last executing test programs: 12.046216642s ago: executing program 1 (id=3134): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010100000009040000120206000005240600000524ab"], 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x401040, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd7) syz_usb_connect(0x1, 0xf40, &(0x7f0000000cc0)={{0x12, 0x1, 0x300, 0x10, 0xaf, 0x7c, 0x10, 0xc8e, 0x6000, 0x81ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2e, 0x4, 0x7, 0x5, 0x40, 0xb4, [{{0x9, 0x4, 0xdd, 0x3, 0x3, 0x5e, 0x72, 0x33, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x67}}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x45}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x1, "55960bf0"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x5, 0x5, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x506, 0x2, 0x4}]}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0x4, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x52, 0x8}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x3, 0xd2, 0xe6}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x76, 0x9, 0xf, 0x72, 0x1c, 0xce, 0xfb, [], [{{0x9, 0x5, 0xa, 0x8, 0x240, 0x5, 0x43, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7, 0x4, 0x23, [@generic={0x72, 0x24, "5ce72da83f65d4a0aef3bd41716905132477ad76e9f9e7a96de5fd70f71aadd856859e5e376b05ed3d2506f5080cb280590516ef16a9507f76182da4f1cfe2071c28bbd745365aab82bab1283f68f3b2b60e4c62ecc3d5e2df6582260170fcd688b5be22f557343a9770cf9ef033d965"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x40, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x61e1}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf5, 0xf7e3}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x6, 0x9, 0x1, [@generic={0xd1, 0x3, "5823629a129c6307d5325a35f653d3e61337667143950ebc14d0e14caba28fcba460bca25a3b3e26f093c5473314f464d5aa7679995248b02cfa354e12389e2818e9fb0710ecddc67afbf3d580f40118895135a6e0f7c2fc35c23a627d0222c9da10ca7bffeabd6513b14eeed0d7cba5a68e95d2b3120241f75f843753295b5651e29b07d94e2c774087dd8dc0fe857f8be2fa37903867b01300564e4c339bb1831eb5bf47ffe5ba344b07f16db601ee00e4d89b42d80bc4521c35f2d8e5b6ce6b64cee76840d480631ba133d42e5b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x3, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x46, 0x1c, 0xde, [@generic={0x41, 0x30, "ee2c620137fbb71b0cd9f808863df1fff241a906a8a1b859b4b936bdeb3fada0bb196a067982cd57626e1fcbd1574ecfa8bfe09b08ec65f9e9a46cae8f734a"}, @generic={0xf0, 0x21, "e83bd388c027117bcf683d0fc35a1bbd016e29dce194bc37e6512a2b2fe6e92e673e7051172d9618f5b35c09dda080f0d03f770dd1e277a5cf196f9ee9d714715324d5e859d47975e9f9de6fb559257ee0564a6d76cb5c0e6366af29b35d71a3d9a9e6f870a66baab6f392eea9af5db378fc4a6f4a24ad21b1a3c909b6c99fc796c6d53cdeb0691e9f55bfce4df14c4db793b1ed34189566ede69fa5d7f89d07042c2134ebdd0d1837f22e30f4da2ad8637c7041012d854851e4023720b313c65b6b1a2c68022f511c8a91ab49d1d48b7cb7f43131c763e4228d4573d9db841ed27734fee20cd0edadb1ac1d2259"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x9, 0x7, 0xb, [@generic={0xb8, 0xa, "8bcb9f2c21e3b4d50ba663ff562063f115638db18c0b35d1389adb58291b37409fdc986a00299e29e2902383d9935670c5408f9722171e86c6db6cd4ac1277ee55469ec3699ff475d3b6448266a7134eb721f01404602ec27568f12013e1a8f702053d4952427383051f092f318cea747681cafa2c1ee4b2ea0a7a1cb720ed14c96187bffc6528659e3a7a0399f83dba6d949fed19f130a9c5f164f7f32d8fdfe9e3f0a050abf48178c6af94107b5eac92d8975f80b0"}, @generic={0xd4, 0x4, "1b5fb96e1e4edbdff809b062bfd74332d661079deb459b0f3bc525ea998a481f818e52f45b40a9f10555d145af8178078b1228efc6f5d18d7135d17a6ba6fe6ddf22deaa285228d5ccd3ba146042ec4869866283d3266912e3a717b4ac0ca10f7a17ab4c2079f13aabf1eaa2a055daf67299afbfa86ac24ff946e8c22b2b6f3f8c3f1432ef1e0a6c346ed5a29bd90189fbb2c2de07c6d5e46e5cb2e37a9f9e24a88178930385d13c4780eca098d7094148e767541d6adf6b3726df0efda9b0215d29eb8352ac72d2edfe2188f45131297312"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x3, 0x97, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x7f, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x445a}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xab}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x1, 0x2, 0xd}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x5, 0x3, 0x5, [@generic={0x10, 0x3, "4adee75d9d08c5f981f4f2439e55"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xec, 0x1}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x7, 0x2, 0x81, [@generic={0xb, 0xb, "be1d947d941ab60392"}, @generic={0x74, 0x23, "74c49159b4d98e5ca064a818c959887523fa2de722d98791577b3c6791b6f6ef10cc78e9ca00490fb8a3128e0a3e032ba5d97e7e67081c97a1ebdc386adbc1fc4fdaf1544c1ba2f0e901d4bcdb42bcb54934e05e1d8843814aaa624b56feb2e1eaf50caac212c9c2b5bfb62f0d909f2731e4"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x9, 0x8, 0x3, [@generic={0xde, 0xc, "82a2b9243da164edd9ccbe67da50aac4145a5a8515d7a7114d34e6a7e9d81d4f33b9a24d8a3d000d061b33644b08240fea81e0bc5577666eb37a8424f1daaae1c2b4fb2d237f759102750a5188743b8c30d12eaf2285df3919c00a057f36c93cf8f823bb1dd3b865da31a76b6a806c8dc37ddce22e0216c947a655589925e1f9ff2e5775685e2a5f5bdba7604e4a086989990653262f7b24bedf25b97bc04c13f9d66a982119f9ebf9f65e5b6e0a1111a55e7606c648c3490624ee2d6d6f22c8ef76d510f4211374e7a68efd17eebb8302a22b7817aa6283f751320a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1266}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x9b, 0x85}}]}}, {{0x9, 0x4, 0x87, 0x0, 0xf, 0x6f, 0xc1, 0x86, 0xd7, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0xfa4a, 0xb}, @as_header={0x7, 0x24, 0x1, 0x9d}, @as_header={0x7, 0x24, 0x1, 0x72, 0x5, 0x5}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x2, 0x4, 0x2, "01e8b49ec7aba979"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x10, 0x6, 0x5, "2eae14dcdfcc0fea"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x8, 0x7, "5a9314"}]}, @generic={0xed, 0x23, "f61d790288a52b5b6108dd034f556c6f9f09a232007b7dc90532b058ca2b3d402f0320121ca3a5db2abccf92e6c915ad47211ae9a4fc14a44cc0702d3edbd12ef91a8a10b1a9ae3373a0d07d65466441b5fc53b2c7695315446ded330ce288f9152e4f5ef046a54f90a3b480c47da4569da27b61c2fb69f843e8d1d7f357d8509ce3f8c57adce805ea5326dd428a69f5a54e97fdb09cad3673dcf876e461b0714cdf8758eed640f14c58fac227d00671e5e41096d7d8cb58a37194dec592f5110e53114f19486a3de48b25b5abcec7ddded3e627171f9fd2d181cc412c472b276737e2d88fd791daf9326a"}], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x6, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xb8a9}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x2, 0x31, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0x7, 0x80}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x3, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0xb}, @generic={0x6c, 0x1, "34d316240ba533f1347cdc34d7a87e69f87c24ac05aa3e2a39a5141d239bba297776f06fe0b523615b22ba2c107fbcc601519a613dbd52f074baaebca98490b0d9ee8aab9560002619bbc2b321c0584b02379b092b7c432a4ead8f0870e537b1bfb6aa3676c7feac3357"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x30, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfa}]}}, {{0x9, 0x5, 0x4, 0x9, 0x0, 0x0, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x374}, @generic={0xf7, 0xd, "f880e55bd691592ce633b81a184039ae87cf138d983a33df196916f77aa4728ac00a4bdb20fc54f9701147e2bee4c8cdb9d9a69204fa427a3be934654c2eeb1659bf829726d92000ab95d057c7d4e0b58505b3040fa27faab4d659687cb25d5da7b695d94592a11381d42c93d1b304887e65ea794099043e8bb6fe999a354ba6d8b3b7074623746921578390470e980db6b94b042e1a9432584540a1c1adb0c300dac46263524b46b95cbf0e382849fd2e203adfc53905ce85ff8d09405180f3a25433cf295b7ae5d0984177adcf771af2e6c5eb28f91e48ca8f280abeeefb2780726ebe045757682d87eff545c317691347812d1b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x2, 0x61, 0x5, [@generic={0x8, 0x9, "cbd4366941bc"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x3}]}}, {{0x9, 0x5, 0x2, 0x3, 0x0, 0x7f, 0x0, 0x7, [@generic={0xd3, 0x23, "5126a63a7a8a3614360a5ec35bc26764ee63318461480900a9f5bfaabc709967567570acbdf5af7abe473af5e402ec5c1b64460f244acffa80b6ee4e3017156dbf5b2a14ef1e46913c22ea6e15f04f7f1020fbd0d66a35ad98e4bea9fe543af6a1785bc627d102c4a44a7cfd36cda2e05f32cb601c8257f722e3463f189e1a1d588a4af3a386403ee3a9237d487141e244b81ca219e8aec925fa87fbc067e605871a671d19cbc24791bfee7c5bb3b30a47d5af7aa825c09b2accf78c37548aa15056c8e77d7663feab8c2d1c12d7c9519b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x55, 0x3ff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x3, 0x8, 0x9, [@generic={0xce, 0xb, "9d8861435ca295a82ac7e572c3798362029e6199f0ac96f15afba8a95d93b5679a13353b64f2a4f4a196ce616c7453e41c25103e05dfea4887c34399809224abca9412b2337da503fe07619d6d3c0fe8cd7b90a6b7e77d256b9dfaf0f054b0edd4e904d49cecb7a0139e05bbf1fcf964a34837ecbda238e32801eb936c23580dd3a53490ffd5fed8f6e6f16ef8b51bfb46ab3f8de8ed1da7d4029811b391d18e82dd65c1ba7f12ea9c6e6ba2e7e973fc40b39a6f9f9276a68122eca7b3ad8e8096cea8f3ffed120f0d3d45c0"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa7, 0x4}]}}, {{0x9, 0x5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x0, [@generic={0x21, 0xd, "8f14746a5c935ab8f25d1560531377cf274330593220eb91995797427e3623"}, @generic={0x1d, 0xd, "4c54159a22c13ab74feeb531f2156985350bcb203f6e4bb7797f6a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x2, 0x4d, 0xeb}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x7, 0x81, 0x3}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x8, 0xfb, 0x6}}, {{0x9, 0x5, 0x9, 0x4c8d1c0f43aefcb3, 0x10, 0x2, 0x7, 0x61, [@generic={0xaa, 0x3a, "3238ccbcae1d604a8658ee526fd12fe54d9a79920bb15dce7f17e4a12c8badca5c3ff8bbe0a2f8847f20347e7efd961a24d312169f443af3b2f508127ea70cf613e0368c7bc380f29a3e847c51bb31d074e8bb3f64d762c15e32b819d2c4225af5686ff3702ff35670428e1f973093d530c3eac2d9bdaf86d5f351771d10ecd3166662c02b83f21471fc54e6cb3ef075e91ac09aca8baf47b1bde0ade966372848d342c79b3bf2b0"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x36, 0x7, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5}, @generic={0x96, 0x21, "b6ac1dd9771509e67a43aeda642bd65285fb879a2541b8d0f738337d09f275976c879a94f2cda6caa13081d7a9640c8a1341dc7016a6327e5f4d0a6499343a3341d163b316271b36ff26e12edde2ab1eeebfc6f5247eb807cb86c0a41fdb099ba5f5f6248db54a3bd4cded06c0c1be79d0948be9f0760c5a8a98b9e9270fa4f685b51e0602f6955b2311bd60525ebcc206431452"}]}}]}}, {{0x9, 0x4, 0x5, 0x81, 0xd, 0xdc, 0xca, 0x86, 0x5, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xea, 0x3, 0xfc, 0xbc, "e7d8af62e59a"}, @as_header={0x7, 0x24, 0x1, 0xa6, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0xd, 0x6, 0x3}]}], [{{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x4, 0xd, 0x9}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x81, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0xfa, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2}]}}, {{0x9, 0x5, 0x9, 0xc, 0x35460a3acdf8e7df, 0x5, 0x7, 0x26}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xf8, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x75, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0xb3, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xbd, 0x9}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x3, 0x8, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0xd}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x1, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe9, 0x29}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0xf9, 0x0, [@generic={0xdf, 0x9, "823c207b27de61b096bb8b94924900e58beb272064dadabd4b6d8cd1e91a2318fbcf019a8b3088b38968256f73945b5744931a034c5423f3de813ca08129cf8e3edaf8d1ce0352fc350dce4304f5cb9cbc7ae58fa1d697358ee50f7878092bf8ce945d3de2c564f68a035bd95dad4e18374e0eae672795a40bff3741f91ab21555f5da719f8ec8dc13efe3248d4ed63a8eaac679624a0202c8e67f5df0d378e4b29cccb5e246d98cc63bc8e7f5ee976105f3956387bf9dac5295a0bc7796b6be5818a366f90cb8477a3f22ad67f8dbcbfdeedcc91c016ac9ec7661b292"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xcc, 0x6, 0x2}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x1, 0xa0, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xd6}, @generic={0x65, 0xa, "c5bfeef81d9e9b26ef7226ed87b86d5a9230096a66079b78c32565cdf472956966207415721c9467e4720dfab34777462dcfb5f4d8f7ffa8a7c575e2a7cd7348ba026a455bfba0939545101843f26455ede3f3abe8b43b3456450be3d628dddafb667a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x9, 0x9, 0x81}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x1, 0x3, 0x6, 0x8, 0x42}, 0x26, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0x2, 0x6, 0x40, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x10, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x4, 0x40, 0x9f17}]}, 0x5, [{0x17, &(0x7f0000000200)=@string={0x17, 0x3, "f4ae18575d9704ddfa7bcc5a053798b3389600d934"}}, {0x47, &(0x7f0000000240)=@string={0x47, 0x3, "4433b3f0d177aa187118b49cb74dafce0701d6e030356bdd46a62901ddcef70eeb797c1279161ba9026dd983b738a9b492d14b8deab58805371db2f3c5e3de9bed239b7145"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xc7, &(0x7f0000000400)=ANY=[@ANYBLOB="c7039800dda447d7b5a4e20b7451252f3d3909225d523d1da33393a2054eec73876db624d769f3d0717bad89a3dbb9c461ced5baec2a7c956a31884d25eaccd890b0dc3c22684f2119198c924a2a35de60899f7d98761c00ccc36ac360c6877b8b74531b3a4bc2f0d9477cb716d418d5558102e3ba0a97d3f1f08b521168328abf5f0b895aa04b6ba8f2f8ee26e80a8a44a5890103da946f55670e4662590e8783cc4b205cce8869e8688d45973bcd832c029ff0f36cf358c082b43e753929d5bc801f282b218f"]}, {0x5b, &(0x7f0000000300)=@string={0x5b, 0x3, "b77d62763ca8eba69dfcd0a25b5965fe1483940dd86174f214f5d59f7be89e740243e9d7acbe27af65b2715dc383b87e94f8219598d374e52344180a38477a6ee97e75670843ae94a170398de8cde7c39f583ab63ce52fbe5d"}}]}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x0, 0x2153140, 0x4, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xf7fa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7b, 0x20000006, 0x5, 0x5, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x4, 0x9, 0x1, 0x4, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x10001, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x10001, 0x4006, 0x6, 0x3, 0x0, 0x4, 0x8, 0x400, 0x280, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x3f], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffa, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a78, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x2, 0xd, 0x4e0, 0x2, 0x84, 0xb, 0x4, 0x9, 0x8, 0x9, 0x0, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6bc, 0xbc45, 0x48c93690, 0x10042, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x10000000, 0x7, 0xb, 0x4, 0x9, 0x6, 0x0, 0x1ed, 0x5, 0x7, 0x6, 0x3, 0x9, 0x3e7, 0xb, 0x6, 0x4, 0x2, 0xffffffff, 0x28000008, 0x4, 0x6d02, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xa, 0xac6, 0xbf, 0x2, 0x3, 0xc3, 0x12b, 0x4, 0x1, 0x10000, 0x0, 0x5, 0x1c, 0x7fff, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x80007, 0xb, 0x5, 0x934, 0x2, 0x2, 0x0, 0x9, 0xce7, 0x9, 0x2, 0x57, 0x45, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0xfffffff7, 0x1, 0x2, 0x5, 0xe6, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x7, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d68f, 0x5, 0xf3d, 0x7, 0x1, 0x6c1b, 0x1, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1001, 0x1004]}, 0x45c) socket$inet6(0xa, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x4, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x7, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffff", 0x42}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x40585414) syz_emit_ethernet(0x39, &(0x7f0000000200)={@broadcast, @random="67eaa8fce250", @void, {@arp={0x806, @generic={0x7, 0x9200, 0x6, 0xe, 0x4, @random="733e47f7b736", "6672cd4ee318328e806e0264395f", @empty, "42bd7f4f1b9573f4f9"}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x511905) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[]) close(0x3) 8.853065321s ago: executing program 4 (id=3140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0xffffffff}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0xffffffffffffe000, 0x0, &(0x7f0000000000), 0x1b2, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x6, 0x8001) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000300)="cd4c", 0x2}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r4, 0x4b48, &(0x7f0000003d40)=""/175) unshare(0x22020400) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x480, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000000)={0xfffffffc, "55733df6be7ed73e723491d394171e3fbb234e5e92e09d668f329eee56b0b0e3", 0x3, 0x1}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000240)=0x4418, 0x4) 8.290162457s ago: executing program 4 (id=3142): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000020240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="010000000000a30000001200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000500e400000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 7.936139236s ago: executing program 2 (id=3143): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7.757579148s ago: executing program 0 (id=3145): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) clock_getres(0x8, &(0x7f000000d340)) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000440)="0f", 0x1}], 0x1) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0xa, @pix={0x5, 0x0, 0x47314356, 0x3, 0x81, 0x6, 0x8, 0x7, 0x0, 0x3}}) 7.404187699s ago: executing program 4 (id=3146): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="6d14e583656bbef6f76d07534c2a44cd72f4b9507088ecb52a7c34391365025442d7efa57932bc1e787b64c24ca69a764d4afbfba2d98b5fa54bc69ac72942df83015b00902a", 0x46, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002"], 0xa8}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) socket(0x10, 0x3, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000180)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) syz_open_procfs(0x0, &(0x7f0000000240)='oom_score\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 6.607461865s ago: executing program 0 (id=3148): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.390903145s ago: executing program 2 (id=3149): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x28, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x0) 6.357100155s ago: executing program 1 (id=3150): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.35555039s ago: executing program 2 (id=3152): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=""/141, 0x1019000, 0x800, 0x10001, 0x1}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"1ae30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 3.915045538s ago: executing program 1 (id=3154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) connect$netlink(0xffffffffffffffff, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c000380080100"], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x4000005, 0x3, 0x1c, 0x0, '/sys/kernel/debug/uync/i?