ago: executing program 3 (id=2152): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@gettaction={0xa0, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x40, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af04, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(fpu(pcbc(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000340)="90b347ac250f55e539", 0x9, 0x142}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x22bb) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000a00)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x4, 0x9, 0x8000, 0x362d, 0x7, 0x8}, {0x0, 0x6, 0x391, 0x7, 0x3, 0x1}], ['\x00', '\x00', '\x00', '\x00']}) 3.493368557s ago: executing program 4 (id=2154): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, {{}, {0xac}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xffffffff}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0x51}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c00070c00000000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="04da74604ee85b006462057798e5000a000200aaaaaa8daa2e000067bcbe43546267cd126a351f9f16c778d565da9dc17f66ccfd94e1b5833683f693e03b6ceb0fc20645148142991464eeb2f43595f1b1961c27c632f559c03075cdae6994fdb78c5e9d0c51a876592a2ae3dc466356f290738f"], 0x28}}, 0x4000) 3.287795344s ago: executing program 4 (id=2155): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x2}}, 0x20) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0xb7, 0xfffffffe, 0xfffffffc}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r6 = syz_io_uring_setup(0x406e, &(0x7f0000000240)={0x0, 0xa0d2, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x4e3f0223, 0x0, 0x0, 0x16}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000700), 0x2000000000000, 0x141002) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x10) 3.252114258s ago: executing program 2 (id=2156): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="e809b37a33c9d5", 0x7}], 0x1, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x20000000000003}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0xfffffffffffffffd}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',roktmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',\x00', @ANYRESHEX=r1, @ANYRES32=r1, @ANYRESOCT=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0xe75af290aa706fa1, r6, {0x7, 0x9, 0x10000, 0x0, 0xfffc, 0x11, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', '', [], 0xa, "3f6a449728316a9538a1518cf6cb975f49f345919b5941778a9e99421ff5443bf8b145064ec530758aeda3daf54cb125a0282d4b498167701032ef7b21bed864513a80920f3018"}, 0x4b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000280)={&(0x7f0000000640)={{@host, 0x3}, {@host, 0x40}, 0x400, "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"}, 0x418, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 2.92005504s ago: executing program 3 (id=2157): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40102, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000009cbe44d8000010ac05740200000000000109022400010000000009040000010300000009210000000122050009058135172c8d030000000000"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffe000) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x40000000000000, 0x0, 0x0, 0x3, 0x0, 0x1000000000001, 0x80000001, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x7, 0x200000003], 0xd000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x2, 0x10}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 2.799986735s ago: executing program 2 (id=2158): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r1 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, &(0x7f0000000140)=0x7ffffffffffffffc, 0x80000000000004, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x32780, 0x1) 2.652315036s ago: executing program 2 (id=2159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010300000000000000000000711964000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.489512417s ago: executing program 2 (id=2160): r0 = syz_open_dev$loop(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="130000040f3363f8a9b93ab97f2ec19f6fd05921ac184f41a46f98f95f706c2da11ce48af49badbbd3a6eea635495665fec9fdf056c4f8760c3b30441aa236d73b2961a88b1183bc7eaa4f85fe66328c4e8e5e55564154c3df0124713ba5511bb4107201a0cd5027c2e012a4db9e3f6fbab12a262a1a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000200"/28], 0x48) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0xa, 0x2, 0x0, "5748d20a4f0dcb623d994e00d1b9fe678683c0fffa4bb255c991e76739e199d8cdd2183b76c78176568e7f86ef95553afdbab1b0d5c60911194649d33d81094a", "e5d755ed8dc712c710eaf7a158e7425902d092eae9849a21a601141d546c89ae9edc3443d78840023f6b31e677978f71d1408c73027bf3a182f6d8b48ea2d940", "02f19ebd0f58e3bf691bd5476d1ac7ae9997e063067d19d99652c4a5a777405e", [0x0, 0x1]}) gettid() timer_create(0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x4242, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'bridge_slave_1\x00'}}, 0x1e) r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x8020000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r4 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000200)={0x1, "94a246be445c947bccfb632ec629e361f43a16d680ec57dcceaa2e5ad4b41542", 0x0, 0x0, 0x4, 0x80008, 0x4060000, 0x2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @remote}, 0x10) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0xce, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9d6909", 0x98, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4, 0x5]}, {0x8, 0x88be, 0x81000000}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfd}}}, {0x8, 0x6558, 0x2, "41ac0f03999ffe6ba98e6e4bc86270d3e483e617bd3015a954d3a33da695dc64bfd79a2d5062f218a4fb0112104b652a8ad6477ad21154b353717095f2d57000d104c8cf3058b7a619c18da0f257d5bc"}}}}}}}, 0x0) connect$pppoe(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sync() 1.983342514s ago: executing program 3 (id=2161): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcd, 0x61, 0x70, 0x20, 0x52b, 0x1803, 0xc62, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x0, 0xf4, 0x30, 0x88}}]}}]}}, 0x0) accept4(r1, 0x0, &(0x7f0000000000), 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x399d8}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) 1.978872528s ago: executing program 2 (id=2162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40840) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x88, 0x66, 0x0, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x15, 0xdd, 0xed, 0x20, 0x4b4, 0x1002, 0xd63f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5e, 0xc2, 0xa5}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000480)) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000080)={{0x5e, @broadcast, 0x4e21, 0x2, 'none\x00', 0x64, 0xa0, 0x15}, {@empty, 0x4e20, 0x4, 0x200000, 0x80000001, 0x3ff}}, 0x44) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) prlimit64(0x0, 0x7, &(0x7f00000002c0)={0x6, 0x100}, 0x0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) pidfd_getfd(r7, r8, 0x0) close(r5) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f00000001c0)={0xb, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0002017}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000200)=[r11], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r10], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=2163): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000180)=""/192, 0xc0}], 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x3, 0x8, 0x10008, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000400), 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYBLOB="8b330000000000000000050000002c20e900ff8c0a78f4be1d34b2058a32747a3abacc888e43497760d60d4efa790f9a555be9e0fedb2f5bcd7ac68ecbbdc1f0d23b6d090447023df00ba4e54dbfc52478599348b57663cc8a53670339a11c7270bcb482a493a582e926769142b34cd8b213af94f60cca4ee30cfb6cb66f66571cebc86fec062656487c3fa6236775be310b1277b7bf2dfc967d0d87b36cb9595b255485105104883d84605a62611ac78f4f8ab509c4762fee0c00", @ANYRES32=r2, @ANYRES8=r0], 0x38}}, 0x20000000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x40000) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r8 = syz_io_uring_setup(0x1f87, &(0x7f00000002c0)={0x0, 0x0, 0x200, 0x0, 0x2c3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r8, 0x54, 0x0, 0xf, 0x0, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x20001439) kernel console output (not intermixed with test programs): zkaller-00047-gc2ee9f594da8 #0 [ 786.031711][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 786.041825][T15141] Call Trace: [ 786.045146][T15141] [ 786.048121][T15141] dump_stack_lvl+0x241/0x360 [ 786.052865][T15141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.058142][T15141] ? __pfx__printk+0x10/0x10 [ 786.062797][T15141] ? __kmalloc_noprof+0xb0/0x400 [ 786.067802][T15141] ? __pfx___might_resched+0x10/0x10 [ 786.073151][T15141] should_fail_ex+0x3b0/0x4e0 [ 786.077900][T15141] ? start_sync_thread+0x64a/0x2dc0 [ 786.083150][T15141] should_failslab+0xac/0x100 [ 786.087860][T15141] ? start_sync_thread+0x64a/0x2dc0 [ 786.093105][T15141] __kmalloc_noprof+0xd8/0x400 [ 786.097938][T15141] start_sync_thread+0x64a/0x2dc0 [ 786.103034][T15141] ? __pfx_start_sync_thread+0x10/0x10 [ 786.108536][T15141] ? __pfx___might_resched+0x10/0x10 [ 786.113856][T15141] ? __might_fault+0xaa/0x120 [ 786.118567][T15141] ? __pfx_lock_release+0x10/0x10 [ 786.123638][T15141] ? apparmor_capable+0x13b/0x1b0 [ 786.128719][T15141] ? read_word_at_a_time+0xe/0x20 [ 786.133778][T15141] ? sized_strscpy+0x8d/0x220 [ 786.138507][T15141] do_ip_vs_set_ctl+0x442/0x13d0 [ 786.143496][T15141] ? __pfx___might_resched+0x10/0x10 [ 786.148819][T15141] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 786.154245][T15141] ? rcu_is_watching+0x15/0xb0 [ 786.159054][T15141] ? __mutex_unlock_slowpath+0x21d/0x750 [ 786.164733][T15141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 786.170751][T15141] ? aa_sk_perm+0x96d/0xab0 [ 786.175287][T15141] ? __pfx_aa_sk_perm+0x10/0x10 [ 786.180179][T15141] nf_setsockopt+0x295/0x2c0 [ 786.184819][T15141] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 786.190769][T15141] do_sock_setsockopt+0x3af/0x720 [ 786.195848][T15141] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 786.201431][T15141] ? __fget_files+0x29/0x470 [ 786.206062][T15141] ? __fget_files+0x3f3/0x470 [ 786.210784][T15141] ? __fget_files+0x29/0x470 [ 786.215447][T15141] __sys_setsockopt+0x1a2/0x250 [ 786.220391][T15141] __x64_sys_setsockopt+0xb5/0xd0 [ 786.225457][T15141] do_syscall_64+0xf3/0x230 [ 786.230010][T15141] ? clear_bhb_loop+0x35/0x90 [ 786.234755][T15141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.240723][T15141] RIP: 0033:0x7fc36bf7dff9 [ 786.245179][T15141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.264925][T15141] RSP: 002b:00007fc36cd52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 786.273381][T15141] RAX: ffffffffffffffda RBX: 00007fc36c135f80 RCX: 00007fc36bf7dff9 [ 786.281425][T15141] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000004 [ 786.289441][T15141] RBP: 00007fc36cd52090 R08: 0000000000000018 R09: 0000000000000000 [ 786.297451][T15141] R10: 0000000020002100 R11: 0000000000000246 R12: 0000000000000001 [ 786.305467][T15141] R13: 0000000000000000 R14: 00007fc36c135f80 R15: 00007fc36c25fa28 [ 786.313501][T15141] [ 786.337775][ T5307] usb 3-1: USB disconnect, device number 72 [ 787.484377][T15158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'. [ 789.678889][ T46] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 789.688064][ T46] cp210x 5-1:0.0: querying part number failed [ 789.720735][ T46] usb 5-1: cp210x converter now attached to ttyUSB0 [ 789.735524][ T46] usb 5-1: USB disconnect, device number 10 [ 789.743724][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 789.764455][ T46] cp210x 5-1:0.0: device disconnected [ 790.392489][ T29] audit: type=1326 audit(1729689515.914:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.419703][ T29] audit: type=1326 audit(1729689515.914:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.442323][ T29] audit: type=1326 audit(1729689515.914:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.536958][ T29] audit: type=1326 audit(1729689515.914:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.599775][ T29] audit: type=1326 audit(1729689515.924:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.624184][ T29] audit: type=1326 audit(1729689515.924:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.716138][ T29] audit: type=1326 audit(1729689515.924:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.794077][ T29] audit: type=1326 audit(1729689515.984:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.841249][ T29] audit: type=1326 audit(1729689515.984:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 790.888948][ T29] audit: type=1326 audit(1729689515.984:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d9b7dff9 code=0x7ffc0000 [ 790.940508][T15169] snd_dummy snd_dummy.0: control 0:0:-2:syz0:0 is already present [ 791.267869][T15172] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 791.715820][ T46] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 791.929426][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 791.938972][ T46] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 791.954083][ T46] usb 3-1: config 0 has no interface number 0 [ 791.968999][ T46] usb 3-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=c4.d6 [ 791.978423][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.987241][ T46] usb 3-1: Product: syz [ 791.991526][ T46] usb 3-1: Manufacturer: syz [ 791.996363][ T46] usb 3-1: SerialNumber: syz [ 792.010596][ T46] usb 3-1: config 0 descriptor?? [ 792.029678][ T46] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state. [ 792.058391][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 792.107746][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 792.146160][ T46] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T) [ 792.153863][ T46] usb 3-1: media controller created [ 792.204056][ T938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 792.222275][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 792.240522][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1997'. [ 792.289915][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 792.299443][ T46] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T' [ 792.319456][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input107 [ 792.367476][ T46] dvb-usb: schedule remote query interval to 150 msecs. [ 