\xbfi6'}}, 0x45) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@fallback=r2, 0xffffffffffffffff, 0x2c, 0x201c, 0x0, @value}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r6, &(0x7f00000000c0)=r5, 0x12) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 3.852255772s ago: executing program 3 (id=3155): r0 = syz_clone(0x41100000, &(0x7f0000000100)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001100)="1daedf1f3f6358a38b7ba85d7ef1ddd85903040b01431e99d22a1c5fce3122707ed103bcbdd2dc0d9a764dbd9fea18811a83759c6016489684c00f83b0ab966e28e92c14a75cfeb5bede7b4f44efab27a0ba52fc9ae7a25fba663d5594a68d513f1f14fa2f93a413e3b97fe5ebe033095b215f0a20c3c58c80fef07da20c5d05394316d530c3502652a2878b0d70819f31889aad96146d70668c27c7b5e551e56b41ce07e592776f9e1d356b536fa3ba84647d67eee186b6c9e327f4408d2f5d2af31d319442212d722ccb36a7e48dacb66f5ac9ac0a340b80b8ee4fbf6fad1704de384cd2e4a2090c") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000001200)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/igmp\x00') getdents(r1, 0x0, 0x3b) 3.696639498s ago: executing program 4 (id=3156): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000020240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="010000000000a30000001200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000500e400000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3.49828642s ago: executing program 0 (id=3157): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r0 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000005700)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 3.314465312s ago: executing program 4 (id=3158): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="6d14e583656bbef6f76d07534c2a44cd72f4b9507088ecb52a7c34391365025442d7efa57932bc1e787b64c24ca69a764d4afbfba2d98b5fa54bc69ac72942df83015b00902a", 0x46, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x2, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) socket(0x10, 0x3, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000180)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) syz_open_procfs(0x0, &(0x7f0000000240)='oom_score\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3.124034497s ago: executing program 3 (id=3159): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x10}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.123743992s ago: executing program 2 (id=3160): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.902532053s ago: executing program 3 (id=3161): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xf7fa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7b, 0x20000006, 0x5, 0x5, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x4, 0x9, 0x1, 0x4, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x10001, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x10001, 0x4006, 0x6, 0x3, 0x0, 0x4, 0x8, 0x400, 0x280, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x3f], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffa, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a78, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x2, 0xd, 0x4e0, 0x2, 0x84, 0xb, 0x4, 0x9, 0x8, 0x9, 0x0, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6bc, 0xbc45, 0x48c93690, 0x10042, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x10000000, 0x7, 0xb, 0x4, 0x9, 0x6, 0x0, 0x1ed, 0x5, 0x7, 0x6, 0x3, 0x9, 0x3e7, 0xb, 0x6, 0x4, 0x2, 0xffffffff, 0x28000008, 0x4, 0x6d02, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xa, 0xac6, 0xbf, 0x2, 0x3, 0xc3, 0x12b, 0x4, 0x1, 0x10000, 0x0, 0x5, 0x1c, 0x7fff, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x80007, 0xb, 0x5, 0x934, 0x2, 0x2, 0x0, 0x9, 0xce7, 0x9, 0x2, 0x57, 0x45, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0xfffffff7, 0x1, 0x2, 0x5, 0xe6, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x7, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d68f, 0x5, 0xf3d, 0x7, 0x1, 0x6c1b, 0x1, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1001, 0x1004]}, 0x45c) socket$inet6(0xa, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x4, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x7, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffff", 0x42}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x40585414) syz_emit_ethernet(0x39, &(0x7f0000000200)={@broadcast, @random="67eaa8fce250", @void, {@arp={0x806, @generic={0x7, 0x9200, 0x6, 0xe, 0x4, @random="733e47f7b736", "6672cd4ee318328e806e0264395f", @empty, "42bd7f4f1b9573f4f9"}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x511905) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[]) close(0x3) 2.506627832s ago: executing program 0 (id=3162): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x5, 0x7, {{0x19, 0x4, 0x0, 0x8, 0x64, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xcf, 0x3, 0x2}, @lsrr={0x83, 0x3, 0x16}, @timestamp_prespec={0x44, 0xc, 0x37, 0x3, 0x3, [{@local, 0x7ff}]}, @cipso={0x86, 0x32, 0x2, [{0x2, 0x5, "929fc1"}, {0x0, 0x2}, {0x6, 0x7, "771db60982"}, {0x9dcb866fe9bebcb8, 0xf, "2f6ab800a9d99aea8b40b47944"}, {0x2, 0x6, "1cdec8e2"}, {0x5, 0x9, "fcffdb3d5e5a8d"}]}, @generic={0x88, 0x9, "04dc5383cc31f5"}, @noop]}}}}}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@o_path={0x0, 0x0, 0x10, r1}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000019180)={@map=r4, 0x12, 0x0, 0x0, &(0x7f0000019080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000190c0)=[0x0], &(0x7f0000019100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019140)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r2, 0xffffffffffffffff, 0x1a, 0x9, 0xffffffffffffffff, @void, @value=r3, @void, @void, r5}, 0x20) getdents(0xffffffffffffffff, &(0x7f00000002c0)=""/247, 0xf7) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)) epoll_create1(0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x100) r9 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r9, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0) 2.009074166s ago: executing program 0 (id=3163): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x80080, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) (async) syz_clone(0x80080, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 1.051947284s ago: executing program 0 (id=3164): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) unshare(0xc040400) fcntl$notify(r0, 0x402, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe0001) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x40042, 0x101) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0x75f, 0x103382) sendfile(r4, r4, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r6, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fchdir(0xffffffffffffffff) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x1) 904.846732ms ago: executing program 2 (id=3165): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44048010) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @mcast1, 0xf80}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 790.069383ms ago: executing program 3 (id=3166): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="ab99b27c8c7d0c3f3514a7514e9b448b7c4b410f1bd968182973ee1913d00d4c429c0e7ef52e7247ed8bf4bee1f0e7ac79f9", 0x32}], 0x1}, 0x20000010) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8) 500.110444ms ago: executing program 2 (id=3167): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 476.155948ms ago: executing program 3 (id=3168): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000020240)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000a30000001200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000500e400000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 357.862485ms ago: executing program 4 (id=3169): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xd8, 0x0, 0x5b, 0xb}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x4000, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) 303.332185ms ago: executing program 1 (id=3170): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x4}, {0x9, 0x1003fd}, 0xffffffff, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x34}}, 0x0) 231.268535ms ago: executing program 3 (id=3171): r0 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) mprotect(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x5) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000140)='-3', 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x3a, r2, &(0x7f0000000540)="6ea1c80a53631346923485ba1ab3431887897edae068bf21189a818476a6970bb41548cc6d664acdc4bcf304ad5366006aa50d078fee85666b52c7be8eb16cded70ad85996f5acac92d2e9cf171d3c7d2d6ef6deafa5fa06ee4eb01c7e612570cbab3ea3a122149266e07491b0210b90f68cf9a0e0ec05b6d6f95470bcb43ebd3d0d693b8f1434ddf65bce4630418c0e3bc4cc570996c0", 0x97, 0x7, 0x0, 0x3}]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x680d, 0x0, 0x4002, 0xbfdffffc}, &(0x7f0000000340), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) shmget(0x2, 0x2000, 0x2, &(0x7f00005d4000/0x2000)=nil) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff00"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="0f20c035040000000f22c03e0f32b8010000000f01c1660f56b7e4360000674413150f8000000f01c30f202266b838008ee0410f381cad6ff65f5567f2676536410f07", 0x43}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x5, &(0x7f0000001080)=0xffffffff, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket(0x18, 0x803, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 0s ago: executing program 1 (id=3172): unshare(0xc040400) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x688200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x2, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000180)=""/135, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="080001"], 0x20}}, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): fail, usb_gadget_register_driver returned -16 [ 625.588154][T13259] netlink: 'syz.1.2525': attribute type 3 has an invalid length. [ 625.607475][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 625.893061][T13265] sit0: left promiscuous mode [ 626.229451][ T5888] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 626.390658][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 626.427271][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.444840][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.468022][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 626.493290][ T5888] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 626.503077][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.518183][ T5888] usb 4-1: config 0 descriptor?? [ 626.604678][ T9] usb 5-1: USB disconnect, device number 65 [ 626.959088][T13269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.967922][T13269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.985000][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 626.993390][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 627.023467][ T5888] usb 4-1: USB disconnect, device number 72 [ 627.268920][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 627.438846][ T9] usb 5-1: config 0 has no interfaces? [ 627.464739][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.486212][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.506944][ T9] usb 5-1: Product: syz [ 627.570872][ T9] usb 5-1: Manufacturer: syz [ 627.575519][ T9] usb 5-1: SerialNumber: syz [ 627.614481][ T9] usb 5-1: config 0 descriptor?? [ 627.881528][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 628.369266][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 628.541000][ T9] usb 4-1: config 0 has no interfaces? [ 628.552817][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 628.562247][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.570473][ T9] usb 4-1: Product: syz [ 628.576546][ T9] usb 4-1: Manufacturer: syz [ 628.588998][ T9] usb 4-1: SerialNumber: syz [ 628.607451][ T9] usb 4-1: config 0 descriptor?? [ 629.783337][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 630.140183][ T3407] usb 5-1: USB disconnect, device number 66 [ 630.676466][T13321] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2550'. [ 630.897384][T13325] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 630.923801][T13325] bridge_slave_0: default FDB implementation only supports local addresses [ 631.054806][T10538] usb 4-1: USB disconnect, device number 73 [ 631.117571][T13328] tipc: Enabling of bearer rejected, failed to enable media [ 632.436795][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 633.064905][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 633.348305][T13360] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2562'. [ 633.358513][T13360] netlink: 'syz.3.2562': attribute type 10 has an invalid length. [ 633.366910][T13360] batadv0: left promiscuous mode [ 633.374839][T13360] batadv0: left allmulticast mode [ 633.385093][T13360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.417712][T13360] batadv0: entered promiscuous mode [ 633.439274][T13360] batadv0: entered allmulticast mode [ 633.465053][T13360] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 633.477343][T13360] team0: Failed to send options change via netlink (err -105) [ 633.486430][T13360] team0: Port device batadv0 added [ 633.680906][T13367] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 634.178811][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 634.327071][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'. [ 634.384094][ T9] usb 5-1: config 0 has no interfaces? [ 634.396187][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 634.427368][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.528323][ T9] usb 5-1: Product: syz [ 634.569969][ T9] usb 5-1: Manufacturer: syz [ 634.672446][ T9] usb 5-1: SerialNumber: syz [ 634.740514][ T9] usb 5-1: config 0 descriptor?? [ 635.012898][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 635.163644][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 635.538133][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 636.837334][ T5893] usb 5-1: USB disconnect, device number 67 [ 636.892991][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2578'. [ 637.039261][T10538] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 637.199233][T10538] usb 4-1: Using ep0 maxpacket: 32 [ 637.210671][T10538] usb 4-1: unable to get BOS descriptor or descriptor too short [ 637.224104][T10538] usb 4-1: config 7 has an invalid interface number: 29 but max is 1 [ 637.233000][T10538] usb 4-1: config 7 has an invalid interface number: 29 but max is 1 [ 637.245762][T10538] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 637.273299][T10538] usb 4-1: config 7 has no interface number 0 [ 637.292332][T10538] usb 4-1: config 7 interface 29 has no altsetting 0 [ 637.311686][T10538] usb 4-1: config 7 interface 29 has no altsetting 1 [ 637.336769][T10538] usb 4-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=5e.f0 [ 637.347484][T10538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.403917][ T5893] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 637.417894][T10538] usb 4-1: Product: syz [ 637.429848][T10538] usb 4-1: Manufacturer: syz [ 637.444879][T10538] usb 4-1: SerialNumber: syz [ 637.658515][ T5893] usb 5-1: config 0 has no interfaces? [ 637.688029][T13410] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2577'. [ 637.700110][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'. [ 637.732390][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 637.772341][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.793381][ T5893] usb 5-1: Product: syz [ 637.800740][ T5893] usb 5-1: Manufacturer: syz [ 637.813901][ T5893] usb 5-1: SerialNumber: syz [ 637.855036][ T5893] usb 5-1: config 0 descriptor?? [ 638.131207][T13426] netlink: 'syz.0.2582': attribute type 72 has an invalid length. [ 638.184215][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'. [ 638.192025][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 638.265148][T13426] futex_wake_op: syz.0.2582 tries to shift op by 144; fix this program [ 639.918173][T10538] usb 4-1: USB disconnect, device number 74 [ 640.485751][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 640.673422][T13455] netlink: 'syz.3.2593': attribute type 5 has an invalid length. [ 640.699112][ T9] usb 5-1: USB disconnect, device number 68 [ 641.428977][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 641.608937][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 641.617354][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 641.626601][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.634668][ T9] usb 5-1: Product: syz [ 641.639304][ T9] usb 5-1: Manufacturer: syz [ 641.643945][ T9] usb 5-1: SerialNumber: syz [ 641.659129][ T9] usb 5-1: config 0 descriptor?? [ 641.779084][ T5890] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 641.938990][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 641.947029][ T5890] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 641.956444][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.968098][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 641.995108][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 642.019783][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.027837][ T5890] usb 4-1: Product: syz [ 642.036059][ T5890] usb 4-1: Manufacturer: syz [ 642.041353][ T5890] usb 4-1: SerialNumber: syz [ 642.057367][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.075330][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.085907][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.096005][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.306178][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'. [ 642.332810][ T5890] usb 4-1: 0:2 : does not exist [ 642.342978][ T9] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial ECF43F4D.0000AA5E (2 channels) [ 642.371361][ T5890] usb 4-1: USB disconnect, device number 75 [ 642.392535][ T9] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 642.416972][ T9] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 642.480785][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 642.548119][ T9] usb 5-1: USB disconnect, device number 69 [ 642.591696][T12469] udevd[12469]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.529331][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 644.616713][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2614'. [ 644.808919][ T5893] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 644.974063][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2617'. [ 645.293397][T13527] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 645.353903][T13528] netlink: 'syz.1.2620': attribute type 8 has an invalid length. [ 645.458925][ T5893] usb 4-1: config 0 has no interfaces? [ 645.474621][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 645.491421][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.515607][ T5893] usb 4-1: Product: syz [ 645.521582][ T5893] usb 4-1: Manufacturer: syz [ 645.526232][ T5893] usb 4-1: SerialNumber: syz [ 645.543739][ T5893] usb 4-1: config 0 descriptor?? [ 645.622976][T13535] delete_channel: no stack [ 646.567360][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 647.325785][T13566] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 647.467150][T13570] netlink: 'syz.1.2635': attribute type 5 has an invalid length. [ 647.494167][T13570] ip6erspan0: entered promiscuous mode [ 647.930799][ T5890] usb 4-1: USB disconnect, device number 76 [ 647.997057][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 648.122936][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2643'. [ 648.137551][T13588] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.146655][T13588] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.155776][T13588] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.164655][T13588] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.190510][T13588] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.199866][T13588] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.208858][T13588] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.217756][T13588] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.858800][ T5888] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 648.988954][ T5888] usb 5-1: device descriptor read/64, error -71 [ 649.238931][ T5888] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 649.403878][ T5888] usb 5-1: device descriptor read/64, error -71 [ 649.519082][ T5888] usb usb5-port1: attempt power cycle [ 649.868886][ T5888] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 649.905586][ T5888] usb 5-1: device descriptor read/8, error -71 [ 649.965237][T13602] netlink: 'syz.2.2647': attribute type 10 has an invalid length. [ 650.007229][T13602] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 650.044999][T13602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2647'. [ 650.169339][ T5888] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 650.190530][ T5888] usb 5-1: device descriptor read/8, error -71 [ 650.309118][ T5888] usb usb5-port1: unable to enumerate USB device [ 650.586358][T13630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2654'. [ 653.359846][T13684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2678'. [ 653.738992][ T5893] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 653.839400][ T5889] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 653.921894][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 654.003080][ T5889] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 654.013322][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.021807][ T5893] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 654.034885][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 654.040195][ T5889] usb 4-1: config 0 descriptor?? [ 654.057300][ T5893] usb 5-1: Product: syz [ 654.067727][ T5893] usb 5-1: Manufacturer: syz [ 654.091479][ T5893] usb 5-1: SerialNumber: syz [ 654.125098][ T5893] usb 5-1: config 0 descriptor?? [ 654.881414][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2680'. [ 655.030726][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2685'. [ 655.327022][ T5889] pegasus 4-1:0.0: can't reset MAC [ 655.357237][ T5889] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 655.374438][T13709] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2688'. [ 655.505498][ T5889] usb 4-1: USB disconnect, device number 77 [ 656.362492][T13726] netlink: 'syz.2.2695': attribute type 1 has an invalid length. [ 656.424608][T13726] bond1: entered promiscuous mode [ 656.435711][T13726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.506294][T13730] bond1: (slave bridge4): making interface the new active one [ 656.554871][T13730] bridge4: entered promiscuous mode [ 656.617873][T13730] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 657.165515][ T5888] usb 5-1: USB disconnect, device number 74 [ 658.194346][T13755] Invalid logical block size (4) [ 658.224909][T13754] Invalid logical block size (4) [ 658.324211][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2705'. [ 658.654242][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 659.179337][T13783] delete_channel: no stack [ 659.249033][ T5890] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 659.325505][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 659.412570][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'. [ 659.423740][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.444237][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.455164][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 659.464840][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.482705][ T5890] usb 5-1: config 0 descriptor?? [ 659.709027][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.719643][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.731399][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.759555][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.783573][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.807273][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.839402][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.029928][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.069464][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.088014][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.806196][ T5888] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 660.951678][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 660.972686][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 660.978948][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 661.022449][ T5890] usb 5-1: USB disconnect, device number 75 [ 661.031718][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 661.070306][ T5888] usb 4-1: config 7 has an invalid interface number: 29 but max is 1 [ 661.137159][ T5888] usb 4-1: config 7 has an invalid interface number: 29 but max is 1 [ 661.174862][ T5888] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 661.221985][ T5888] usb 4-1: config 7 has no interface number 0 [ 661.248448][ T5888] usb 4-1: config 7 interface 29 has no altsetting 0 [ 661.272811][ T5888] usb 4-1: config 7 interface 29 has no altsetting 1 [ 661.295782][ T5888] usb 4-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=5e.f0 [ 661.307614][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.387341][ T5888] usb 4-1: Product: syz [ 661.402451][ T5888] usb 4-1: Manufacturer: syz [ 661.410382][ T5888] usb 4-1: SerialNumber: syz [ 661.505024][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2727'. [ 661.669770][T13813] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2723'. [ 661.679341][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 662.086024][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'. [ 662.363464][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 662.569526][ T5890] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 662.730621][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 662.742614][ T5890] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 662.764855][ T5890] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 662.787219][ T5890] usb 5-1: config 0 has no interface number 0 [ 662.805490][ T5890] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.837323][ T5890] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 662.864857][ T5890] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 662.864890][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 662.864912][ T5890] usb 5-1: Product: syz [ 662.868040][ T5890] usb 5-1: config 0 descriptor?? [ 662.872967][T13831] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 663.496994][ T5890] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input26 [ 663.684252][ T5888] usb 4-1: USB disconnect, device number 78 [ 663.800507][T13831] tipc: Can't bind to reserved service type 2 [ 663.919162][ T5893] usb 5-1: USB disconnect, device number 76 [ 663.919263][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 664.006841][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'. [ 664.223836][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'. [ 664.622256][T13867] delete_channel: no stack [ 665.250994][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2748'. [ 665.764170][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 665.985836][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 666.017451][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'. [ 666.107189][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 666.343270][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2753'. [ 667.165548][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 667.437623][T13912] batman_adv: batadv0: Adding interface: ip6gretap1 [ 667.444813][T13912] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 667.537239][T13912] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 667.564038][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 668.098919][ T5890] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 668.280344][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 668.297002][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 668.312231][ T5890] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 668.340069][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.370433][ T5890] usb 4-1: Product: syz [ 668.383851][ T5890] usb 4-1: Manufacturer: syz [ 668.397386][ T5890] usb 4-1: SerialNumber: syz [ 668.424839][ T5890] usb 4-1: config 0 descriptor?? [ 668.468632][ T5890] hub 4-1:0.0: bad descriptor, ignoring hub [ 668.481777][ T5890] hub 4-1:0.0: probe with driver hub failed with error -5 [ 668.516093][ T5890] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 668.936123][ T5890] gspca_vc032x: reg_w err -71 [ 668.945096][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 668.965915][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.082725][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.088081][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.108354][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.141327][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.146787][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.166651][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.172883][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.178342][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.184250][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.190897][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.199840][T13949] __nla_validate_parse: 2 callbacks suppressed [ 669.199865][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 669.219221][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.224641][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.234199][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.242685][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.248026][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.249501][T13951] delete_channel: no stack [ 669.268786][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.274129][ T5890] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.305678][ T5890] gspca_vc032x: Unknown sensor... [ 669.334144][ T5890] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 669.414042][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'. [ 669.519983][ T5890] usb 4-1: USB disconnect, device number 79 [ 669.578797][ T5888] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 669.647577][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'. [ 669.903169][ T5888] usb 5-1: config 0 has no interfaces? [ 669.916462][ T5888] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 669.965896][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.991952][ T5888] usb 5-1: Product: syz [ 670.049910][ T5888] usb 5-1: Manufacturer: syz [ 670.054568][ T5888] usb 5-1: SerialNumber: syz [ 670.089995][ T5888] usb 5-1: config 0 descriptor?? [ 670.524003][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'. [ 671.825256][T13985] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2786'. [ 671.857900][T13985] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 672.090067][T13991] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2782'. [ 672.195508][T13991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2782'. [ 672.408167][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2787'. [ 672.513446][ T3407] usb 5-1: USB disconnect, device number 77 [ 672.604630][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 672.842757][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2790'. [ 673.764837][T14028] delete_channel: no stack [ 674.417447][T14035] __nla_validate_parse: 1 callbacks suppressed [ 674.417465][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 674.761744][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 674.918902][ T5888] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 675.237283][ T5888] usb 4-1: config 0 has no interfaces? [ 675.249706][ T3407] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 675.263570][ T5888] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 675.275238][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.283713][ T5888] usb 4-1: Product: syz [ 675.289148][ T5888] usb 4-1: Manufacturer: syz [ 675.313643][ T5888] usb 4-1: SerialNumber: syz [ 675.335298][ T5888] usb 4-1: config 0 descriptor?? [ 675.428949][ T3407] usb 5-1: Using ep0 maxpacket: 16 [ 675.441681][ T3407] usb 5-1: unable to get BOS descriptor or descriptor too short [ 675.457652][ T3407] usb 5-1: too many configurations: 219, using maximum allowed: 8 [ 675.476294][ T3407] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 675.486536][ T3407] usb 5-1: can't read configurations, error -61 [ 675.619279][ T3407] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 675.662026][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 675.779114][ T3407] usb 5-1: Using ep0 maxpacket: 16 [ 675.787732][ T3407] usb 5-1: unable to get BOS descriptor or descriptor too short [ 675.802598][ T3407] usb 5-1: too many configurations: 219, using maximum allowed: 8 [ 675.815743][ T3407] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 675.824144][ T3407] usb 5-1: can't read configurations, error -61 [ 675.843104][ T3407] usb usb5-port1: attempt power cycle [ 676.208840][ T3407] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 676.250427][ T3407] usb 5-1: Using ep0 maxpacket: 16 [ 676.264081][ T3407] usb 5-1: unable to get BOS descriptor or descriptor too short [ 676.278864][ T3407] usb 5-1: too many configurations: 219, using maximum allowed: 8 [ 676.296819][ T3407] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 676.307821][ T3407] usb 5-1: can't read configurations, error -61 [ 676.449224][ T3407] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 676.481195][ T3407] usb 5-1: Using ep0 maxpacket: 16 [ 676.492298][ T3407] usb 5-1: unable to get BOS descriptor or descriptor too short [ 676.508461][ T3407] usb 5-1: too many configurations: 219, using maximum allowed: 8 [ 676.529652][ T3407] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 676.546891][ T3407] usb 5-1: can't read configurations, error -61 [ 676.571693][ T3407] usb usb5-port1: unable to enumerate USB device [ 676.668547][ T5848] bond0: (slave syz_tun): Releasing backup interface [ 676.692233][ T5848] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 676.861558][T14061] delete_channel: no stack [ 677.052469][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 677.061758][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 677.070872][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 677.079794][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 677.087526][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 677.620134][ T5888] usb 4-1: USB disconnect, device number 80 [ 677.655338][T14064] chnl_net:caif_netlink_parms(): no params data found [ 677.753605][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2810'. [ 678.086633][T14064] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.099648][T14064] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.106892][T14064] bridge_slave_0: entered allmulticast mode [ 678.115031][T14064] bridge_slave_0: entered promiscuous mode [ 678.127429][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2812'. [ 678.144150][T14064] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.155775][T14064] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.166290][T14064] bridge_slave_1: entered allmulticast mode [ 678.178532][T14064] bridge_slave_1: entered promiscuous mode [ 678.530031][T14064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.557411][T14064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.893874][T14092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2813'. [ 678.966911][T14064] team0: Port device team_slave_0 added [ 679.018160][T14064] team0: Port device team_slave_1 added [ 679.179147][ T5152] Bluetooth: hci2: command tx timeout [ 679.341438][T14064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.348566][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.470481][T14064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.498807][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 679.586174][T14064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.617363][T14064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.683731][T14064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.728839][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 679.737314][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 679.787107][T14100] delete_channel: no stack [ 680.058947][ T9] usb 5-1: config 0 has no interface number 0 [ 680.071934][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 680.081451][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.259714][ T9] usb 5-1: Product: syz [ 680.277871][ T9] usb 5-1: Manufacturer: syz [ 680.290583][ T9] usb 5-1: SerialNumber: syz [ 680.340742][ T9] usb 5-1: config 0 descriptor?? [ 680.374609][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 680.405517][T14064] hsr_slave_0: entered promiscuous mode [ 680.414381][T14064] hsr_slave_1: entered promiscuous mode [ 680.468808][ T5888] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 680.639493][ T5888] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 680.651070][ T5888] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 680.669006][ T5888] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 680.678367][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.727034][T14100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 680.751097][ T5888] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.220417][T14064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.238882][ T5152] Bluetooth: hci2: command tx timeout [ 681.344011][T14064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.448222][T14064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.528056][T14064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.832055][T14064] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 681.885242][T14064] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 681.911550][T14064] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 681.963844][T14064] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 682.216378][ T9] usb 5-1: qt2_attach - failed to power on unit: -71 [ 682.223526][ T9] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 682.312807][ T9] usb 5-1: USB disconnect, device number 82 [ 682.355348][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 682.355371][ T30] audit: type=1326 audit(1744411284.227:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 682.572052][ T30] audit: type=1326 audit(1744411284.227:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 682.621698][T14064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.732047][ T5889] usb 4-1: USB disconnect, device number 81 [ 682.747228][ T30] audit: type=1326 audit(1744411284.237:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 682.769365][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.778193][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 682.817976][ T30] audit: type=1326 audit(1744411284.237:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 682.882786][T14064] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.928181][ T30] audit: type=1326 audit(1744411284.237:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 682.950308][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.000358][T14115] could not allocate digest TFM handle sha3-256-ce [ 683.003140][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.011491][ T30] audit: type=1326 audit(1744411284.237:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 683.014098][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.035967][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.038038][ T30] audit: type=1326 audit(1744411284.257:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 683.100207][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.107344][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.194603][T14064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.292949][ T30] audit: type=1326 audit(1744411284.257:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 683.315253][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.322782][ T5152] Bluetooth: hci2: command tx timeout [ 683.328627][ T30] audit: type=1326 audit(1744411284.267:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 683.350891][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.358428][ T30] audit: type=1326 audit(1744411284.327:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14111 comm="syz.1.2828" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 683.384980][T14064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.430806][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2823'. [ 683.449218][ T5893] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 683.481917][T14064] veth0_vlan: entered promiscuous mode [ 683.501702][T14064] veth1_vlan: entered promiscuous mode [ 683.582808][T14064] veth0_macvtap: entered promiscuous mode [ 683.606797][T14064] veth1_macvtap: entered promiscuous mode [ 683.612832][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 683.624652][ T5893] usb 5-1: config 0 interface 0 altsetting 140 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.677720][ T5893] usb 5-1: config 0 interface 0 altsetting 140 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.705529][T14064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.713219][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 683.726579][ T5893] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 683.744700][T14064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.755929][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.785867][T14135] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 683.795876][T14064] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.802967][T14135] PKCS7: Only support pkcs7_signedData type [ 683.812354][ T5893] usb 5-1: config 0 descriptor?? [ 683.826953][T14064] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.836373][T14064] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.848125][T14064] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.900546][T14137] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2827'. [ 684.048477][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.071244][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.133678][T14137] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 684.135360][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.151246][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.222214][T14124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.245388][T14124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.263352][ T5893] isku 0003:1E7D:3264.001C: item fetching failed at offset 2/7 [ 684.278280][ T5893] isku 0003:1E7D:3264.001C: parse failed [ 684.286531][ T5893] isku 0003:1E7D:3264.001C: probe with driver isku failed with error -22 [ 684.442193][ T5890] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 684.606064][ T5889] usb 5-1: USB disconnect, device number 83 [ 684.613549][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 684.633675][ T5890] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 684.651075][ T5890] usb 4-1: config 0 has no interface number 0 [ 684.691195][ T5890] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 684.704368][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.713379][ T5890] usb 4-1: Product: syz [ 684.717652][ T5890] usb 4-1: Manufacturer: syz [ 684.730030][ T5890] usb 4-1: SerialNumber: syz [ 684.742346][ T5890] usb 4-1: config 0 descriptor?? [ 684.751889][ T5890] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 684.992725][T14160] delete_channel: no stack [ 685.409219][ T5152] Bluetooth: hci2: command tx timeout [ 685.805103][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.816896][ T9775] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 685.820350][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.851308][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'. [ 685.873301][ T9775] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 685.968780][ T9775] usb 3-1: USB disconnect, device number 66 [ 687.126562][ T5890] usb 4-1: qt2_attach - failed to power on unit: -71 [ 687.146743][ T5890] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 687.200653][ T5890] usb 4-1: USB disconnect, device number 82 [ 687.269073][ T5893] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 687.470020][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 687.504914][ T5893] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 687.565294][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.642961][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 687.662593][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.692652][ T5893] usbtmc 3-1:16.0: bulk endpoints not found [ 688.627897][T14205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2847'. [ 688.902221][T14212] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 688.928453][T14212] PKCS7: Only support pkcs7_signedData type [ 689.409079][ T5893] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 689.439954][T14233] delete_channel: no stack [ 689.529148][ T9775] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 689.569381][ T5893] usb 4-1: device descriptor read/64, error -71 [ 689.709151][ T9775] usb 5-1: Using ep0 maxpacket: 8 [ 689.717436][ T9775] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 689.730382][ T9775] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 689.743125][ T9775] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 689.756403][ T9775] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 689.774092][ T9775] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.787841][ T9775] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 689.797654][ T9775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.809425][ T5893] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 689.959316][ T5893] usb 4-1: device descriptor read/64, error -71 [ 690.028484][ T9775] usb 5-1: usb_control_msg returned -32 [ 690.093493][ T3407] usb 3-1: USB disconnect, device number 67 [ 690.169199][ T5893] usb usb4-port1: attempt power cycle [ 690.240220][ T9775] usbtmc 5-1:16.0: can't read capabilities [ 690.397507][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2854'. [ 690.608904][ T5893] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 690.641150][ T5893] usb 4-1: device descriptor read/8, error -71 [ 690.888842][ T5893] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 690.932919][ T5893] usb 4-1: device descriptor read/8, error -71 [ 691.061702][ T5893] usb usb4-port1: unable to enumerate USB device [ 691.528836][ T5889] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 691.684507][ T5889] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 691.692154][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 691.703591][ T5889] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.717067][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 691.728873][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 691.741796][ T5889] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 691.749517][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 691.760433][ T5889] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.772412][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 691.783695][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 691.795742][ T5889] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 691.803806][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 691.815154][ T5889] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.826928][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 691.838556][ T5889] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 691.852865][ T5889] usb 3-1: string descriptor 0 read error: -22 [ 691.859634][ T5889] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 691.868753][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.884195][ T5889] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 692.116629][ T9775] usb 3-1: USB disconnect, device number 68 [ 692.193325][ T5889] usb 5-1: USB disconnect, device number 84 [ 692.670100][ T9775] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 692.815287][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 692.815308][ T30] audit: type=1326 audit(1744411294.687:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 692.850892][T14271] FAULT_INJECTION: forcing a failure. [ 692.850892][T14271] name failslab, interval 1, probability 0, space 0, times 0 [ 692.904826][T14271] CPU: 1 UID: 0 PID: 14271 Comm: syz.1.2872 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 692.904861][T14271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 692.904876][T14271] Call Trace: [ 692.904885][T14271] [ 692.904896][T14271] dump_stack_lvl+0x241/0x360 [ 692.904939][T14271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.904970][T14271] ? __pfx__printk+0x10/0x10 [ 692.905006][T14271] ? __pfx___might_resched+0x10/0x10 [ 692.905041][T14271] should_fail_ex+0x424/0x570 [ 692.905070][T14271] should_failslab+0xac/0x100 [ 692.905102][T14271] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 692.905137][T14271] ? vfs_parse_monolithic_sep+0x28b/0x460 [ 692.905183][T14271] kmemdup_nul+0x37/0xf0 [ 692.905215][T14271] vfs_parse_monolithic_sep+0x28b/0x460 [ 692.905253][T14271] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 692.905275][T14271] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 692.905333][T14271] do_new_mount+0x2a0/0xb70 [ 692.905372][T14271] ? __pfx_do_new_mount+0x10/0x10 [ 692.905415][T14271] __se_sys_mount+0x38c/0x400 [ 692.905455][T14271] ? __pfx___se_sys_mount+0x10/0x10 [ 692.905487][T14271] ? __secure_computing+0xef/0x2f0 [ 692.905519][T14271] ? __ia32_sys_mount+0x20/0xc0 [ 692.905555][T14271] __do_fast_syscall_32+0xb4/0x110 [ 692.905583][T14271] ? exc_page_fault+0x5f8/0x920 [ 692.905615][T14271] do_fast_syscall_32+0x34/0x80 [ 692.905643][T14271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 692.905670][T14271] RIP: 0023:0xf743d579 [ 692.905689][T14271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 692.905708][T14271] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 692.905733][T14271] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 692.905749][T14271] RDX: 0000000080002100 RSI: 0000000000000000 RDI: 0000000080002140 [ 692.905767][T14271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.905781][T14271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 692.905794][T14271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.905823][T14271] [ 693.125379][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.149372][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 693.192722][ T30] audit: type=1326 audit(1744411294.687:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.214739][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.221270][ T30] audit: type=1326 audit(1744411294.687:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.243621][ T30] audit: type=1326 audit(1744411294.727:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.265687][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.272633][ T30] audit: type=1326 audit(1744411294.727:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.295172][ T30] audit: type=1326 audit(1744411294.727:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.317243][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.323980][ T30] audit: type=1326 audit(1744411294.727:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.346040][ T30] audit: type=1326 audit(1744411294.727:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.368034][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.374826][ T30] audit: type=1326 audit(1744411294.777:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.401464][ T30] audit: type=1326 audit(1744411294.777:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 693.468980][ T9775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.498778][ T9775] usb 5-1: config 0 has no interfaces? [ 693.519514][ T9775] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 693.540544][ T9775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.563390][ T9775] usb 5-1: Product: syz [ 693.567675][ T9775] usb 5-1: Manufacturer: syz [ 693.575829][ T9775] usb 5-1: SerialNumber: syz [ 693.597391][ T9775] usb 5-1: config 0 descriptor?? [ 693.750620][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2875'. [ 693.779131][T14283] netlink: 4856 bytes leftover after parsing attributes in process `syz.1.2875'. [ 694.160230][T14290] delete_channel: no stack [ 694.488768][ T9775] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 694.753862][ T9775] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 694.771829][ T9775] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 694.787173][ T9775] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 694.809918][ T9775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.865116][T14290] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 694.964020][ T9775] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 695.688886][ T5888] usb 5-1: USB disconnect, device number 85 [ 695.919507][T14323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2885'. [ 695.929084][T14323] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2885'. [ 695.938130][T14323] netlink: 'syz.1.2885': attribute type 5 has an invalid length. [ 695.950141][ T9775] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 696.011550][T14323] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2885'. [ 696.139123][ T9775] usb 4-1: Using ep0 maxpacket: 32 [ 696.157307][ T9775] usb 4-1: unable to get BOS descriptor or descriptor too short [ 696.168317][ T9775] usb 4-1: config 7 has an invalid interface number: 29 but max is 1 [ 696.177880][ T9775] usb 4-1: config 7 has an invalid interface number: 29 but max is 1 [ 696.191902][ T9775] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 696.220745][ T9775] usb 4-1: config 7 has no interface number 0 [ 696.243481][ T9775] usb 4-1: config 7 interface 29 has no altsetting 0 [ 696.270921][ T9775] usb 4-1: config 7 interface 29 has no altsetting 1 [ 696.281884][ T9775] usb 4-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=5e.f0 [ 696.291471][ T9775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.309782][ T9775] usb 4-1: Product: syz [ 696.319241][ T9775] usb 4-1: Manufacturer: syz [ 696.329243][ T9775] usb 4-1: SerialNumber: syz [ 698.067829][ T5889] usb 3-1: USB disconnect, device number 69 [ 699.186887][T14333] FAULT_INJECTION: forcing a failure. [ 699.186887][T14333] name failslab, interval 1, probability 0, space 0, times 0 [ 699.207219][T14333] CPU: 0 UID: 0 PID: 14333 Comm: syz.2.2888 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 699.207255][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 699.207266][T14333] Call Trace: [ 699.207272][T14333] [ 699.207280][T14333] dump_stack_lvl+0x241/0x360 [ 699.207314][T14333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.207336][T14333] ? __pfx__printk+0x10/0x10 [ 699.207360][T14333] ? __pfx___might_resched+0x10/0x10 [ 699.207383][T14333] should_fail_ex+0x424/0x570 [ 699.207403][T14333] should_failslab+0xac/0x100 [ 699.207426][T14333] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 699.207449][T14333] ? __alloc_skb+0x1c2/0x480 [ 699.207467][T14333] __alloc_skb+0x1c2/0x480 [ 699.207494][T14333] ? __pfx___alloc_skb+0x10/0x10 [ 699.207510][T14333] ? netlink_autobind+0xd6/0x2f0 [ 699.207532][T14333] ? netlink_autobind+0x2b0/0x2f0 [ 699.207557][T14333] netlink_sendmsg+0x638/0xcd0 [ 699.207588][T14333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.207613][T14333] ? __import_iovec+0x585/0x830 [ 699.207634][T14333] ? aa_sock_msg_perm+0x91/0x160 [ 699.207660][T14333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.207681][T14333] __sock_sendmsg+0x221/0x270 [ 699.207703][T14333] ____sys_sendmsg+0x523/0x860 [ 699.207727][T14333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.207758][T14333] __sys_sendmsg+0x271/0x360 [ 699.207778][T14333] ? __pfx___sys_sendmsg+0x10/0x10 [ 699.207830][T14333] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 699.207850][T14333] ? lockdep_hardirqs_on+0x9d/0x150 [ 699.207869][T14333] __do_fast_syscall_32+0xb4/0x110 [ 699.207889][T14333] ? exc_page_fault+0x5f8/0x920 [ 699.207910][T14333] do_fast_syscall_32+0x34/0x80 [ 699.207929][T14333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.207948][T14333] RIP: 0023:0xf73fd579 [ 699.207962][T14333] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 699.207975][T14333] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 699.207992][T14333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 699.208004][T14333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.208013][T14333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.208022][T14333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.208031][T14333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.208053][T14333] [ 699.737696][T14318] netlink: 'syz.4.2886': attribute type 3 has an invalid length. [ 699.799028][T14340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2889'. [ 700.034402][T14326] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2884'. [ 700.041524][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 700.062969][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2884'. [ 700.248022][ T9775] usb 4-1: USB disconnect, device number 87 [ 700.311864][T14349] netlink: 'syz.1.2893': attribute type 5 has an invalid length. [ 700.987043][T14363] delete_channel: no stack [ 701.059188][ T5889] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 701.288786][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 701.311846][ T5889] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 701.355525][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.412997][ T5889] usb 4-1: Product: syz [ 701.575142][ T5889] usb 4-1: Manufacturer: syz [ 701.670507][ T5889] usb 4-1: SerialNumber: syz [ 701.789839][ T5889] usb 4-1: config 0 descriptor?? [ 701.838340][ T5889] usb 4-1: selecting invalid altsetting 3 [ 701.989072][ T5889] comedi comedi0: could not set alternate setting 3 in high speed [ 702.072895][ T5889] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 702.145153][ T5889] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 702.186486][ T5889] usb 4-1: USB disconnect, device number 88 [ 702.321369][T14373] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2900'. [ 702.728732][ T5893] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 702.920241][ T5893] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 702.928473][ T5893] usb 3-1: config 5 has no interface number 0 [ 703.009265][ T5893] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 703.030864][ T5893] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 703.049042][ T5893] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 703.064061][ T5893] usb 3-1: config 5 interface 123 has no altsetting 0 [ 703.079723][ T5893] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 703.091513][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.100196][ T5893] usb 3-1: Product: syz [ 703.104462][ T5893] usb 3-1: Manufacturer: syz [ 703.111763][ T5893] usb 3-1: SerialNumber: syz [ 703.138815][ T5889] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 703.318459][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.329793][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.352546][ T5893] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 703.389106][ T5893] usb 3-1: USB disconnect, device number 70 [ 703.445912][ T5889] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 703.512454][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.549087][ T5889] usb 4-1: config 0 descriptor?? [ 704.041567][ T5889] hid-led 0003:0FC5:B080.001D: unknown main item tag 0x0 [ 704.053206][T14384] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2903'. [ 704.068878][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 704.137098][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2903'. [ 704.310105][ T5889] hid-led 0003:0FC5:B080.001D: probe with driver hid-led failed with error -71 [ 704.362958][ T5889] usb 4-1: USB disconnect, device number 89 [ 704.415201][T14394] netlink: 'syz.0.2907': attribute type 5 has an invalid length. [ 704.485823][T14394] ip6erspan0: entered promiscuous mode [ 705.239359][ T5889] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 705.415948][T14410] delete_channel: no stack [ 705.463775][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 705.483151][ T5889] usb 3-1: not running at top speed; connect to a high speed hub [ 705.500168][ T5889] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 705.556818][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 705.558901][ T5893] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 705.570929][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.575373][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.593930][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.609546][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.622478][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.630791][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 705.665701][ T5889] usb 3-1: Product: syz [ 705.690935][ T5889] usb 3-1: Manufacturer: syz [ 705.695583][ T5889] usb 3-1: SerialNumber: syz [ 705.789222][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 705.802091][ T5893] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 705.815307][ T5893] usb 4-1: config 0 has no interface number 0 [ 705.826782][ T5893] usb 4-1: config 0 interface 85 has no altsetting 0 [ 705.851883][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 705.876481][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.896345][ T5893] usb 4-1: Product: syz [ 705.914413][ T5893] usb 4-1: Manufacturer: syz [ 705.919339][ T5893] usb 4-1: SerialNumber: syz [ 705.928581][ T5893] usb 4-1: config 0 descriptor?? [ 705.951725][ T5893] appletouch 4-1:0.85: Could not find int-in endpoint [ 705.973401][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.983593][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.014048][ T5889] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 706.014785][ T5893] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 706.033792][ T5889] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 706.063854][ T5889] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 706.093715][ T5889] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 706.101625][ T5893] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 706.135570][ T5889] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 706.157002][ T5889] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 706.184503][ T5889] usb 3-1: USB disconnect, device number 71 [ 706.329919][ T9775] usb 4-1: USB disconnect, device number 90 [ 706.391175][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.631537][ T81] vlan3: left allmulticast mode [ 706.637265][ T81] dummy0: left allmulticast mode [ 706.652926][ T81] vlan3: left promiscuous mode [ 706.668507][ T81] dummy0: left promiscuous mode [ 706.685322][ T81] bridge0: port 2(vlan3) entered disabled state [ 706.711084][ T81] bridge0: port 1(batadv0) entered disabled state [ 707.099235][T10538] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 707.230414][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 707.298511][T10538] usb 3-1: config 0 has no interfaces? [ 707.396881][T10538] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 707.436239][T10538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.484728][T10538] usb 3-1: Product: syz [ 707.578321][T10538] usb 3-1: Manufacturer: syz [ 707.593022][T10538] usb 3-1: SerialNumber: syz [ 707.628540][T10538] usb 3-1: config 0 descriptor?? [ 707.773268][ T5152] Bluetooth: hci3: command tx timeout [ 708.544973][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 708.573195][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 708.600463][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 708.875440][ T81]  (unregistering): Released all slaves [ 708.951039][ T81] bond0 (unregistering): Released all slaves [ 709.027904][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'. [ 709.109799][T14442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2921'. [ 709.123958][T14412] chnl_net:caif_netlink_parms(): no params data found [ 709.201418][ T81] tipc: Left network mode [ 709.537194][T14445] block device autoloading is deprecated and will be removed. [ 709.636295][T14445] syz.1.2922: attempt to access beyond end of device [ 709.636295][T14445] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 709.798796][ T5152] Bluetooth: hci3: command tx timeout [ 710.200820][ T3407] usb 3-1: USB disconnect, device number 72 [ 710.590447][T14412] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.646909][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.672052][T14412] bridge_slave_0: entered allmulticast mode [ 710.690466][T14412] bridge_slave_0: entered promiscuous mode [ 710.891012][T14469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2925'. [ 710.904718][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'. [ 710.910622][T14412] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.955945][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.974266][T14412] bridge_slave_1: entered allmulticast mode [ 711.001386][T14412] bridge_slave_1: entered promiscuous mode [ 711.050735][T14485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2930'. [ 711.132029][T14489] delete_channel: no stack [ 711.178986][ T24] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 711.238530][ T81] hsr_slave_0: left promiscuous mode [ 711.267409][ T81] hsr_slave_1: left promiscuous mode [ 711.290227][ T81] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 711.323904][ T81] batman_adv: batadv0: Removing interface: virt_wifi0 [ 711.341004][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 711.371830][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 711.386972][ T24] usb 4-1: config 7 has an invalid interface number: 29 but max is 1 [ 711.423797][ T24] usb 4-1: config 7 has an invalid interface number: 29 but max is 1 [ 711.455414][ T24] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 711.480561][ T24] usb 4-1: config 7 has no interface number 0 [ 711.498242][ T24] usb 4-1: config 7 interface 29 has no altsetting 0 [ 711.506572][ T24] usb 4-1: config 7 interface 29 has no altsetting 1 [ 711.516708][ T24] usb 4-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=5e.f0 [ 711.526679][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.535516][ T24] usb 4-1: Product: syz [ 711.540464][ T24] usb 4-1: Manufacturer: syz [ 711.545239][ T24] usb 4-1: SerialNumber: syz [ 711.883425][ T5152] Bluetooth: hci3: command tx timeout [ 712.843142][T14412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.879034][T14492] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2931'. [ 712.907774][T14492] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 712.957727][T14493] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2926'. [ 712.968110][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 712.995482][T14412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.135560][T14497] netlink: 'syz.1.2933': attribute type 5 has an invalid length. [ 713.179755][T14412] team0: Port device team_slave_0 added [ 713.220203][T14412] team0: Port device team_slave_1 added [ 713.400154][T14412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.418138][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.444160][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.460430][T14412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.491612][T14412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.504895][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.542878][T14412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.664624][T14412] hsr_slave_0: entered promiscuous mode [ 713.696349][T14412] hsr_slave_1: entered promiscuous mode [ 713.716222][T14412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.735981][T14412] Cannot create hsr debugfs directory [ 713.960065][ T5152] Bluetooth: hci3: command tx timeout [ 714.189059][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 714.345066][ T24] usb 4-1: USB disconnect, device number 91 [ 714.542622][T14529] fuse: Unknown parameter 'g£_' [ 714.566028][T14531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2941'. [ 715.162839][T14544] netlink: 'syz.0.2944': attribute type 5 has an invalid length. [ 715.347314][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 715.783457][T14561] delete_channel: no stack [ 715.978733][T14412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 716.037033][T14412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 716.058797][ T5893] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 716.084665][T14412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 716.141836][T14412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 716.365277][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2950'. [ 716.444192][ T5893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 716.497116][ T5893] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 716.574015][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 716.610629][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.678137][T14561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 716.708345][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 716.762345][T14412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.963869][T14412] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.032510][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.039773][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.150797][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.158124][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.293014][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2952'. [ 717.433615][T14412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.637914][T14412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.847629][T14412] veth0_vlan: entered promiscuous mode [ 717.908161][T14412] veth1_vlan: entered promiscuous mode [ 718.280962][T14412] veth0_macvtap: entered promiscuous mode [ 718.298435][T14412] veth1_macvtap: entered promiscuous mode [ 718.443847][T14598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2955'. [ 718.531713][T14412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.575379][T14412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.615626][T14412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.671863][T14412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 718.701742][T14412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.801627][T14412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.952082][T14412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.984782][T14605] netlink: 'syz.1.2956': attribute type 5 has an invalid length. [ 719.091105][T14412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.128822][T14412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.131735][ T5890] usb 3-1: USB disconnect, device number 73 [ 719.157470][T14412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.206879][T14608] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2957'. [ 719.269370][T14608] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 719.630934][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 719.823507][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.889008][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.128493][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.173223][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.909101][ T3407] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 721.071344][ T3407] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.097639][ T3407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 721.128061][ T3407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 721.158372][ T3407] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 721.199059][ T3407] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 721.245295][ T3407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.286716][ T3407] usb 5-1: config 0 descriptor?? [ 721.688996][ T9775] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 721.841588][ T3407] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 721.874662][ T3407] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 721.989047][ T9775] usb 3-1: Using ep0 maxpacket: 32 [ 721.998062][ T9775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 722.010964][ T9775] usb 3-1: config 7 has an invalid interface number: 29 but max is 1 [ 722.023514][ T9775] usb 3-1: config 7 has an invalid interface number: 29 but max is 1 [ 722.032165][ T9775] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 722.055354][ T9775] usb 3-1: config 7 has no interface number 0 [ 722.069245][ T9775] usb 3-1: config 7 interface 29 has no altsetting 0 [ 722.098951][ T9775] usb 3-1: config 7 interface 29 has no altsetting 1 [ 722.111194][ T9775] usb 3-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=5e.f0 [ 722.124121][ T9775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.141883][ T9775] usb 3-1: Product: syz [ 722.152384][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2910'. [ 722.162201][ T9775] usb 3-1: Manufacturer: syz [ 722.166868][ T9775] usb 3-1: SerialNumber: syz [ 722.290137][T14140] usb 5-1: USB disconnect, device number 86 [ 722.410540][T14650] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2965'. [ 722.440054][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 722.664486][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 722.664508][ T30] audit: type=1326 audit(1744411324.537:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.707316][ T30] audit: type=1326 audit(1744411324.567:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.733082][ T30] audit: type=1326 audit(1744411324.567:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.756505][ T30] audit: type=1326 audit(1744411324.567:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.781747][ T30] audit: type=1326 audit(1744411324.567:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.804634][ T30] audit: type=1326 audit(1744411324.567:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.839825][ T30] audit: type=1326 audit(1744411324.567:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.904381][ T30] audit: type=1326 audit(1744411324.577:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.954758][ T30] audit: type=1326 audit(1744411324.577:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.985142][ T30] audit: type=1326 audit(1744411324.577:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.3.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 722.999046][T14660] netlink: 'syz.4.2968': attribute type 5 has an invalid length. [ 723.027551][T14660] ip6erspan0: entered promiscuous mode [ 723.068793][ T5893] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 723.211305][T14662] delete_channel: no stack [ 723.424891][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'. [ 723.438132][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 723.483141][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.497898][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.509685][ T5893] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 723.546118][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.617037][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 723.631817][ T5893] usb 4-1: config 0 descriptor?? [ 723.999081][ T5890] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 724.091125][ T5893] gt683r_led 0003:1770:FF00.001F: ignoring exceeding usage max [ 724.105141][ T5893] gt683r_led 0003:1770:FF00.001F: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 724.158883][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 724.167020][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.184493][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.221414][T14674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2972'. [ 724.315172][ T24] usb 4-1: USB disconnect, device number 92 [ 724.327295][ T5890] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 724.341936][ T3407] gt683r_led 0003:1770:FF00.001F: failed to send set report request: -19 [ 724.391097][ T3407] gt683r_led 0003:1770:FF00.001F: failed to send set report request: -19 [ 724.401002][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.482424][ T9775] usb 3-1: USB disconnect, device number 74 [ 724.554554][ T5890] usb 5-1: config 0 descriptor?? [ 724.908999][ T9775] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 725.100645][ T9775] usb 3-1: config 0 has an invalid interface number: 100 but max is 0 [ 725.103684][ T5890] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0020/input/input29 [ 725.146011][ T9775] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 725.175754][ T9775] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 725.197860][ T9775] usb 3-1: config 0 has no interface number 0 [ 725.214481][ T9775] usb 3-1: config 0 has no interface number 1 [ 725.219622][ T5890] sony 0003:054C:03D5.0020: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 725.272885][ T9775] usb 3-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 725.328898][ T9775] usb 3-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.348952][ T5890] usb 5-1: USB disconnect, device number 87 [ 725.417092][ T9775] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 725.462318][ T9775] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 725.475503][ T9775] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 725.516625][ T9775] usb 3-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 725.538580][ T9775] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 725.551796][ T9775] usb 3-1: config 0 interface 66 altsetting 153 has 2 endpoint descriptors, different from the interface descriptor's value: 216 [ 725.566828][ T9775] usb 3-1: config 0 interface 66 has no altsetting 0 [ 725.586541][ T9775] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 725.599327][ T9775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.628293][ T9775] usb 3-1: Product: syz [ 725.642935][ T9775] usb 3-1: Manufacturer: syz [ 725.664404][ T9775] usb 3-1: SerialNumber: syz [ 725.696902][T14684] macsec0: entered allmulticast mode [ 725.696988][ T9775] usb 3-1: config 0 descriptor?? [ 725.712961][T14684] veth1_macvtap: entered allmulticast mode [ 725.743395][ T9775] port100 3-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 725.779231][ T9775] port100 3-1:0.66: NFC: Could not find bulk-in or bulk-out endpoint [ 725.898512][T14686] netlink: 164072 bytes leftover after parsing attributes in process `syz.1.2977'. [ 725.918961][T14686] netlink: zone id is out of range [ 725.924134][T14686] netlink: zone id is out of range [ 725.939184][T14686] netlink: zone id is out of range [ 725.945229][T14686] netlink: zone id is out of range [ 725.959109][T14686] netlink: zone id is out of range [ 726.006035][ T5890] usb 3-1: USB disconnect, device number 75 [ 726.060911][T14686] netlink: zone id is out of range [ 726.067978][T14686] netlink: zone id is out of range [ 726.096751][T14686] netlink: zone id is out of range [ 726.105862][T14686] netlink: zone id is out of range [ 726.116536][T14686] netlink: zone id is out of range [ 726.369063][T14693] netlink: 'syz.0.2980': attribute type 5 has an invalid length. [ 726.391343][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 726.562112][T14698] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma? [ 726.618830][T14701] raw_sendmsg: syz.4.2984 forgot to set AF_INET. Fix it! [ 727.164940][T14719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2986'. [ 727.337536][T14725] delete_channel: no stack [ 727.589346][ T3407] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 727.825000][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 727.869197][ T3407] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 727.895266][ T3407] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 727.906822][ T3407] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 727.922928][ T3407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.039325][T14725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 728.071787][ T3407] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 728.891889][T14742] delete_channel: no stack [ 729.228953][ T3407] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 729.524817][ T3407] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 729.531609][T14748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2998'. [ 729.552857][ T3407] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 729.567959][ T3407] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 729.593014][ T3407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.646345][T14742] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 729.657548][ T3407] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.597651][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 730.859971][T14767] ip6erspan0: entered promiscuous mode [ 731.011679][ T3407] usb 4-1: USB disconnect, device number 93 [ 731.449072][ T5890] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 731.512014][T14782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3007'. [ 731.742571][ T5890] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 731.759366][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 731.777041][ T5890] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 731.794575][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.830606][ T5890] usb 3-1: Product: syz [ 731.907818][ T5890] usb 3-1: Manufacturer: syz [ 731.934418][ T5890] usb 3-1: SerialNumber: syz [ 731.970839][ T5890] usb 3-1: config 0 descriptor?? [ 731.996553][ T24] usb 5-1: USB disconnect, device number 88 [ 732.194066][ T5890] usb 3-1: selecting invalid altsetting 0 [ 732.258393][T14787] program syz.4.3010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.361163][ T5888] usb 3-1: USB disconnect, device number 76 [ 732.477947][T14792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3011'. [ 732.938793][ T5888] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 732.999388][ T5890] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 733.095454][ T5888] usb 5-1: config 0 has no interfaces? [ 733.114923][ T5888] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 733.127130][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.138433][ T5888] usb 5-1: Product: syz [ 733.152151][ T5888] usb 5-1: Manufacturer: syz [ 733.156936][ T5888] usb 5-1: SerialNumber: syz [ 733.170154][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 733.177121][ T5888] usb 5-1: config 0 descriptor?? [ 733.221893][ T5890] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 733.262983][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.285601][ T5890] usb 4-1: Product: syz [ 733.297786][ T5890] usb 4-1: Manufacturer: syz [ 733.315824][ T5890] usb 4-1: SerialNumber: syz [ 733.350812][ T5890] usb 4-1: config 0 descriptor?? [ 733.385246][ T5890] gspca_main: se401-2.14.0 probing 047d:5003 [ 733.458359][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 733.769509][T14810] FAULT_INJECTION: forcing a failure. [ 733.769509][T14810] name failslab, interval 1, probability 0, space 0, times 0 [ 733.877111][T14810] CPU: 1 UID: 0 PID: 14810 Comm: syz.2.3019 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 733.877145][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 733.877160][T14810] Call Trace: [ 733.877169][T14810] [ 733.877180][T14810] dump_stack_lvl+0x241/0x360 [ 733.877226][T14810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.877259][T14810] ? __pfx__printk+0x10/0x10 [ 733.877295][T14810] ? ref_tracker_alloc+0x316/0x4c0 [ 733.877325][T14810] should_fail_ex+0x424/0x570 [ 733.877353][T14810] should_failslab+0xac/0x100 [ 733.877394][T14810] kmem_cache_alloc_noprof+0x78/0x390 [ 733.877434][T14810] ? skb_clone+0x20c/0x390 [ 733.877465][T14810] skb_clone+0x20c/0x390 [ 733.877493][T14810] __netlink_deliver_tap+0x3c4/0x7f0 [ 733.877537][T14810] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.877566][T14810] netlink_deliver_tap+0x19d/0x1b0 [ 733.877598][T14810] netlink_sendskb+0x68/0x140 [ 733.877627][T14810] netlink_unicast+0x39f/0x9a0 [ 733.877652][T14810] ? __asan_memcpy+0x40/0x70 [ 733.877682][T14810] ? __pfx_netlink_unicast+0x10/0x10 [ 733.877720][T14810] netlink_rcv_skb+0x296/0x480 [ 733.877751][T14810] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 733.877785][T14810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.877834][T14810] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.877867][T14810] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.877900][T14810] netlink_unicast+0x7f8/0x9a0 [ 733.877937][T14810] ? __pfx_netlink_unicast+0x10/0x10 [ 733.877986][T14810] ? skb_put+0x114/0x1f0 [ 733.878013][T14810] netlink_sendmsg+0x8c3/0xcd0 [ 733.878071][T14810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.878106][T14810] ? __import_iovec+0x585/0x830 [ 733.878134][T14810] ? aa_sock_msg_perm+0x91/0x160 [ 733.878171][T14810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.878200][T14810] __sock_sendmsg+0x221/0x270 [ 733.878232][T14810] ____sys_sendmsg+0x523/0x860 [ 733.878266][T14810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.878315][T14810] __sys_sendmsg+0x271/0x360 [ 733.878344][T14810] ? __pfx___sys_sendmsg+0x10/0x10 [ 733.878419][T14810] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 733.878453][T14810] ? lockdep_hardirqs_on+0x9d/0x150 [ 733.878482][T14810] __do_fast_syscall_32+0xb4/0x110 [ 733.878509][T14810] ? exc_page_fault+0x5f8/0x920 [ 733.878539][T14810] do_fast_syscall_32+0x34/0x80 [ 733.878566][T14810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 733.878593][T14810] RIP: 0023:0xf73fd579 [ 733.878611][T14810] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 733.878628][T14810] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 733.878651][T14810] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 733.878665][T14810] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.878678][T14810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 733.878690][T14810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 733.878702][T14810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 733.878731][T14810] [ 734.460132][T14798] raw-gadget.3 gadget.3: fail, usb_ep_queue returned -108 [ 734.580772][ T5890] usb 4-1: reset high-speed USB device number 94 using dummy_hcd [ 734.598445][T14818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3022'. [ 734.892951][T14825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3023'. [ 