792.377406][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 792.390588][ T938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 792.400291][ T46] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected. [ 792.409963][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.440616][ T46] usb 3-1: USB disconnect, device number 73 [ 792.451395][ T938] usb 5-1: Product: syz [ 792.466718][ T938] usb 5-1: Manufacturer: syz [ 792.471537][ T938] usb 5-1: SerialNumber: syz [ 792.528001][ T938] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 792.593194][ T5282] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 792.652628][ T46] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected. [ 793.035144][ T938] usb 5-1: USB disconnect, device number 11 [ 793.464110][ T5281] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 793.654150][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 793.664037][ T5282] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 793.671331][ T5282] ath9k_htc: Failed to initialize the device [ 793.686376][ T5281] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 793.694689][ T5281] usb 3-1: config 0 has no interface number 0 [ 793.700854][ T5281] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 793.713411][ T938] usb 5-1: ath9k_htc: USB layer deinitialized [ 793.719990][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.752145][ T5281] usb 3-1: config 0 descriptor?? [ 793.776320][ T5281] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 794.487240][ T5281] gspca_sunplus: reg_r err -110 [ 794.494337][ T5281] sunplus 3-1:0.23: probe with driver sunplus failed with error -110 [ 794.626640][T15199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.641795][T15199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.731268][T15199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.767624][T15199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.570632][T14806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.850746][T14806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.129490][T14806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.516198][ T5307] usb 3-1: USB disconnect, device number 74 [ 796.605554][T14806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.979661][ T4623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 796.990185][ T4623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 797.001292][ T4623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 797.016284][ T4623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 797.026604][ T4623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 797.039100][ T4623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 797.300094][T14806] bridge_slave_1: left allmulticast mode [ 797.306015][T14806] bridge_slave_1: left promiscuous mode [ 797.311827][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.541408][T14806] bridge_slave_0: left allmulticast mode [ 797.553314][ T4623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 797.576811][ T4623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 797.600823][ T4623] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 797.602228][T14806] bridge_slave_0: left promiscuous mode [ 797.669937][ T4623] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 797.682841][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.693482][ T4623] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 797.709593][ T4623] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 797.823230][T15233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.875532][T15233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.945892][T15233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.019210][T15233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.059641][T15233] binder: 15232:15233 ioctl c0306201 20000280 returned -14 [ 798.259586][T10511] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 798.273016][T10511] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 798.285678][T10511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 798.296128][T10511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 798.307790][T10511] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 798.317119][T10511] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 798.764314][ T5288] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 798.926672][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 798.939775][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.006340][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.020115][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.072590][ T5288] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 799.084223][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.103505][ T5288] usb 3-1: config 0 descriptor?? [ 799.108813][ T4623] Bluetooth: hci7: command tx timeout [ 799.575671][ T5288] wacom 0003:056A:0000.0039: unknown main item tag 0x0 [ 799.582852][ T5288] wacom 0003:056A:0000.0039: unknown main item tag 0x0 [ 799.592238][ T5288] wacom 0003:056A:0000.0039: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 799.631645][ T5288] wacom 0003:056A:0000.0039: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.2-1/input0 [ 799.647339][ T5288] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0000.0039/input/input108 [ 799.745192][ T4623] Bluetooth: hci8: command tx timeout [ 799.784183][ T5288] usb 3-1: USB disconnect, device number 75 [ 799.854971][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 799.854995][ T29] audit: type=1326 audit(1729689525.384:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 799.890935][ T29] audit: type=1326 audit(1729689525.414:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 799.932822][ T29] audit: type=1326 audit(1729689525.414:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 799.975727][ T29] audit: type=1326 audit(1729689525.414:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 800.000763][ T29] audit: type=1326 audit(1729689525.414:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 800.025992][ T29] audit: type=1326 audit(1729689525.414:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 800.049977][T14806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.050282][ T29] audit: type=1326 audit(1729689525.414:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 800.082637][ T29] audit: type=1326 audit(1729689525.414:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 800.097834][T15255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.106329][ T29] audit: type=1326 audit(1729689525.414:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 800.138944][ T29] audit: type=1326 audit(1729689525.414:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15252 comm="syz.3.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x7ffc0000 [ 800.162671][T14806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.182401][T15255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.194859][T14806] bond0 (unregistering): Released all slaves [ 800.360270][T15256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.444287][T15256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.484819][ T4623] Bluetooth: hci4: command tx timeout [ 800.802069][T15261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2020'. [ 800.933112][T14806] hsr_slave_0: left promiscuous mode [ 800.976282][T14806] hsr_slave_1: left promiscuous mode [ 801.008766][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.017947][T14806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.064738][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.119376][T14806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.194356][ T4623] Bluetooth: hci7: command tx timeout [ 801.249565][T14806] veth1_macvtap: left promiscuous mode [ 801.257591][T14806] veth0_macvtap: left promiscuous mode [ 801.263492][T14806] veth1_vlan: left promiscuous mode [ 801.271460][T14806] veth0_vlan: left promiscuous mode [ 801.824945][ T4623] Bluetooth: hci8: command tx timeout [ 802.583838][ T4623] Bluetooth: hci4: command tx timeout [ 803.270009][ T4623] Bluetooth: hci7: command tx timeout [ 803.353173][T15281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.429584][T15281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.905879][ T4623] Bluetooth: hci8: command tx timeout [ 803.968193][T14806] team0 (unregistering): Port device team_slave_1 removed [ 804.098448][T14806] team0 (unregistering): Port device team_slave_0 removed [ 804.624504][ T4623] Bluetooth: hci4: command tx timeout [ 805.351379][ T4623] Bluetooth: hci7: command tx timeout [ 805.984695][ T4623] Bluetooth: hci8: command tx timeout [ 806.321610][T15214] chnl_net:caif_netlink_parms(): no params data found [ 806.383748][T15240] chnl_net:caif_netlink_parms(): no params data found [ 806.434032][ T5282] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 806.683639][ T5282] usb 3-1: config 0 has no interfaces? [ 806.705006][ T4623] Bluetooth: hci4: command tx timeout [ 806.727538][T15305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.758647][ T5282] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 806.769776][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.804021][ T5282] usb 3-1: Product: syz [ 806.821819][T15305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.838080][ T5282] usb 3-1: Manufacturer: syz [ 806.842774][ T5282] usb 3-1: SerialNumber: syz [ 806.932660][ T5282] usb 3-1: config 0 descriptor?? [ 807.014562][T14806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.239731][T15234] chnl_net:caif_netlink_parms(): no params data found [ 807.604970][T14806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.687540][T15214] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.709951][T15214] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.769437][T15214] bridge_slave_0: entered allmulticast mode [ 807.823647][T15214] bridge_slave_0: entered promiscuous mode [ 808.032262][T14806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.101893][T15214] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.126073][T15214] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.138380][T15214] bridge_slave_1: entered allmulticast mode [ 808.146486][T15214] bridge_slave_1: entered promiscuous mode [ 808.255796][T14806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.446774][T15240] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.459430][T15240] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.467578][T15240] bridge_slave_0: entered allmulticast mode [ 808.489095][T15240] bridge_slave_0: entered promiscuous mode [ 808.625719][T15240] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.632907][T15240] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.660582][T15240] bridge_slave_1: entered allmulticast mode [ 808.685160][T15240] bridge_slave_1: entered promiscuous mode [ 808.719745][T15214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.808220][T15214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.945972][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.953831][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.110689][T15234] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.143880][T15234] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.153060][T15234] bridge_slave_0: entered allmulticast mode [ 809.200005][T15234] bridge_slave_0: entered promiscuous mode [ 809.321129][T15240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.360923][T15214] team0: Port device team_slave_0 added [ 809.396166][T15214] team0: Port device team_slave_1 added [ 809.548281][T15234] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.558636][T15234] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.568950][T15234] bridge_slave_1: entered allmulticast mode [ 809.582884][ T5281] usb 3-1: USB disconnect, device number 76 [ 809.583361][T15234] bridge_slave_1: entered promiscuous mode [ 809.642534][T15240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.897068][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.992403][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.057706][T15214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.099586][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.133356][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.242306][T15214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.316945][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.404472][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.417939][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.514293][T15240] team0: Port device team_slave_0 added [ 810.764650][T15214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.771667][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.834046][T15214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.860655][T15234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.912443][T15240] team0: Port device team_slave_1 added [ 810.960413][T14806] bridge_slave_1: left allmulticast mode [ 810.966609][T14806] bridge_slave_1: left promiscuous mode [ 811.004265][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.082403][T14806] bridge_slave_0: left allmulticast mode [ 811.125094][T14806] bridge_slave_0: left promiscuous mode [ 811.130975][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.201059][T15338] syz.3.2026 (15338): drop_caches: 2 [ 812.234225][ T5293] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 812.398288][ T5293] usb 3-1: device descriptor read/64, error -71 [ 812.654275][ T5293] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 812.804117][ T5293] usb 3-1: device descriptor read/64, error -71 [ 812.926273][ T5293] usb usb3-port1: attempt power cycle [ 812.971880][T14806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.044627][T14806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.058098][T14806] bond0 (unregistering): Released all slaves [ 813.130950][T15234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.198620][T15349] netlink: 'syz.3.2028': attribute type 10 has an invalid length. [ 813.210982][T15349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.251892][T15349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.264403][ T5293] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 813.304352][T15349] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 813.325287][ T5293] usb 3-1: device descriptor read/8, error -71 [ 813.419345][T15240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.446848][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.474402][T15240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.499850][T15240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.517509][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.564064][ T5293] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 813.572280][T15240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.589037][ T5293] usb 3-1: device descriptor read/8, error -71 [ 813.729542][ T5293] usb usb3-port1: unable to enumerate USB device [ 813.757708][T15214] hsr_slave_0: entered promiscuous mode [ 813.793914][T15214] hsr_slave_1: entered promiscuous mode [ 813.840964][T15214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 813.871289][T15214] Cannot create hsr debugfs directory [ 813.937153][T15355] binder_alloc: binder_alloc_mmap_handler: 15351 20ffc000-20ffe000 already mapped failed -16 [ 813.999521][T15234] team0: Port device team_slave_0 added [ 814.034481][T15354] binder_alloc: binder_alloc_mmap_handler: 15351 20ffd000-20fff000 already mapped failed -16 [ 814.053128][T15234] team0: Port device team_slave_1 added [ 814.614685][T15234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.621843][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.700893][T15234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.032244][T14806] hsr_slave_0: left promiscuous mode [ 815.073222][T14806] hsr_slave_1: left promiscuous mode [ 815.097072][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.124348][T14806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.158976][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.186008][T14806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.271221][T14806] veth1_macvtap: left promiscuous mode [ 815.278429][T14806] veth0_macvtap: left promiscuous mode [ 815.286443][T14806] veth1_vlan: left promiscuous mode [ 815.293004][T14806] veth0_vlan: left promiscuous mode [ 815.384203][ T5293] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 815.563362][ T5293] usb 3-1: Using ep0 maxpacket: 32 [ 815.581319][ T5293] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 815.590409][ T5293] usb 3-1: config 0 has no interface number 0 [ 815.599253][ T5293] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 815.614238][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.633803][ T5293] usb 3-1: config 0 descriptor?? [ 815.642980][ T5293] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 816.239348][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 816.239371][ T29] audit: type=1326 audit(1729689541.764:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.2.2031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x0 [ 816.404350][ T5293] gspca_sunplus: reg_r err -110 [ 816.419155][ T5293] sunplus 3-1:0.23: probe with driver sunplus failed with error -110 [ 816.809942][T14806] team0 (unregistering): Port device team_slave_1 removed [ 816.927252][T14806] team0 (unregistering): Port device team_slave_0 removed [ 818.110201][ T5288] usb 3-1: USB disconnect, device number 81 [ 818.438446][T15234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.462378][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.490400][T15234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.540512][T15240] hsr_slave_0: entered promiscuous mode [ 818.567985][T15240] hsr_slave_1: entered promiscuous mode [ 818.578205][T15240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.586948][T15240] Cannot create hsr debugfs directory [ 818.605775][T15371] ip6tnl0: entered promiscuous mode [ 818.612705][T15371] vlan2: entered promiscuous mode [ 818.621724][T15371] ip6tnl0: left promiscuous mode [ 819.138980][T15234] hsr_slave_0: entered promiscuous mode [ 819.156601][T15234] hsr_slave_1: entered promiscuous mode [ 819.172194][T15234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.186761][T15234] Cannot create hsr debugfs directory [ 819.226571][T15385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.316864][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.321571][T15408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.356084][ T29] audit: type=1326 audit(1729689545.874:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 820.395548][T15408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.396245][ T29] audit: type=1326 audit(1729689545.874:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 820.506261][ T29] audit: type=1326 audit(1729689545.874:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36bf7c990 code=0x7ffc0000 [ 820.528795][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.551368][ T29] audit: type=1326 audit(1729689545.874:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36bf7c990 code=0x7ffc0000 [ 820.613506][ T29] audit: type=1326 audit(1729689545.874:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 820.729610][ T29] audit: type=1326 audit(1729689545.904:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 820.790261][ T29] audit: type=1326 audit(1729689545.904:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc36bf7e033 code=0x7ffc0000 [ 820.837853][ T29] audit: type=1326 audit(1729689545.904:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc36bf7e033 code=0x7ffc0000 [ 820.862927][ T29] audit: type=1326 audit(1729689545.914:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.2.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 821.488863][ T3781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.507663][ T3781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.552750][ T3781] bond0 (unregistering): Released all slaves [ 821.682364][T15405] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2036'. [ 821.731808][T15408] FAULT_INJECTION: forcing a failure. [ 821.731808][T15408] name failslab, interval 1, probability 0, space 0, times 0 [ 821.749582][T15408] CPU: 0 UID: 0 PID: 15408 Comm: syz.3.2037 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 821.760460][T15408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 821.770575][T15408] Call Trace: [ 821.773894][T15408] [ 821.776863][T15408] dump_stack_lvl+0x241/0x360 [ 821.781593][T15408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.786848][T15408] ? __pfx__printk+0x10/0x10 [ 821.791513][T15408] ? __ip_dev_find+0x532/0x610 [ 821.796342][T15408] should_fail_ex+0x3b0/0x4e0 [ 821.801098][T15408] ? dst_alloc+0x12b/0x190 [ 821.805581][T15408] should_failslab+0xac/0x100 [ 821.810326][T15408] ? dst_alloc+0x12b/0x190 [ 821.814817][T15408] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 821.820255][T15408] dst_alloc+0x12b/0x190 [ 821.824549][T15408] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 821.830693][T15408] ip_route_output_key_hash+0x193/0x2b0 [ 821.836307][T15408] ? ip_route_output_key_hash+0xdf/0x2b0 [ 821.842032][T15408] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 821.848176][T15408] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 821.854231][T15408] ip_route_output_flow+0x29/0x140 [ 821.859405][T15408] __ip4_datagram_connect+0x96c/0x1260 [ 821.864918][T15408] ip4_datagram_connect+0x2e/0x50 [ 821.869967][T15408] kernel_connect+0x10b/0x160 [ 821.874667][T15408] ? __pfx_lock_release+0x10/0x10 [ 821.879718][T15408] ? __pfx_kernel_connect+0x10/0x10 [ 821.884949][T15408] ? inet_select_addr+0x5b/0xa20 [ 821.889924][T15408] start_sync_thread+0x1cc7/0x2dc0 [ 821.895176][T15408] ? __pfx_sync_thread_master+0x10/0x10 [ 821.900751][T15408] ? __pfx_start_sync_thread+0x10/0x10 [ 821.906240][T15408] ? __pfx___might_resched+0x10/0x10 [ 821.911560][T15408] ? __might_fault+0xaa/0x120 [ 821.916269][T15408] ? __pfx_lock_release+0x10/0x10 [ 821.921328][T15408] ? apparmor_capable+0x13b/0x1b0 [ 821.926390][T15408] ? read_word_at_a_time+0xe/0x20 [ 821.931438][T15408] ? sized_strscpy+0x8d/0x220 [ 821.936137][T15408] do_ip_vs_set_ctl+0x442/0x13d0 [ 821.941113][T15408] ? __pfx___might_resched+0x10/0x10 [ 821.946430][T15408] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 821.951838][T15408] ? rcu_is_watching+0x15/0xb0 [ 821.956632][T15408] ? __mutex_unlock_slowpath+0x21d/0x750 [ 821.962290][T15408] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 821.968291][T15408] ? aa_sk_perm+0x96d/0xab0 [ 821.972821][T15408] ? __pfx_aa_sk_perm+0x10/0x10 [ 821.977691][T15408] nf_setsockopt+0x295/0x2c0 [ 821.982305][T15408] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 821.988227][T15408] do_sock_setsockopt+0x3af/0x720 [ 821.993280][T15408] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 821.998849][T15408] ? __fget_files+0x29/0x470 [ 822.003461][T15408] ? __fget_files+0x3f3/0x470 [ 822.008158][T15408] ? __fget_files+0x29/0x470 [ 822.012787][T15408] __sys_setsockopt+0x1a2/0x250 [ 822.017663][T15408] __x64_sys_setsockopt+0xb5/0xd0 [ 822.022711][T15408] do_syscall_64+0xf3/0x230 [ 822.027239][T15408] ? clear_bhb_loop+0x35/0x90 [ 822.031939][T15408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.037866][T15408] RIP: 0033:0x7fe212d7dff9 [ 822.042311][T15408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.061946][T15408] RSP: 002b:00007fe213b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 822.070385][T15408] RAX: ffffffffffffffda RBX: 00007fe212f36058 RCX: 00007fe212d7dff9 [ 822.078375][T15408] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000004 [ 822.086367][T15408] RBP: 00007fe213b77090 R08: 0000000000000018 R09: 0000000000000000 [ 822.094357][T15408] R10: 0000000020002100 R11: 0000000000000246 R12: 0000000000000001 [ 822.102357][T15408] R13: 0000000000000000 R14: 00007fe212f36058 R15: 00007fe21305fa28 [ 822.110381][T15408] [ 822.113550][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.126275][T15408] IPVS: Error connecting to the multicast addr [ 822.318088][ T3781] batman_adv: batadv0: Removing interface: wlan1 [ 822.504616][ T5307] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 822.686182][ T5307] usb 3-1: Using ep0 maxpacket: 32 [ 822.750512][ T5307] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 822.761193][ T3781] hsr_slave_0: left promiscuous mode [ 822.763978][ T5307] usb 3-1: config 0 has no interface number 0 [ 822.787800][ T5307] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62 [ 822.822245][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.846790][ T3781] hsr_slave_1: left promiscuous mode [ 822.856296][ T5307] usb 3-1: config 0 descriptor?? [ 822.868726][ T5307] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 822.875847][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.883410][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.947443][ T3781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.974169][ T3781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.100424][ T3781] veth0_macvtap: left promiscuous mode [ 823.124168][ T3781] veth1_vlan: left promiscuous mode [ 823.132007][ T3781] veth0_vlan: left promiscuous mode [ 823.280452][T15431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.304468][T15431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.393193][ T5307] gspca_sunplus: reg_r err -110 [ 823.416456][ T5307] sunplus 3-1:0.23: probe with driver sunplus failed with error -110 [ 823.637830][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 823.637847][ T29] audit: type=1326 audit(1729689549.164:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15429 comm="syz.3.2039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x0 [ 825.220031][ T938] usb 3-1: USB disconnect, device number 83 [ 825.465483][ T3781] team0 (unregistering): Port device team_slave_1 removed [ 825.565376][T15436] fuse: Bad value for 'rootmode' [ 825.758081][ T3781] team0 (unregistering): Port device team_slave_0 removed [ 826.427175][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.486082][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.094284][ T938] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 829.267115][ T938] usb 3-1: config 1 interface 0 has no altsetting 0 [ 829.287296][ T938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 829.296685][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.305393][ T938] usb 3-1: Product: syz [ 829.311116][ T938] usb 3-1: Manufacturer: syz [ 829.316894][ T938] usb 3-1: SerialNumber: syz [ 829.625144][T15448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.666065][T15448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.151002][T15214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 830.230747][T15214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 830.308301][T15214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 830.379707][T15214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 831.507162][T10511] Bluetooth: hci2: command 0x0406 tx timeout [ 831.631614][ T938] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 831.697331][ T938] usb 3-1: USB disconnect, device number 84 [ 831.707103][ T938] usblp0: removed [ 832.138021][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.202048][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.484341][ T5281] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 832.744006][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.767062][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 832.779415][ T5281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 832.792880][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.816998][ T5281] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 832.867278][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.974407][ T5281] usb 3-1: Product: syz [ 832.978665][ T5281] usb 3-1: Manufacturer: syz [ 832.983312][ T5281] usb 3-1: SerialNumber: syz [ 833.025945][ T5281] usb 3-1: config 0 descriptor?? [ 833.098152][ T5281] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 833.299547][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.428587][ T3781] bond0 (unregistering): Released all slaves [ 833.613497][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.808273][T15240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 834.178034][T15234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.613511][T15240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 834.662550][T15240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 834.890969][T15234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.154252][T15240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 835.469369][T15234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.594546][ T46] usb 3-1: USB disconnect, device number 85 [ 835.625093][T15495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.664446][T15495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.782829][ T29] audit: type=1326 audit(1729689561.304:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.3.2048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x0 [ 835.865970][ T3781] hsr_slave_0: left promiscuous mode [ 835.898821][ T3781] hsr_slave_1: left promiscuous mode [ 835.971371][ T3781] veth1_macvtap: left promiscuous mode [ 835.985306][ T3781] veth0_macvtap: left promiscuous mode [ 835.994559][ T3781] veth1_vlan: left promiscuous mode [ 836.002330][ T3781] veth0_vlan: left promiscuous mode [ 836.094882][T10534] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 836.256174][T10534] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 836.292216][T10534] usb 3-1: can't read configurations, error -22 [ 836.457771][T10534] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 836.649760][T10534] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 836.658852][T10534] usb 3-1: can't read configurations, error -22 [ 836.666759][T10534] usb usb3-port1: attempt power cycle [ 837.024254][T10534] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 837.057775][T10534] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 837.100637][T10534] usb 3-1: can't read configurations, error -22 [ 837.259661][T10534] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 837.319781][T10534] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 837.334857][T10534] usb 3-1: can't read configurations, error -22 [ 837.343725][T10534] usb usb3-port1: unable to enumerate USB device [ 838.719120][ T4623] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 839.195891][T15543] loop4: detected capacity change from 0 to 7 [ 839.203394][ T938] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 839.220942][T15543] buffer_io_error: 7 callbacks suppressed [ 839.220964][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.251717][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.257356][ T938] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 839.271060][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.303771][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.314380][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.327479][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.350319][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.360742][T15543] ldm_validate_partition_table(): Disk read failed. [ 839.384901][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.408600][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.418848][T15543] Buffer I/O error on dev loop4, logical block 0, async page read [ 839.464339][T15543] Dev loop4: unable to read RDB block 0 [ 839.470288][T15543] loop4: unable to read partition table [ 839.484500][T15543] loop4: partition table beyond EOD, truncated [ 839.503070][T15543] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 839.503070][T15543] ) failed (rc=-5) [ 839.958750][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 839.996144][T15234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.185318][T15550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2053'. [ 840.215148][T15214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.234947][T15214] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.262245][T15214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 840.273330][T15214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 840.299320][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.306569][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.317027][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.324264][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.402807][T15214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.456949][T15240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.523535][T15240] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.671155][T10534] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 840.710275][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.717522][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.742335][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.749591][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.839249][T10534] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.850648][T10534] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.871328][T10534] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 840.881912][T10534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.890557][T10534] usb 3-1: Product: syz [ 840.895178][T10534] usb 3-1: Manufacturer: syz [ 840.899860][T10534] usb 3-1: SerialNumber: syz [ 840.921759][T10534] cdc_ncm 3-1:1.0: skipping garbage [ 840.927687][T10534] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 840.935394][T10534] cdc_ncm 3-1:1.0: bind() failure [ 840.941995][T10534] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 840.958406][T10534] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 840.969881][T10534] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 840.977079][T10534] cdc_ncm 3-1:1.1: bind() failure [ 840.987166][T10534] usbtest 3-1:1.1: couldn't get endpoints, -22 [ 840.993588][T10534] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 841.132872][T15240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 841.175053][ T5307] usb 3-1: USB disconnect, device number 90 [ 841.214541][T15214] veth0_vlan: entered promiscuous mode [ 841.320824][T15214] veth1_vlan: entered promiscuous mode [ 841.471191][T15234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 841.506393][T15234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 841.541451][T15240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.566423][T15234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 841.613080][T15234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 841.695090][T15214] veth0_macvtap: entered promiscuous mode [ 841.719444][T15214] veth1_macvtap: entered promiscuous mode [ 841.751627][T15546] Bluetooth: hci5: command 0x0406 tx timeout [ 841.757935][T15546] Bluetooth: hci1: command 0x0406 tx timeout [ 842.001206][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.045566][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.056029][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.067135][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.092414][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.119304][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.141281][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.204239][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.225908][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.249654][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.259862][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.270944][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.281901][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.304615][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.363653][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.376228][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.392650][T15214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.400556][ T5282] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 842.499923][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.512467][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.576501][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.605927][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.624945][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 842.635566][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.643735][ T5282] usb 3-1: no configurations [ 842.651215][ T5282] usb 3-1: can't read configurations, error -22 [ 842.674151][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.691315][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.723653][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.754075][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.790416][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.804890][ T5282] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 842.862741][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.899712][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.931085][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.954060][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.966464][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.977008][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 842.983491][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.983539][ T5282] usb 3-1: no configurations [ 843.002361][ T5282] usb 3-1: can't read configurations, error -22 [ 843.009455][ T5282] usb usb3-port1: attempt power cycle [ 843.015606][T15214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.027398][T15214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.042144][T15214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.093149][T15240] veth0_vlan: entered promiscuous mode [ 843.110055][T15240] veth1_vlan: entered promiscuous mode [ 843.146157][T15214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.171175][T15214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.207224][T15214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.239985][T15214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.328042][T15240] veth0_macvtap: entered promiscuous mode [ 843.404879][T15240] veth1_macvtap: entered promiscuous mode [ 843.443504][ T5282] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 843.464682][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 843.470664][ T5282] usb 3-1: no configurations [ 843.476202][ T5282] usb 3-1: can't read configurations, error -22 [ 843.529796][T15234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.593834][T15597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.606162][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.629938][ T5282] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 843.655268][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.682341][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.695937][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 843.702024][ T5282] usb 3-1: no configurations [ 843.707238][ T5282] usb 3-1: can't read configurations, error -22 [ 843.728275][ T5282] usb usb3-port1: unable to enumerate USB device [ 843.736846][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.752229][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.786348][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.817262][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.828210][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.838694][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.850442][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.872305][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.914127][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.934194][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.946179][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.968896][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.002227][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.022983][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.039399][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.066107][T15597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.067733][T15240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.148144][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.148772][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.167966][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.177949][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.188550][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.198602][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.209154][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.211469][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.219079][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.219102][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.219123][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.219141][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.219162][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.279376][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.289461][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.299999][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.310121][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.320693][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.330634][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.341150][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.351134][T15240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.362176][T15240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.374618][T15240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.486352][ T29] audit: type=1326 audit(1729689570.014:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15594 comm="syz.3.2057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x0 [ 844.518239][T15240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.549603][T15240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.561703][T15240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.575078][T15240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.617131][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.648333][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.663232][T15234] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.703802][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.711036][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.793531][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.800775][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.988309][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.996708][ T29] audit: type=1326 audit(1729689570.514:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.4.2058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b5e57dff9 code=0x0 [ 845.077016][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.221804][ T322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.241340][ T322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.262872][T15234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.347907][T15625] netlink: 'syz.2.2059': attribute type 29 has an invalid length. [ 845.367160][T15625] netlink: 'syz.2.2059': attribute type 29 has an invalid length. [ 845.395201][T15625] netlink: 'syz.2.2059': attribute type 29 has an invalid length. [ 845.417513][T15625] netlink: 'syz.2.2059': attribute type 29 has an invalid length. [ 845.472958][T15234] veth0_vlan: entered promiscuous mode [ 845.529125][T15234] veth1_vlan: entered promiscuous mode [ 845.748402][T15234] veth0_macvtap: entered promiscuous mode [ 845.803329][T15234] veth1_macvtap: entered promiscuous mode [ 845.836197][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.850405][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.890205][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.922636][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.960044][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.000810][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.026539][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.037934][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.048135][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.059389][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.070672][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.082802][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.099418][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.141386][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.164086][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.175926][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.187624][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.209819][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.221075][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.242855][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.286494][T15234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.299728][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.347728][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.362988][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.394433][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.418535][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.429478][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.439920][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.453788][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.487018][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.534065][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.547620][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.570079][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.594143][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.605175][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.617687][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.633546][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.643837][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.656070][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.666201][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.687096][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.715003][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.743460][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.780542][T15234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.803030][T15234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.812428][T15234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.839194][T15234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.849996][T15234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.904772][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 847.057182][ T46] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 847.074943][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.095863][ T46] usb 5-1: config 0 descriptor?? [ 847.181737][ T46] cp210x 5-1:0.0: cp210x converter detected [ 847.297002][T15672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.314924][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.322858][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.494725][T15672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.542353][T15672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.568762][ T322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.577012][ T322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.777980][T15678] xt_l2tp: v2 sid > 0xffff: 16777216 [ 848.344049][ T5293] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 848.534002][ T5293] usb 3-1: Using ep0 maxpacket: 32 [ 848.542927][ T5293] usb 3-1: no configurations [ 848.554716][ T5293] usb 3-1: can't read configurations, error -22 [ 848.705734][ T5293] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 848.884041][ T5293] usb 3-1: Using ep0 maxpacket: 32 [ 848.910221][ T5293] usb 3-1: no configurations [ 848.926035][ T5293] usb 3-1: can't read configurations, error -22 [ 848.942286][ T5293] usb usb3-port1: attempt power cycle [ 849.294202][ T5293] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 849.364607][ T5293] usb 3-1: Using ep0 maxpacket: 32 [ 849.371538][ T5293] usb 3-1: no configurations [ 849.392534][ T5293] usb 3-1: can't read configurations, error -22 [ 849.554103][ T5293] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 849.623453][ T938] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 849.654670][ T5293] usb 3-1: Using ep0 maxpacket: 32 [ 849.675652][ T5293] usb 3-1: no configurations [ 849.680357][ T5293] usb 3-1: can't read configurations, error -22 [ 849.756387][ T5293] usb usb3-port1: unable to enumerate USB device [ 849.794231][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 849.801701][ T938] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 849.816890][ T938] usb 1-1: config 0 has no interface number 0 [ 849.877760][ T938] usb 1-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=c4.d6 [ 849.892778][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.934168][ T938] usb 1-1: Product: syz [ 849.938486][ T938] usb 1-1: Manufacturer: syz [ 849.949355][ T938] usb 1-1: SerialNumber: syz [ 849.959945][ T938] usb 1-1: config 0 descriptor?? [ 849.975328][ T938] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state. [ 849.982636][ T938] dvb-usb: bulk message failed: -22 (3/0) [ 850.056903][ T938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 850.244361][ T938] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T) [ 850.244832][T15683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2013'. [ 850.252177][ T938] usb 1-1: media controller created [ 850.278666][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.303387][ T938] dvb-usb: bulk message failed: -22 (6/0) [ 850.309580][ T938] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T' [ 850.319457][ T938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input111 [ 850.332660][ T938] dvb-usb: schedule remote query interval to 150 msecs. [ 850.341198][ T938] dvb-usb: bulk message failed: -22 (3/0) [ 850.365303][ T938] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected. [ 850.494208][ T5307] dvb-usb: bulk message failed: -22 (1/0) [ 850.507530][ T5307] dvb-usb: error while querying for an remote control event. [ 850.540040][ T46] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 850.551601][ T46] cp210x 5-1:0.0: querying part number failed [ 850.565723][ T46] usb 5-1: cp210x converter now attached to ttyUSB0 [ 850.576905][ T46] usb 5-1: USB disconnect, device number 12 [ 850.606173][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 850.615870][ T46] cp210x 5-1:0.0: device disconnected [ 850.708125][ T5307] dvb-usb: bulk message failed: -22 (1/0) [ 850.726630][ T5307] dvb-usb: error while querying for an remote control event. [ 850.936530][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 850.952642][ T46] dvb-usb: error while querying for an remote control event. [ 850.962919][ T5307] usb 1-1: USB disconnect, device number 76 [ 851.097373][ T5307] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected. [ 851.160728][T15689] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2068'. [ 851.651060][T15706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2073'. [ 852.075881][ T29] audit: type=1326 audit(1729689577.604:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.0.2077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70b277dff9 code=0x0 [ 852.097820][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.138956][T15728] [U]  [ 853.689721][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'. [ 853.847181][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'. [ 853.939099][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'. [ 854.389408][ T5293] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 854.558548][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2082'. [ 854.655126][ T5293] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 854.664531][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.677216][ T5293] usb 3-1: config 0 descriptor?? [ 854.686065][ T5293] cp210x 3-1:0.0: cp210x converter detected [ 855.123684][T15739] xt_l2tp: v2 sid > 0xffff: 16777216 [ 855.750834][T15422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.211821][T15422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.364259][ T5229] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 856.769078][T15422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.846726][T10511] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 856.873613][T10511] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 857.004441][T10511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 857.046645][T10511] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 857.061175][T10511] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 857.068865][T10511] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 857.077085][T15422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.569079][T15422] bridge_slave_1: left allmulticast mode [ 857.596572][T15422] bridge_slave_1: left promiscuous mode [ 857.602471][T15422] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.773856][T15422] bridge_slave_0: left allmulticast mode [ 857.795100][T15422] bridge_slave_0: left promiscuous mode [ 857.800917][T15422] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.225303][ T5282] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 858.398655][ T5293] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 858.424639][ T5293] cp210x 3-1:0.0: querying part number failed [ 858.432678][ T5293] usb 3-1: cp210x converter now attached to ttyUSB0 [ 858.466122][ T5293] usb 3-1: USB disconnect, device number 99 [ 858.477394][ T5293] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 858.485780][ T5293] cp210x 3-1:0.0: device disconnected [ 858.904777][ T29] audit: type=1326 audit(1729689584.434:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15756 comm="syz.2.2088" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc36bf7dff9 code=0x0 [ 859.099622][ T5282] usb 1-1: config 0 has no interfaces? [ 859.125827][ T5282] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 859.136781][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.145716][ T5282] usb 1-1: Product: syz [ 859.154444][ T5282] usb 1-1: Manufacturer: syz [ 859.159109][ T5282] usb 1-1: SerialNumber: syz [ 859.168761][ T5282] usb 1-1: config 0 descriptor?? [ 859.194417][T10511] Bluetooth: hci7: command tx timeout [ 859.259610][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 859.374331][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 859.387342][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 859.407075][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 859.420258][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 859.429249][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 859.535515][T15720] syz.3.2075 (15720): drop_caches: 1 [ 859.724589][T15754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.664377][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 860.855083][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 860.865274][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.873616][ T9] usb 3-1: Product: syz [ 860.894040][ T9] usb 3-1: Manufacturer: syz [ 860.917243][ T9] usb 3-1: SerialNumber: syz [ 860.938999][ T9] usb 3-1: config 0 descriptor?? [ 861.276504][T10511] Bluetooth: hci7: command tx timeout [ 861.342841][T15422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.404824][T15422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.437589][T15422] bond0 (unregistering): Released all slaves [ 861.602785][T10511] Bluetooth: hci4: command tx timeout [ 861.884867][ T9] usb 1-1: USB disconnect, device number 78 [ 861.929916][ T5293] usb 3-1: USB disconnect, device number 100 [ 862.560657][T15749] chnl_net:caif_netlink_parms(): no params data found [ 862.595572][T15792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.673615][T15792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.850437][T15422] hsr_slave_0: left promiscuous mode [ 862.937144][T15422] hsr_slave_1: left promiscuous mode [ 863.025640][T15422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.113865][T15422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.144145][ T5293] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 863.162095][T15422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.314119][T15422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.345591][T10511] Bluetooth: hci7: command tx timeout [ 863.593045][T15422] veth1_macvtap: left promiscuous mode [ 863.654290][T15422] veth0_macvtap: left promiscuous mode [ 863.674309][T10511] Bluetooth: hci4: command tx timeout [ 863.697123][ T5293] usb 3-1: config 3 has no interfaces? [ 863.704288][T15422] veth1_vlan: left promiscuous mode [ 863.722974][ T5293] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 863.723155][T15422] veth0_vlan: left promiscuous mode [ 863.750917][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.759162][ T5293] usb 3-1: Product: syz [ 863.763527][ T5293] usb 3-1: Manufacturer: syz [ 863.768532][ T5293] usb 3-1: SerialNumber: syz [ 865.426599][T10511] Bluetooth: hci7: command tx timeout [ 865.744554][T10511] Bluetooth: hci4: command tx timeout [ 866.347145][ T5293] usb 3-1: USB disconnect, device number 101 [ 866.850088][ T29] audit: type=1326 audit(1729689592.374:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 866.874504][ T29] audit: type=1326 audit(1729689592.394:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 866.904148][ T29] audit: type=1326 audit(1729689592.404:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 866.928417][ T29] audit: type=1326 audit(1729689592.404:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 866.952255][ T29] audit: type=1326 audit(1729689592.404:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 866.976030][ T29] audit: type=1326 