735.374213][ T5890] gspca_se401: read req failed req 0x06 error -19 [ 735.393554][ T5890] usb 4-1: USB disconnect, device number 94 [ 735.642270][T10538] usb 5-1: USB disconnect, device number 89 [ 735.892126][T14843] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (29) [ 736.007786][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'. [ 736.079189][ T5888] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 736.279096][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 736.294511][ T5888] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 736.321627][ T5888] usb 4-1: config 0 has no interface number 0 [ 736.327804][ T5888] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 736.359798][ T5888] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 736.376037][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3036'. [ 736.385228][ T5888] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 736.419665][ T5888] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 736.455927][ T5888] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.496580][ T5888] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 736.506544][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.515174][ T5888] usb 4-1: Product: syz [ 736.520783][ T5888] usb 4-1: Manufacturer: syz [ 736.525887][ T5888] usb 4-1: SerialNumber: syz [ 736.540077][ T5888] usb 4-1: config 0 descriptor?? [ 736.584642][T14859] pim6reg: entered allmulticast mode [ 736.765704][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.781277][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.838150][T14868] syz.4.3041 (14868): drop_caches: 0 [ 736.997235][ T5888] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 737.021692][ T5888] usb 4-1: USB disconnect, device number 95 [ 737.533804][T14876] delete_channel: no stack [ 737.758320][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3046'. [ 737.791704][ T5893] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 737.997390][ T5893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 738.015783][ T5893] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 738.046281][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 738.069172][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.085989][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'. [ 738.104203][T14886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3047'. [ 738.175453][T14876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 738.196247][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 738.243045][T14887] veth3: entered promiscuous mode [ 738.253622][T14887] bridge3: port 1(veth3) entered blocking state [ 738.264583][T14887] bridge3: port 1(veth3) entered disabled state [ 738.276709][T14887] veth3: entered allmulticast mode [ 740.363608][T14907] pimreg: entered allmulticast mode [ 741.255614][T14924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3062'. [ 741.331184][T10538] usb 3-1: USB disconnect, device number 77 [ 741.338868][ T5893] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 741.490036][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 741.515586][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 741.552403][ T5893] usb 5-1: config 7 has an invalid interface number: 29 but max is 1 [ 741.611648][ T5893] usb 5-1: config 7 has an invalid interface number: 29 but max is 1 [ 741.658517][ T5893] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 741.668297][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 741.681630][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 741.691734][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 741.700104][ T5893] usb 5-1: config 7 has no interface number 0 [ 741.706364][ T5893] usb 5-1: config 7 interface 29 has no altsetting 0 [ 741.715859][ T5893] usb 5-1: config 7 interface 29 has no altsetting 1 [ 741.728147][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 741.737194][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 741.759205][ T5893] usb 5-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=5e.f0 [ 741.768307][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.777360][ T5893] usb 5-1: Product: syz [ 741.781926][ T5893] usb 5-1: Manufacturer: syz [ 741.787299][ T5893] usb 5-1: SerialNumber: syz [ 742.057106][T14921] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3061'. [ 742.086881][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'. [ 742.681330][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 742.681351][ T30] audit: type=1326 audit(1744411344.557:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.2.3070" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 742.780061][T14946] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3070'. [ 742.936282][T14931] chnl_net:caif_netlink_parms(): no params data found [ 743.173420][T14931] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.182446][T14931] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.191655][T14931] bridge_slave_0: entered allmulticast mode [ 743.200238][T14931] bridge_slave_0: entered promiscuous mode [ 743.210610][T14931] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.218136][T14931] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.226898][T14931] bridge_slave_1: entered allmulticast mode [ 743.285296][T14956] delete_channel: no stack [ 743.348476][T14931] bridge_slave_1: entered promiscuous mode [ 743.504448][T14931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.539648][T14931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.672986][T14931] team0: Port device team_slave_0 added [ 743.685116][T14931] team0: Port device team_slave_1 added [ 743.796402][T14931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.805094][ T5846] Bluetooth: hci5: command tx timeout [ 743.815939][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.843942][T14931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.881241][T14931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.905973][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.933062][T14931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.238275][ T5893] usb 5-1: USB disconnect, device number 90 [ 744.269131][T10538] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 744.438230][T14931] hsr_slave_0: entered promiscuous mode [ 744.469897][T14931] hsr_slave_1: entered promiscuous mode [ 744.487513][T14931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.589355][T14931] Cannot create hsr debugfs directory [ 744.590805][T10538] usb 3-1: config 0 has no interfaces? [ 744.617691][T10538] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 744.635716][T10538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.645777][T10538] usb 3-1: Product: syz [ 744.674243][T10538] usb 3-1: Manufacturer: syz [ 744.684059][T10538] usb 3-1: SerialNumber: syz [ 744.716947][T10538] usb 3-1: config 0 descriptor?? [ 745.067105][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 745.353542][T14931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.685286][T14931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.880959][ T5846] Bluetooth: hci5: command tx timeout [ 746.137220][T14931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.539389][T14931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.958793][ T5890] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 746.976029][T14931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 747.020482][T14931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 747.080525][T14931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 747.120884][T14986] delete_channel: no stack [ 747.165528][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 747.170748][T14931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 747.243845][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.250434][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.260838][ T5890] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 747.270628][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.370909][ T5890] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 747.397931][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.446126][ T5890] usb 5-1: config 0 descriptor?? [ 747.476619][ T5890] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 747.593503][T14931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.708133][ T9775] usb 3-1: USB disconnect, device number 78 [ 747.760575][T14931] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.839727][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.846930][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.907166][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.914410][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.961902][ T5846] Bluetooth: hci5: command tx timeout [ 748.071209][T14931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.416691][T14931] veth0_vlan: entered promiscuous mode [ 748.475864][T14931] veth1_vlan: entered promiscuous mode [ 748.576497][T14931] veth0_macvtap: entered promiscuous mode [ 748.592164][T14998] loop6: detected capacity change from 0 to 524287999 [ 748.613185][T14931] veth1_macvtap: entered promiscuous mode [ 748.632490][T14998] buffer_io_error: 3 callbacks suppressed [ 748.632512][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.691740][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.710069][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.736833][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.764267][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.786780][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.800202][T14931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.820851][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.831485][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.843166][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.859101][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.865931][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.867414][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.880031][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.885924][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.904059][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.912202][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.914398][T14931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.945275][T14931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.956521][T14998] ldm_validate_partition_table(): Disk read failed. [ 748.962871][T14931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.976451][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.981024][T14931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.001303][T14931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.007328][T14998] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.020241][T14998] Dev loop6: unable to read RDB block 0 [ 749.035118][T14998] loop6: unable to read partition table [ 749.076061][T14998] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 749.106798][T14999] ldm_validate_partition_table(): Disk read failed. [ 749.133617][T14999] Dev loop6: unable to read RDB block 0 [ 749.141484][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.157977][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.170166][T14999] loop6: unable to read partition table [ 749.176099][T14999] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 749.257132][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.266472][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.281236][ T5212] ldm_validate_partition_table(): Disk read failed. [ 749.304309][ T5212] Dev loop6: unable to read RDB block 0 [ 749.320431][ T5212] loop6: unable to read partition table [ 749.494355][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3058'. [ 749.585901][ T30] audit: type=1326 audit(1744411351.457:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15003 comm="syz.3.3087" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 749.855801][ T10] usb 5-1: USB disconnect, device number 91 [ 750.039524][ T5846] Bluetooth: hci5: command tx timeout [ 750.107311][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3088'. [ 750.462925][T15014] @ÿ: renamed from veth0_vlan (while UP) [ 750.502149][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3091'. [ 750.536613][T15014] macsec0: entered promiscuous mode [ 751.189172][T15028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3097'. [ 751.553919][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'. [ 751.571442][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'. [ 752.390348][T10538] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 752.592695][T10538] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 752.613475][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.634866][T10538] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 752.646470][T10538] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 752.655676][T10538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.674196][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.696643][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.705845][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.717028][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.758452][T15038] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 752.773175][T10538] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 753.976973][T15052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.067033][T15052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.080778][T15042] chnl_net:caif_netlink_parms(): no params data found [ 754.199445][T10538] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 754.339281][T10538] usb 4-1: device descriptor read/64, error -71 [ 754.588746][T10538] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 754.739035][T10538] usb 4-1: device descriptor read/64, error -71 [ 754.769492][ T5846] Bluetooth: hci1: command tx timeout [ 754.810592][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.845012][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.884111][T15042] bridge_slave_0: entered allmulticast mode [ 754.901387][T10538] usb usb4-port1: attempt power cycle [ 754.911003][T15042] bridge_slave_0: entered promiscuous mode [ 754.944410][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.962320][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.976871][T15042] bridge_slave_1: entered allmulticast mode [ 755.002263][T15042] bridge_slave_1: entered promiscuous mode [ 755.158121][T15042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.256589][T15042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.292316][T10538] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 755.388062][T10538] usb 4-1: device descriptor read/8, error -71 [ 755.412374][T14140] usb 5-1: USB disconnect, device number 92 [ 755.419593][T15034] delete_channel: no stack [ 755.607705][T15042] team0: Port device team_slave_0 added [ 755.661032][T15042] team0: Port device team_slave_1 added [ 755.669241][T10538] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 755.709832][T10538] usb 4-1: device descriptor read/8, error -71 [ 755.864338][T10538] usb usb4-port1: unable to enumerate USB device [ 755.873899][T15042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.883139][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.932104][T15042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.004133][T15042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.040697][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.077311][T15042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.130700][ T30] audit: type=1800 audit(1744411357.977:1331): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3104" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 756.343617][T15042] hsr_slave_0: entered promiscuous mode [ 756.363847][T15042] hsr_slave_1: entered promiscuous mode [ 756.375050][T15042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.393810][T15042] Cannot create hsr debugfs directory [ 756.625312][T14140] IPVS: starting estimator thread 0... [ 756.770080][T15069] IPVS: using max 24 ests per chain, 57600 per kthread [ 756.840840][ T5846] Bluetooth: hci1: command tx timeout [ 757.399102][T15074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3108'. [ 758.048801][T14140] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 758.161145][T15086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3111'. [ 758.241448][T14140] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 758.281329][T14140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.851180][T14140] usb 5-1: config 0 descriptor?? [ 758.861659][T14140] cp210x 5-1:0.0: cp210x converter detected [ 758.919392][ T5846] Bluetooth: hci1: command tx timeout [ 759.272980][T14140] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 759.494601][T14997] net_ratelimit: 6 callbacks suppressed [ 759.494625][T14997] Set syz1 is full, maxelem 65536 reached [ 759.725478][T14140] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 759.746814][T14140] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 759.761808][T14140] usb 5-1: cp210x converter now attached to ttyUSB0 [ 759.916011][T15042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 760.998757][ T5846] Bluetooth: hci1: command tx timeout [ 761.040004][T15042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 761.051211][ T5893] usb 5-1: USB disconnect, device number 93 [ 761.060792][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 761.072499][ T5893] cp210x 5-1:0.0: device disconnected [ 