audit(1729689592.424:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 867.001205][ T29] audit: type=1326 audit(1729689592.424:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 867.034290][ T29] audit: type=1326 audit(1729689592.424:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 867.058313][ T29] audit: type=1326 audit(1729689592.424:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 867.081100][ T29] audit: type=1326 audit(1729689592.424:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15821 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x7ffc0000 [ 867.509411][T15422] team0 (unregistering): Port device team_slave_1 removed [ 867.690680][T15422] team0 (unregistering): Port device team_slave_0 removed [ 867.826734][T10511] Bluetooth: hci4: command tx timeout [ 868.825720][T15841] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 868.904507][T15838] Cannot find add_set index 0 as target [ 868.965833][T15838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2106'. [ 869.374374][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 869.504106][ T9] usb 1-1: device descriptor read/64, error -71 [ 869.788951][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 869.974046][ T9] usb 1-1: device descriptor read/64, error -71 [ 870.086174][ T9] usb usb1-port1: attempt power cycle [ 870.391410][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.403343][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.454025][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 870.491244][ T9] usb 1-1: device descriptor read/8, error -71 [ 870.580040][ T5293] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 870.645598][T15749] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.652917][T15749] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.702617][T15749] bridge_slave_0: entered allmulticast mode [ 870.736021][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 870.746412][T15749] bridge_slave_0: entered promiscuous mode [ 870.748220][ T5293] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 255, changing to 11 [ 870.765117][ T5293] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 59127, setting to 1024 [ 870.765518][T15749] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.777505][ T5293] usb 3-1: config 0 interface 0 has no altsetting 0 [ 870.777788][ T9] usb 1-1: device descriptor read/8, error -71 [ 870.801037][ T5293] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 870.811705][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.822321][ T5293] usb 3-1: Product: syz [ 870.826859][ T5293] usb 3-1: Manufacturer: syz [ 870.832832][ T5293] usb 3-1: SerialNumber: syz [ 870.845126][ T5293] usb 3-1: config 0 descriptor?? [ 870.847313][T15749] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.852470][T15850] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 870.870759][ T5293] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 870.878957][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 870.889395][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 870.899761][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 870.908191][ T9] usb usb1-port1: unable to enumerate USB device [ 870.914879][T15749] bridge_slave_1: entered allmulticast mode [ 870.922300][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 870.940063][T15749] bridge_slave_1: entered promiscuous mode [ 870.946131][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 870.962823][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 870.977473][ T5293] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 870.994669][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 871.018495][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 871.064714][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 871.089085][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 871.110245][ T5293] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 871.120036][ T5293] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 871.172762][T15749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.202290][T15749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.239044][ T5293] usb 3-1: USB disconnect, device number 102 [ 871.252597][ T5293] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 871.280800][ T5293] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 871.295255][T15760] chnl_net:caif_netlink_parms(): no params data found [ 871.395364][ T5293] keyspan 3-1:0.0: device disconnected [ 871.701313][T15749] team0: Port device team_slave_0 added [ 871.848204][T15749] team0: Port device team_slave_1 added [ 872.024044][ T5293] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 872.077154][T15749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.115093][T15749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.241775][T15749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.318080][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 872.328259][ T5293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 872.338952][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 872.349250][ T5293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 872.371499][ T5293] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 872.382779][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.392359][ T5293] usb 3-1: Product: syz [ 872.401673][ T5293] usb 3-1: Manufacturer: syz [ 872.408097][ T5293] usb 3-1: SerialNumber: syz [ 872.422581][ T5293] usb 3-1: config 0 descriptor?? [ 872.451569][T15760] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.470623][ T5293] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 872.488225][ T5293] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 872.501007][ T5293] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 872.532182][T15760] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.619559][T15760] bridge_slave_0: entered allmulticast mode [ 872.700365][T15760] bridge_slave_0: entered promiscuous mode [ 872.789365][T15749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.014180][T15749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.154126][T15749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.788849][T15422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.135190][T15760] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.142394][T15760] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.218102][T15760] bridge_slave_1: entered allmulticast mode [ 874.243764][T15890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.274433][T15760] bridge_slave_1: entered promiscuous mode [ 874.289143][T15890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.471153][T15749] hsr_slave_0: entered promiscuous mode [ 874.478338][T15749] hsr_slave_1: entered promiscuous mode [ 874.485015][T15749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.493571][T15749] Cannot create hsr debugfs directory [ 874.750775][T15422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.877970][T15760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.989583][T15893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.095015][T15893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.211785][ T5307] usb 3-1: USB disconnect, device number 103 [ 875.268008][T15422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.368698][T15760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.416410][T15901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.435669][T15901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.576249][T15422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.650928][T15760] team0: Port device team_slave_0 added [ 875.663283][T15760] team0: Port device team_slave_1 added [ 875.715790][T15760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.723869][T15760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.750367][ T5282] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 875.759227][T15760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.770524][ T5307] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 875.822676][T15760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.859574][T15760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.887846][T15760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.924240][ T5307] usb 3-1: Using ep0 maxpacket: 16 [ 875.931091][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.942550][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.979350][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.995305][ T5282] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 876.009444][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.024771][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.043788][ T5307] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 876.092964][ T5282] usb 1-1: config 0 descriptor?? [ 876.120942][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.185469][ T5307] usb 3-1: config 0 descriptor?? [ 876.410313][T15760] hsr_slave_0: entered promiscuous mode [ 876.488223][T15904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.545704][T15760] hsr_slave_1: entered promiscuous mode [ 876.642064][T15760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.642325][T15904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.658601][T15760] Cannot create hsr debugfs directory [ 876.914817][ T5307] usbhid 3-1:0.0: can't add hid device: -71 [ 876.929269][ T5307] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 876.950988][ T5307] usb 3-1: USB disconnect, device number 104 [ 877.075758][T15422] bridge_slave_1: left allmulticast mode [ 877.083782][T15422] bridge_slave_1: left promiscuous mode [ 877.099041][T15422] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.125722][T15422] bridge_slave_0: left allmulticast mode [ 877.144105][T15422] bridge_slave_0: left promiscuous mode [ 877.164439][T15422] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.412865][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.475820][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.585673][ T4623] Bluetooth: hci6: command 0x0406 tx timeout [ 878.474946][ T5282] usbhid 1-1:0.0: can't add hid device: -71 [ 878.481288][ T5282] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 878.491545][ T5282] usb 1-1: USB disconnect, device number 83 [ 878.780289][T15422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.866462][T15422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.947503][T15422] bond0 (unregistering): Released all slaves [ 878.994292][ T5282] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 879.255206][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.280547][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 879.368423][ T5282] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 879.377798][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.396536][ T5282] usb 1-1: config 0 descriptor?? [ 879.826501][T15932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.905980][T15932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.937192][ T5282] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x5 [ 879.953630][ T5282] plantronics 0003:047F:FFFF.003B: collection stack underflow [ 879.999657][ T5282] plantronics 0003:047F:FFFF.003B: item 0 4 0 12 parsing failed [ 880.014589][ T5282] plantronics 0003:047F:FFFF.003B: parse failed [ 880.021032][ T5282] plantronics 0003:047F:FFFF.003B: probe with driver plantronics failed with error -22 [ 880.155703][ T5293] usb 1-1: USB disconnect, device number 84 [ 881.074149][T15422] hsr_slave_0: left promiscuous mode [ 881.245291][T15942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.456019][T15422] hsr_slave_1: left promiscuous mode [ 881.457669][T15942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.471232][T15422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.481983][T15422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.492282][T15422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.503168][T15422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.588123][T15422] veth1_macvtap: left promiscuous mode [ 881.593756][T15422] veth0_macvtap: left promiscuous mode [ 881.615859][T15942] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2125'. [ 881.617119][T15422] veth1_vlan: left promiscuous mode [ 881.644185][T15422] veth0_vlan: left promiscuous mode [ 881.652281][T15942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.724091][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 881.771461][T15942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.885335][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 881.892916][ T9] usb 1-1: config 53 has an invalid interface number: 240 but max is 0 [ 881.906248][ T9] usb 1-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 881.924859][ T9] usb 1-1: config 53 has no interface number 0 [ 881.944728][ T9] usb 1-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 881.975530][ T9] usb 1-1: config 53 interface 240 altsetting 0 endpoint 0x84 has invalid maxpacket 33307, setting to 1024 [ 882.009664][ T9] usb 1-1: config 53 interface 240 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 882.030444][ T9] usb 1-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 882.121211][ T9] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 882.130708][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.174573][ T9] usb 1-1: Product: syz [ 882.185491][ T9] usb 1-1: Manufacturer: syz [ 882.203716][ T9] usb 1-1: SerialNumber: syz [ 882.218046][T15945] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 884.246079][T15422] team0 (unregistering): Port device team_slave_1 removed [ 884.383292][T15952] loop7: detected capacity change from 0 to 16384 [ 884.481104][T15422] team0 (unregistering): Port device team_slave_0 removed [ 885.781235][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 885.781257][ T29] audit: type=1326 audit(1729689611.294:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe212d7dff9 code=0x7fc00000 [ 885.852687][T15944] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2126'. [ 886.035216][ T9] kvaser_usb 1-1:53.240: error -ENODEV: Cannot get usb endpoint(s) [ 886.073423][ T9] usb 1-1: USB disconnect, device number 85 [ 886.353111][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.369782][T15749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 886.445511][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.450909][T15749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 886.517024][T15749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 886.570029][T15749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 886.665536][ T5282] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 886.822584][T15749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.836746][ T5282] usb 3-1: device descriptor read/64, error -71 [ 886.927681][T15749] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.956433][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.963703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.126089][ T5282] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 887.177438][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.184674][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.284096][ T5282] usb 3-1: device descriptor read/64, error -71 [ 887.481571][T15749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 887.515889][ T5282] usb usb3-port1: attempt power cycle [ 887.525306][T15749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.766759][T15991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2136'. [ 887.802105][T15991] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 887.872461][T15749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.904376][ T5282] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 887.924550][T15760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 887.931345][ T5282] usb 3-1: device descriptor read/8, error -71 [ 887.982044][T15760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 888.052453][T15760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 888.107864][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 888.126795][T15760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 888.244098][ T5282] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 888.276029][ T5282] usb 3-1: device descriptor read/8, error -71 [ 888.367564][T15749] veth0_vlan: entered promiscuous mode [ 888.463280][T15760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.482673][T15760] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.523103][T15760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 888.533659][T15760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.565399][T15760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.606467][T15760] veth0_vlan: entered promiscuous mode [ 888.619184][T15760] veth1_vlan: entered promiscuous mode [ 888.646870][T15760] veth0_macvtap: entered promiscuous mode [ 888.657072][T15760] veth1_macvtap: entered promiscuous mode [ 888.673969][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.684584][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.694532][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.706459][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.716787][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.727447][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.737425][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.748028][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.758002][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.768594][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.778584][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.789202][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.799193][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.810462][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.820955][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.831568][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.841535][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.852223][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.863998][T15760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.874291][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.884956][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.894905][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.906011][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.916344][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.926926][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.936895][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.947799][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.957763][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.968392][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.978357][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.988873][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.998848][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.010919][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.021090][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.032112][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.042101][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.052673][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.062655][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.073208][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.084687][T15760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.095352][T15760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.104556][T15760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.114240][T15760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.122985][T15760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.200516][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.208655][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.222282][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.227851][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.230545][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.237264][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.266902][ T5282] usb usb3-port1: unable to enumerate USB device [ 889.267123][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.280453][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.440184][T15749] veth1_vlan: entered promiscuous mode [ 889.710011][T15749] veth0_macvtap: entered promiscuous mode [ 889.720374][T15749] veth1_macvtap: entered promiscuous mode [ 889.748117][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.791411][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.801669][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.812633][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.822700][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.834142][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.844536][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.855179][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.865309][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.875907][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.885906][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.892421][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'. [ 889.896435][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.896465][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.896486][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.896505][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.896523][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.896551][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.896569][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.896596][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.990179][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.003245][T15749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.016166][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.026783][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.037449][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.048688][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.056671][T16016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.059128][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.078061][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.088281][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.099220][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.109443][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.120291][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.130491][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.142143][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.152898][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.164120][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.174936][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.205065][T16021] FAULT_INJECTION: forcing a failure. [ 890.205065][T16021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.219232][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.239597][T16021] CPU: 0 UID: 0 PID: 16021 Comm: syz.0.2141 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 890.250475][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 890.260584][T16021] Call Trace: [ 890.263909][T16021] [ 890.266888][T16021] dump_stack_lvl+0x241/0x360 [ 890.271620][T16021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 890.276869][T16021] ? __pfx__printk+0x10/0x10 [ 890.281524][T16021] ? __pfx_lock_release+0x10/0x10 [ 890.284043][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.286597][T16021] ? __lock_acquire+0x1384/0x2050 [ 890.302142][T16021] should_fail_ex+0x3b0/0x4e0 [ 890.306891][T16021] _copy_from_user+0x2f/0xe0 [ 890.311552][T16021] kstrtouint_from_user+0xc6/0x190 [ 890.316786][T16021] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 890.322591][T16021] ? __pfx_lock_acquire+0x10/0x10 [ 890.327699][T16021] proc_fail_nth_write+0xaa/0x2d0 [ 890.332796][T16021] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 890.334259][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.338728][T16021] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 890.338781][T16021] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 890.338819][T16021] vfs_write+0x29c/0xc90 [ 890.338851][T16021] ? __pfx_vfs_write+0x10/0x10 [ 890.338895][T16021] ? __fget_files+0x3f3/0x470 [ 890.338931][T16021] ? fdget_pos+0x24e/0x320 [ 890.338962][T16021] ksys_write+0x183/0x2b0 [ 890.338990][T16021] ? __pfx_ksys_write+0x10/0x10 [ 890.339015][T16021] ? do_syscall_64+0x100/0x230 [ 890.339047][T16021] ? do_syscall_64+0xb6/0x230 [ 890.339077][T16021] do_syscall_64+0xf3/0x230 [ 890.339104][T16021] ? clear_bhb_loop+0x35/0x90 [ 890.339142][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.339180][T16021] RIP: 0033:0x7f70b277cadf [ 890.339204][T16021] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 890.339227][T16021] RSP: 002b:00007f70b3597030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 890.339259][T16021] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f70b277cadf [ 890.339278][T16021] RDX: 0000000000000001 RSI: 00007f70b35970a0 RDI: 0000000000000008 [ 890.339295][T16021] RBP: 00007f70b3597090 R08: 0000000000000000 R09: 0000000000000000 [ 890.339312][T16021] R10: 0000000020000080 R11: 0000000000000293 R12: 0000000000000001 [ 890.339330][T16021] R13: 0000000000000000 R14: 00007f70b2936058 R15: 00007f70b2a5fa28 [ 890.339365][T16021] [ 890.506460][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.518307][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.529338][T15749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.541097][T15749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.556758][T15749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.565324][T16016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.644576][ T5307] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 890.681286][T15749] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.727811][T15749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.739249][T15749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.751786][T15749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.784319][ T5307] usb 3-1: device descriptor read/64, error -71 [ 891.049039][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.058472][ T5307] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 891.066311][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.231583][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.244833][ T5307] usb 3-1: device descriptor read/64, error -71 [ 891.264568][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.354991][ T5307] usb usb3-port1: attempt power cycle [ 891.674062][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 891.714135][ T5307] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 891.756790][ T5307] usb 3-1: device descriptor read/8, error -71 [ 891.857117][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 891.883110][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.901540][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.911367][ T9] usb 5-1: Product: syz [ 891.915803][ T9] usb 5-1: Manufacturer: syz [ 891.920450][ T9] usb 5-1: SerialNumber: syz [ 891.949919][T16045] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 891.975591][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 892.036495][T16057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.093983][ T5307] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 892.123740][T16057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.137688][ T5307] usb 3-1: device descriptor read/8, error -71 [ 892.225695][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.255570][ T5307] usb usb3-port1: unable to enumerate USB device [ 892.285807][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.340517][ T5280] usb 5-1: USB disconnect, device number 13 [ 892.499930][T16067] FAULT_INJECTION: forcing a failure. [ 892.499930][T16067] name failslab, interval 1, probability 0, space 0, times 0 [ 892.512771][T16067] CPU: 1 UID: 0 PID: 16067 Comm: syz.0.2146 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 892.523590][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 892.533693][T16067] Call Trace: [ 892.537027][T16067] [ 892.539988][T16067] dump_stack_lvl+0x241/0x360 [ 892.544715][T16067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.549968][T16067] ? __pfx__printk+0x10/0x10 [ 892.554620][T16067] ? ref_tracker_alloc+0x332/0x490 [ 892.559790][T16067] should_fail_ex+0x3b0/0x4e0 [ 892.564526][T16067] ? skb_clone+0x20c/0x390 [ 892.568995][T16067] should_failslab+0xac/0x100 [ 892.573720][T16067] ? skb_clone+0x20c/0x390 [ 892.578182][T16067] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 892.583611][T16067] skb_clone+0x20c/0x390 [ 892.587922][T16067] __netlink_deliver_tap+0x3cc/0x7c0 [ 892.593249][T16067] ? netlink_deliver_tap+0x2e/0x1b0 [ 892.598481][T16067] netlink_deliver_tap+0x19d/0x1b0 [ 892.603616][T16067] netlink_unicast+0x7c4/0x990 [ 892.608416][T16067] ? __pfx_netlink_unicast+0x10/0x10 [ 892.613726][T16067] ? __virt_addr_valid+0x183/0x530 [ 892.618861][T16067] ? __check_object_size+0x48e/0x900 [ 892.624181][T16067] netlink_sendmsg+0x8e4/0xcb0 [ 892.628992][T16067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.634307][T16067] ? aa_sock_msg_perm+0x91/0x160 [ 892.639277][T16067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.644583][T16067] __sock_sendmsg+0x221/0x270 [ 892.649294][T16067] ____sys_sendmsg+0x52a/0x7e0 [ 892.654087][T16067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.659408][T16067] __sys_sendmsg+0x292/0x380 [ 892.664019][T16067] ? __pfx___sys_sendmsg+0x10/0x10 [ 892.669165][T16067] ? __pfx_vfs_write+0x10/0x10 [ 892.673990][T16067] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 892.680361][T16067] ? do_syscall_64+0x100/0x230 [ 892.685155][T16067] ? do_syscall_64+0xb6/0x230 [ 892.689861][T16067] do_syscall_64+0xf3/0x230 [ 892.694383][T16067] ? clear_bhb_loop+0x35/0x90 [ 892.699087][T16067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.705015][T16067] RIP: 0033:0x7f70b277dff9 [ 892.709451][T16067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.729086][T16067] RSP: 002b:00007f70b35b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.737609][T16067] RAX: ffffffffffffffda RBX: 00007f70b2935f80 RCX: 00007f70b277dff9 [ 892.745597][T16067] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 892.753580][T16067] RBP: 00007f70b35b8090 R08: 0000000000000000 R09: 0000000000000000 [ 892.761564][T16067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.769551][T16067] R13: 0000000000000000 R14: 00007f70b2935f80 R15: 00007f70b2a5fa28 [ 892.777564][T16067] [ 892.944287][ T5280] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 893.107899][ T5280] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 893.117654][ T5280] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 893.151285][ T5280] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 893.191778][ T5280] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.213589][ T5280] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 893.227070][ T5280] usb 5-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.242282][ T5280] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 893.254240][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 893.277524][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.341513][T16060] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 893.526346][ T9] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 893.564139][ T9] usb 1-1: config 0 has no interface number 0 [ 893.570322][ T9] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 893.581189][ T9] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 893.597683][ T9] usb 1-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 893.623687][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.647620][ T9] usb 1-1: Product: syz [ 893.651883][ T9] usb 1-1: Manufacturer: syz [ 893.683353][ T29] audit: type=1326 audit(1729689619.184:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.2.2150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x0 [ 893.716103][ T5280] usb 5-1: usb_control_msg returned -71 [ 893.732552][ T5280] usbtmc 5-1:16.0: can't read capabilities [ 893.741787][ T9] usb 1-1: SerialNumber: syz [ 893.746986][ T5280] usbtmc 5-1:16.0: Failed to submit iin_urb [ 893.763407][ T5280] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -90 [ 893.795668][ T9] usb 1-1: config 0 descriptor?? [ 893.805529][ T29] audit: type=1326 audit(1729689619.204:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.2.2150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc36bf7dff9 code=0x0 [ 893.806023][T16076] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 893.840086][ T9] HFC-S_USB 1-1:0.29: probe with driver HFC-S_USB failed with error -5 [ 893.871677][ T5280] usb 5-1: USB disconnect, device number 14 [ 894.071250][ T29] audit: type=1326 audit(1729689619.594:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16074 comm="syz.0.2147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70b277dff9 code=0x0 [ 894.477890][T16111] netlink: 'syz.2.2153': attribute type 3 has an invalid length. [ 894.490559][T16113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 894.494659][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 894.890975][T16125] fuse: Unknown parameter 'roktmode' [ 895.142117][T16136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.171858][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2155'. [ 895.229566][T16136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.555831][T16148] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 896.200838][T16163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.241252][T16163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.364027][ T5282] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 896.546015][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 896.576549][ T5282] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=d6.3f [ 896.598708][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.627244][ T5282] usb 3-1: Product: syz [ 896.646173][ T5282] usb 3-1: Manufacturer: syz [ 896.675363][ T5282] usb 3-1: SerialNumber: syz [ 896.715890][ T5282] usb 3-1: config 0 descriptor?? [ 896.950857][T16159] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 897.129604][ T5293] usb 3-1: USB disconnect, device number 113 [ 897.904455][ T30] INFO: task syz.3.1875:14648 blocked for more than 143 seconds. [ 897.928059][ T30] Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 897.974048][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 897.998206][ T30] task:syz.3.1875 state:D stack:25840 pid:14648 tgid:14648 ppid:13890 flags:0x00000004 [ 898.011159][ T30] Call Trace: [ 898.014700][ T30] [ 898.017847][ T30] __schedule+0x18af/0x4bd0 [ 898.025557][ T30] ? __pfx___schedule+0x10/0x10 [ 898.030595][ T30] ? __pfx_lock_release+0x10/0x10 [ 898.036068][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 898.042325][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 898.049053][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 898.079682][ T30] ? schedule+0x90/0x320 [ 898.214052][ T30] schedule+0x14b/0x320 [ 898.218466][ T30] ? down_read+0x6a5/0xa40 [ 898.234084][ T30] schedule_preempt_disabled+0x13/0x30 [ 898.255873][ T30] down_read+0x705/0xa40 [ 898.263578][ T30] ? __pfx_down_read+0x10/0x10 [ 898.284942][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 898.296319][ T30] filemap_fault+0xd54/0x1950 [ 898.338324][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 898.365769][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 898.370999][ T30] ? pte_alloc_one+0x442/0x5d0 [ 898.415437][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 898.431546][ T30] ? __pfx_validate_chain+0x10/0x10 [ 898.444754][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 898.462998][ T30] __do_fault+0x135/0x460 [ 898.485249][ T30] handle_pte_fault+0x1105/0x6800 [ 898.514744][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 898.547095][ T30] ? mark_lock+0x9a/0x360 [ 898.585915][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 898.592977][ T30] ? __lock_acquire+0x1384/0x2050 [ 898.615360][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 898.652082][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 898.671095][ T30] ? __thp_vma_allowable_orders+0x22c/0x9c0 [ 898.703841][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 898.724167][ T30] handle_mm_fault+0x1106/0x1bb0 [ 898.754235][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 898.759635][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 898.795618][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 898.810516][ T30] ? exc_page_fault+0x113/0x8c0 [ 898.845260][ T30] exc_page_fault+0x459/0x8c0 [ 898.863032][ T30] asm_exc_page_fault+0x26/0x30 [ 898.891051][ T30] RIP: 0033:0x7fc340a45163 [ 898.896907][ T30] RSP: 002b:00007fc340e5fb50 EFLAGS: 00010246 [ 898.903172][ T30] RAX: 0000000020000040 RBX: 0000000000000008 RCX: 0000000000000000 [ 898.911359][ T30] RDX: 0000000000010001 RSI: 0000000000000000 RDI: 00005555593343c8 [ 898.919554][ T30] RBP: 00007fc340e5fc68 R08: 0000000000000000 R09: 0000000000000000 [ 898.928275][ T30] R10: 0000000000000000 R11: 0000000000000002 R12: 00000000000b5588 [ 898.937874][ T30] R13: 00007fc340e5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 898.990373][ T30] [ 899.000106][ T30] [ 899.000106][ T30] Showing all locks held in the system: [ 899.057673][ T30] 3 locks held by kworker/u8:0/11: [ 899.103721][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 899.217558][ T30] #1: ffffc90000107d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 899.310079][ T30] #2: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: batadv_nc_worker+0xcb/0x610 [ 899.320996][ T30] 4 locks held by kworker/u8:1/12: [ 899.331362][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 899.342737][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 899.356826][ T30] #2: ffff88804c620768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 899.367253][ T30] #3: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 899.378917][ T30] 1 lock held by khungtaskd/30: [ 899.384908][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 899.395994][ T30] 2 locks held by getty/4983: [ 899.401605][ T30] #0: ffff88802e8820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 899.421085][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 899.432948][ T30] 2 locks held by kworker/u8:8/5852: [ 899.439366][ T30] #0: ffff88814769f148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 899.464140][ T30] #1: ffffc9000405fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 899.485312][ T30] 1 lock held by syz.4.1827/14265: [ 899.491625][ T30] 2 locks held by syz.3.1875/14648: [ 899.498037][ T30] #0: ffff88805eef7d18 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 899.515085][ T30] #1: ffff8880234914c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 899.527192][ T30] 1 lock held by syz.4.1920/14896: [ 899.533408][ T30] #0: ffff8880234914c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 899.545862][ T30] 1 lock held by syz.0.1992/15145: [ 899.551062][ T30] #0: ffff8880234914c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 899.564623][ T30] 1 lock held by syz.0.1992/15146: [ 899.569832][ T30] #0: ffff8880234914c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 899.582221][ T30] 1 lock held by syz.0.1992/15148: [ 899.588848][ T30] #0: ffff8880234914c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 899.601621][ T30] 2 locks held by vhost-16076/16092: [ 899.608118][ T30] #0: ffff88803f540258 (&vq->mutex){+.+.}-{3:3}, at: handle_rx+0x1c5/0x1fe0 [ 899.618118][ T30] #1: ffff8880234914c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 899.630589][ T30] 1 lock held by syz.0.2147/16097: [ 899.636769][ T30] #0: ffff8880234914c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 899.649228][ T30] 3 locks held by syz.4.2155/16124: [ 899.654605][ T30] #0: ffff88805f636208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 899.666901][ T30] #1: ffff888020e80258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1ec/0x880 [ 899.676522][ T30] #2: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 899.688774][ T30] 1 lock held by syz.2.2163/16184: [ 899.695185][ T30] #0: ffffffff8e93d280 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 899.707570][ T30] [ 899.710705][ T30] ============================================= [ 899.710705][ T30] [ 899.720661][ T30] NMI backtrace for cpu 1 [ 899.725040][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 899.735569][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 899.745649][ T30] Call Trace: [ 899.748973][ T30] [ 899.751918][ T30] dump_stack_lvl+0x241/0x360 [ 899.756618][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.761844][ T30] ? __pfx__printk+0x10/0x10 [ 899.766461][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 899.771420][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 899.776927][ T30] ? _printk+0xd5/0x120 [ 899.781132][ T30] ? __pfx__printk+0x10/0x10 [ 899.785785][ T30] ? __wake_up_klogd+0xcc/0x110 [ 899.790685][ T30] ? __pfx__printk+0x10/0x10 [ 899.795323][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 899.800368][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 899.806382][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 899.812411][ T30] watchdog+0xff4/0x1040 [ 899.816711][ T30] ? watchdog+0x1ea/0x1040 [ 899.821169][ T30] ? __pfx_watchdog+0x10/0x10 [ 899.825880][ T30] kthread+0x2f0/0x390 [ 899.829986][ T30] ? __pfx_watchdog+0x10/0x10 [ 899.834702][ T30] ? __pfx_kthread+0x10/0x10 [ 899.839301][ T30] ret_from_fork+0x4b/0x80 [ 899.843731][ T30] ? __pfx_kthread+0x10/0x10 [ 899.848337][ T30] ret_from_fork_asm+0x1a/0x30 [ 899.853146][ T30] [ 899.857302][ T30] Sending NMI from CPU 1 to CPUs 0: [ 899.863785][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 899.880115][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 899.887044][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 899.897595][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 899.907691][ T30] Call Trace: [ 899.910993][ T30] [ 899.913941][ T30] dump_stack_lvl+0x241/0x360 [ 899.918668][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.923891][ T30] ? __pfx__printk+0x10/0x10 [ 899.928524][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 899.934568][ T30] ? vscnprintf+0x5d/0x90 [ 899.938951][ T30] panic+0x349/0x880 [ 899.942886][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 899.949082][ T30] ? __pfx_panic+0x10/0x10 [ 899.953531][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 899.958929][ T30] ? __irq_work_queue_local+0x137/0x410 [ 899.964512][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 899.969948][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 899.976131][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 899.982328][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 899.988540][ T30] watchdog+0x1033/0x1040 [ 899.992928][ T30] ? watchdog+0x1ea/0x1040 [ 899.997400][ T30] ? __pfx_watchdog+0x10/0x10 [ 900.002122][ T30] kthread+0x2f0/0x390 [ 900.006212][ T30] ? __pfx_watchdog+0x10/0x10 [ 900.010943][ T30] ? __pfx_kthread+0x10/0x10 [ 900.015581][ T30] ret_from_fork+0x4b/0x80 [ 900.020030][ T30] ? __pfx_kthread+0x10/0x10 [ 900.024653][ T30] ret_from_fork_asm+0x1a/0x30 [ 900.029445][ T30] [ 900.032848][ T30] Kernel Offset: disabled [ 900.037184][ T30] Rebooting in 86400 seconds..