761.134041][T15042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 761.228340][T15042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 761.310411][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 761.380227][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3114'. [ 761.524435][T15042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.584006][T15042] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.597111][T15107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3119'. [ 761.621954][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.629215][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.693627][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.700867][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.866686][T15042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.086703][T15042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.349487][ T5893] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 762.433393][T15042] veth0_vlan: entered promiscuous mode [ 762.491993][T15042] veth1_vlan: entered promiscuous mode [ 762.654130][T15042] veth0_macvtap: entered promiscuous mode [ 762.677122][T15042] veth1_macvtap: entered promiscuous mode [ 762.693081][ T5893] usb 4-1: config 0 has no interfaces? [ 762.719398][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 762.809378][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.819903][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.861372][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.861450][ T5893] usb 4-1: Product: syz [ 762.898872][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.922240][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.943896][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.967038][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.987321][ T5893] usb 4-1: Manufacturer: syz [ 763.011019][T15042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.028773][ T5893] usb 4-1: SerialNumber: syz [ 763.036780][ T5893] usb 4-1: config 0 descriptor?? [ 763.143005][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.190759][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.227831][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.510086][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.589521][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.606288][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.749025][T10538] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 763.759055][T15042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.856730][T15042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.083841][T10538] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 764.125465][T15042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.135177][T15042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.144325][T15042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.273434][T15136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3126'. [ 764.386145][T10538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.415841][T10538] usb 3-1: config 0 descriptor?? [ 764.490451][T10538] cp210x 3-1:0.0: cp210x converter detected [ 765.256904][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.265315][T10538] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 765.272967][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.349190][ T24] usb 4-1: USB disconnect, device number 100 [ 766.112331][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.206218][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.774066][T10538] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 766.796712][T10538] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 766.805076][ T47] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 766.834758][T10538] usb 3-1: cp210x converter now attached to ttyUSB0 [ 766.870416][T10538] usb 3-1: USB disconnect, device number 79 [ 766.917741][T10538] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 766.961747][T10538] cp210x 3-1:0.0: device disconnected [ 766.997738][ T47] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 767.037761][ T47] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.096224][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 767.096261][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.108411][ T47] hub 5-1:4.0: USB hub found [ 767.268055][T15157] lo: entered promiscuous mode [ 767.526286][ T47] hub 5-1:4.0: 12 ports detected [ 767.539527][ T47] usb 5-1: selecting invalid altsetting 1 [ 767.545326][ T47] hub 5-1:4.0: Using single TT (err -22) [ 767.562942][ T47] hub 5-1:4.0: insufficient power available to use all downstream ports [ 767.639239][T15166] delete_channel: no stack [ 767.749132][T15157] lo: left promiscuous mode [ 768.009157][T14140] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 768.017209][ T5893] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 768.188752][T14140] usb 3-1: device descriptor read/64, error -71 [ 768.263483][ T5893] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 768.275846][ T5893] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 768.303500][ T5893] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 768.333061][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.388384][T15166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 768.438890][T14140] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 768.449300][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 768.580258][T14140] usb 3-1: device descriptor read/64, error -71 [ 768.770667][T14140] usb usb3-port1: attempt power cycle [ 769.083727][ T5889] hub 5-1:4.0: hub_ext_port_status failed (err = -32) [ 769.138893][T14140] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 769.169570][T14140] usb 3-1: device descriptor read/8, error -71 [ 769.431231][T14140] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 769.459929][T14140] usb 3-1: device descriptor read/8, error -71 [ 769.579247][T14140] usb usb3-port1: unable to enumerate USB device [ 769.594717][T15145] dccp_close: ABORT with 992 bytes unread [ 769.719900][T14140] usb 5-1: USB disconnect, device number 94 [ 771.019750][ T10] IPVS: starting estimator thread 0... [ 771.066680][ T10] usb 4-1: USB disconnect, device number 101 [ 771.262761][T15185] IPVS: using max 37 ests per chain, 88800 per kthread [ 771.900290][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 771.933914][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 773.324034][T15215] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3149'. [ 773.429164][T15215] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 773.605972][T15224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3151'. [ 774.658759][ T5893] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 774.864108][ T5893] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 774.890074][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.945476][ T5893] usb 3-1: Product: syz [ 774.968760][ T5893] usb 3-1: Manufacturer: syz [ 774.984804][ T5893] usb 3-1: SerialNumber: syz [ 775.022402][ T5893] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 775.038516][T14140] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 775.564983][ T10] usb 3-1: USB disconnect, device number 84 [ 776.296804][T15248] RDS: rds_bind could not find a transport for fe80::16, load rds_tcp or rds_rdma? [ 776.358752][T14140] usb 3-1: Service connection timeout for: 256 [ 776.408866][T14140] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 776.434184][T14140] ath9k_htc: Failed to initialize the device [ 776.477595][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 776.810311][ T10] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 776.905631][T10538] IPVS: starting estimator thread 0... [ 776.971082][ T10] usb 3-1: config 0 has no interfaces? [ 777.099225][T15257] IPVS: using max 37 ests per chain, 88800 per kthread [ 777.111603][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 777.147321][ T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 777.196243][ T10] usb 3-1: Product: syz [ 777.217112][ T10] usb 3-1: Manufacturer: syz [ 777.237125][ T10] usb 3-1: SerialNumber: syz [ 777.257759][ T10] usb 3-1: config 0 descriptor?? [ 777.872112][ T10] usb 3-1: USB disconnect, device number 85 [ 778.369425][T15265] loop2: detected capacity change from 0 to 7 [ 778.419479][T15265] Dev loop2: unable to read RDB block 7 [ 778.439440][T15265] loop2: unable to read partition table [ 778.474541][T15265] loop2: partition table beyond EOD, truncated [ 778.481293][T15265] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 779.387244][T15285] [ 779.389626][T15285] ====================================================== [ 779.396650][T15285] WARNING: possible circular locking dependency detected [ 779.403690][T15285] 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 Not tainted [ 779.410793][T15285] ------------------------------------------------------ [ 779.417811][T15285] syz.3.3171/15285 is trying to acquire lock: [ 779.423877][T15285] ffff88807d2fc6f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_notifier+0xcf/0x230 [ 779.432339][T15285] [ 779.432339][T15285] but task is already holding lock: [ 779.439712][T15285] ffff88805fc3bc58 (&net->xdp.lock){+.+.}-{4:4}, at: xsk_notifier+0x8b/0x230 [ 779.448526][T15285] [ 779.448526][T15285] which lock already depends on the new lock. [ 779.448526][T15285] [ 779.458933][T15285] [ 779.458933][T15285] the existing dependency chain (in reverse order) is: [ 779.467956][T15285] [ 779.467956][T15285] -> #3 (&net->xdp.lock){+.+.}-{4:4}: [ 779.475530][T15285] lock_acquire+0x116/0x2f0 [ 779.480585][T15285] __mutex_lock+0x1a5/0x10c0 [ 779.485704][T15285] xsk_notifier+0x8b/0x230 [ 779.490641][T15285] notifier_call_chain+0x1a5/0x3f0 [ 779.496277][T15285] unregister_netdevice_many_notify+0x1572/0x2510 [ 779.503219][T15285] unregister_netdevice_queue+0x383/0x400 [ 779.509466][T15285] _cfg80211_unregister_wdev+0x163/0x590 [ 779.515629][T15285] ieee80211_remove_interfaces+0x4f1/0x700 [ 779.521960][T15285] ieee80211_unregister_hw+0x5d/0x2c0 [ 779.527860][T15285] mac80211_hwsim_del_radio+0x2c6/0x4c0 [ 779.533935][T15285] hwsim_exit_net+0x5c3/0x670 [ 779.539142][T15285] cleanup_net+0x814/0xd60 [ 779.544088][T15285] process_scheduled_works+0xac3/0x18e0 [ 779.550191][T15285] worker_thread+0x870/0xd50 [ 779.555309][T15285] kthread+0x7b7/0x940 [ 779.559926][T15285] ret_from_fork+0x4b/0x80 [ 779.564867][T15285] ret_from_fork_asm+0x1a/0x30 [ 779.570153][T15285] [ 779.570153][T15285] -> #2 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 779.577934][T15285] lock_acquire+0x116/0x2f0 [ 779.582973][T15285] __mutex_lock+0x1a5/0x10c0 [ 779.588095][T15285] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 779.594687][T15285] notifier_call_chain+0x1a5/0x3f0 [ 779.600326][T15285] __dev_close_many+0x15d/0x760 [ 779.605709][T15285] dev_close_many+0x250/0x4c0 [ 779.610913][T15285] unregister_netdevice_many_notify+0x628/0x2510 [ 779.617784][T15285] default_device_exit_batch+0x7ff/0x880 [ 779.623957][T15285] cleanup_net+0x8af/0xd60 [ 779.628924][T15285] process_scheduled_works+0xac3/0x18e0 [ 779.635000][T15285] worker_thread+0x870/0xd50 [ 779.640120][T15285] kthread+0x7b7/0x940 [ 779.644719][T15285] ret_from_fork+0x4b/0x80 [ 779.649686][T15285] ret_from_fork_asm+0x1a/0x30 [ 779.654977][T15285] [ 779.654977][T15285] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 779.663429][T15285] lock_acquire+0x116/0x2f0 [ 779.668483][T15285] __mutex_lock+0x1a5/0x10c0 [ 779.673621][T15285] xsk_bind+0x2fd/0xfb0 [ 779.678310][T15285] __sys_bind+0x1de/0x290 [ 779.683177][T15285] __ia32_sys_bind+0x7a/0x90 [ 779.688303][T15285] __do_fast_syscall_32+0xb4/0x110 [ 779.693946][T15285] do_fast_syscall_32+0x34/0x80 [ 779.699328][T15285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.706180][T15285] [ 779.706180][T15285] -> #0 (&xs->mutex){+.+.}-{4:4}: [ 779.713405][T15285] validate_chain+0xa69/0x24e0 [ 779.718708][T15285] __lock_acquire+0xad5/0xd80 [ 779.723912][T15285] lock_acquire+0x116/0x2f0 [ 779.728947][T15285] __mutex_lock+0x1a5/0x10c0 [ 779.734071][T15285] xsk_notifier+0xcf/0x230 [ 779.739013][T15285] notifier_call_chain+0x1a5/0x3f0 [ 779.744649][T15285] unregister_netdevice_many_notify+0x1572/0x2510 [ 779.751605][T15285] unregister_netdevice_queue+0x383/0x400 [ 779.757854][T15285] ip_tunnel_ctl+0x1f6/0xc40 [ 779.762971][T15285] ip_tunnel_siocdevprivate+0x107/0x1a0 [ 779.769042][T15285] dev_ifsioc+0xc04/0x1010 [ 779.774008][T15285] dev_ioctl+0x8c3/0x1380 [ 779.778873][T15285] sock_ioctl+0x819/0x900 [ 779.783746][T15285] compat_sock_ioctl+0x293/0xf50 [ 779.789222][T15285] __se_compat_sys_ioctl+0x50e/0xc30 [ 779.795036][T15285] __do_fast_syscall_32+0xb4/0x110 [ 779.800677][T15285] do_fast_syscall_32+0x34/0x80 [ 779.806055][T15285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.812933][T15285] [ 779.812933][T15285] other info that might help us debug this: [ 779.812933][T15285] [ 779.823164][T15285] Chain exists of: [ 779.823164][T15285] &xs->mutex --> &rdev->wiphy.mtx --> &net->xdp.lock [ 779.823164][T15285] [ 779.835784][T15285] Possible unsafe locking scenario: [ 779.835784][T15285] [ 779.843241][T15285] CPU0 CPU1 [ 779.848606][T15285] ---- ---- [ 779.853981][T15285] lock(&net->xdp.lock); [ 779.858320][T15285] lock(&rdev->wiphy.mtx); [ 779.865351][T15285] lock(&net->xdp.lock); [ 779.872208][T15285] lock(&xs->mutex); [ 779.876225][T15285] [ 779.876225][T15285] *** DEADLOCK *** [ 779.876225][T15285] [ 779.884373][T15285] 2 locks held by syz.3.3171/15285: [ 779.889679][T15285] #0: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x8b0/0x1380 [ 779.898559][T15285] #1: ffff88805fc3bc58 (&net->xdp.lock){+.+.}-{4:4}, at: xsk_notifier+0x8b/0x230 [ 779.907847][T15285] [ 779.907847][T15285] stack backtrace: [ 779.913747][T15285] CPU: 0 UID: 0 PID: 15285 Comm: syz.3.3171 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 779.913772][T15285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 779.913784][T15285] Call Trace: [ 779.913792][T15285] [ 779.913800][T15285] dump_stack_lvl+0x241/0x360 [ 779.913832][T15285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.913867][T15285] ? __pfx__printk+0x10/0x10 [ 779.913891][T15285] ? print_lock+0x171/0x1a0 [ 779.913915][T15285] print_circular_bug+0x2e1/0x300 [ 779.913940][T15285] check_noncircular+0x142/0x160 [ 779.913966][T15285] validate_chain+0xa69/0x24e0 [ 779.913992][T15285] ? look_up_lock_class+0x7b/0x170 [ 779.914014][T15285] ? register_lock_class+0x54/0x330 [ 779.914034][T15285] __lock_acquire+0xad5/0xd80 [ 779.914055][T15285] lock_acquire+0x116/0x2f0 [ 779.914072][T15285] ? xsk_notifier+0xcf/0x230 [ 779.914094][T15285] __mutex_lock+0x1a5/0x10c0 [ 779.914115][T15285] ? xsk_notifier+0xcf/0x230 [ 779.914133][T15285] ? __local_bh_enable_ip+0x168/0x200 [ 779.914151][T15285] ? lockdep_hardirqs_on+0x9d/0x150 [ 779.914171][T15285] ? __local_bh_enable_ip+0x168/0x200 [ 779.914189][T15285] ? xsk_notifier+0xcf/0x230 [ 779.914206][T15285] ? do_raw_spin_unlock+0x13c/0x8b0 [ 779.914231][T15285] ? __pfx___mutex_lock+0x10/0x10 [ 779.914255][T15285] ? rt_flush_dev+0x480/0x4b0 [ 779.914275][T15285] xsk_notifier+0xcf/0x230 [ 779.914295][T15285] notifier_call_chain+0x1a5/0x3f0 [ 779.914319][T15285] unregister_netdevice_many_notify+0x1572/0x2510 [ 779.914343][T15285] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 779.914376][T15285] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 779.914403][T15285] ? aa_get_newest_label+0x101/0x6f0 [ 779.914431][T15285] ? __pfx_aa_get_newest_label+0x10/0x10 [ 779.914458][T15285] unregister_netdevice_queue+0x383/0x400 [ 779.914480][T15285] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 779.914501][T15285] ? bpf_lsm_capable+0x9/0x10 [ 779.914526][T15285] ip_tunnel_ctl+0x1f6/0xc40 [ 779.914547][T15285] ip_tunnel_siocdevprivate+0x107/0x1a0 [ 779.914568][T15285] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 779.914592][T15285] ? full_name_hash+0x93/0xe0 [ 779.914613][T15285] dev_ifsioc+0xc04/0x1010 [ 779.914637][T15285] ? dev_load+0x21/0x1f0 [ 779.914660][T15285] dev_ioctl+0x8c3/0x1380 [ 779.914685][T15285] sock_ioctl+0x819/0x900 [ 779.914707][T15285] ? __pfx_sock_ioctl+0x10/0x10 [ 779.914736][T15285] compat_sock_ioctl+0x293/0xf50 [ 779.914760][T15285] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 779.914783][T15285] ? __fget_files+0x2a/0x420 [ 779.914799][T15285] ? __fget_files+0x2a/0x420 [ 779.914815][T15285] ? __fget_files+0x2a/0x420 [ 779.914833][T15285] __se_compat_sys_ioctl+0x50e/0xc30 [ 779.914862][T15285] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 779.914893][T15285] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 779.914916][T15285] ? lockdep_hardirqs_on+0x9d/0x150 [ 779.914938][T15285] __do_fast_syscall_32+0xb4/0x110 [ 779.914960][T15285] ? ret_from_fork_asm+0x1a/0x30 [ 779.914976][T15285] ? lockdep_hardirqs_on+0x9d/0x150 [ 779.914998][T15285] do_fast_syscall_32+0x34/0x80 [ 779.915020][T15285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.915043][T15285] RIP: 0023:0xf744d579 [ 779.915060][T15285] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 779.915076][T15285] RSP: 002b:00000000f50b555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 779.915096][T15285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f2 [ 779.915109][T15285] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.915120][T15285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.915131][T15285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 779.915142][T15285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.915160][T15285] [ 780.293068][ C0] vkms_vblank_simulate: vblank timer overrun