last executing test programs: 2m8.985056052s ago: executing program 2 (id=4165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@local}, {@in6=@empty, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000019000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000380)='contention_end\x00', r3}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400b99f000000000000c0"], 0x114}], 0x1}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r9 = fanotify_init(0x4, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r9, 0x101, 0x20, r10, 0x0) openat(r10, &(0x7f0000000080)='./file0\x00', 0x840, 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r11 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r11, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x22, 0xa3, 0xbb, 0x40, 0x921, 0x1200, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x74, 0x0, 0x0, 0xb, 0x4b, 0x9}}]}}]}}, 0x0) 2m3.468257904s ago: executing program 2 (id=4175): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x17, 0x1}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x40840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/121, 0x79, 0x1, &(0x7f0000000340)=""/194, 0xc2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0x1}]}, 0x20}}, 0x68080) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=0x2, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 2m2.992824991s ago: executing program 2 (id=4178): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x1, 0x0, 0x5}) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x40840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/121, 0x79, 0x1, &(0x7f0000000340)=""/194, 0xc2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0x1}]}, 0x20}}, 0x68080) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=0x2, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 2m1.935300459s ago: executing program 2 (id=4179): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)=ANY=[@ANYBLOB="34000000000801014000000000000000000000000900010073797a31000000000600020000040004800500030011000000"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x100, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x83}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x55e9}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed3b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3d38d31d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x9d75e855227d9569}, 0x4004) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x9, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) 1m58.219167663s ago: executing program 2 (id=4181): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) memfd_secret(0x0) r3 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_labels_list(r3, &(0x7f0000000040)=ANY=[], 0x2) 1m57.147290347s ago: executing program 2 (id=4186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000001a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x40) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000eaffffff010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r8 = syz_clone3(&(0x7f0000000400)={0x100000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x3d}, &(0x7f0000000940)=""/4096, 0x1000, &(0x7f0000000380)=""/71, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) syz_open_procfs$namespace(r8, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500000000000000"], 0x14}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'syzkaller\x00'}], 0xa, "b218515f8634e7b119a6a4f3789a80ea902df1c5e4079aaf7a791de255e3fd35ea168a"}, 0x39) r10 = socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x0, 0x0) r11 = syz_usb_connect$cdc_ecm(0x2, 0xd5, &(0x7f0000000540)={{0x12, 0x1, 0x211, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x1, 0x7f, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "c305"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xa2e3, 0x9, 0xfffc, 0x7}, [@mdlm_detail={0x49, 0x24, 0x13, 0x8, "6c1947277d26121ea2d6bf9743934dd87a0d79c1b7fcaa9789e30bd7fc907cbee08ccf86688d24bf87ef2ea86ec9728011bbf34b33d70a5966d8787d48c5117fc1e0748e9c"}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x7, 0x1, 0xd}, @dmm={0x7, 0x24, 0x14, 0xfffe, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x400, [0x5, 0xfff, 0x5, 0x0, 0x0, 0x2]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x6, 0x40, 0x9, 0x1, 0x50}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x5, 0xc}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x4, 0xa}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x40, 0x4, 0x10, 0x20, 0x3a}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x28, "38c17117692a3c73db33c5d8cd5da437"}]}, 0x2, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x424}}]}) syz_usb_control_io$cdc_ecm(r11, &(0x7f0000000780)={0x14, &(0x7f0000000700)={0x80, 0x5, 0x6, {0x6, 0x22, "44366daf"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f00000007c0)={0x40, 0x0, 0x2d, "e657ba34def89556938b2ca2dbc5dbecf03dabd64a1a71714eee8d293aa3761ed1faee10826691f16c8026c516"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x85}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f5, &(0x7f00000001c0)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYBLOB="000000feffffffffffffff00fcffff51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1m36.306926564s ago: executing program 4 (id=4219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 1m36.085262324s ago: executing program 4 (id=4220): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x13) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r4 = memfd_secret(0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x21011, r4, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="9300"], 0x2) ioctl$SG_GET_SG_TABLESIZE(r3, 0x40046f41, &(0x7f00000000c0)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='cramfs\x00', 0x0, 0x0) 1m34.992754082s ago: executing program 4 (id=4221): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x1, 0x0, 0x5}) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x17, 0x1}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x40840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/121, 0x79, 0x1, &(0x7f0000000340)=""/194, 0xc2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0x1}]}, 0x20}}, 0x68080) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=0x2, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 1m34.14997589s ago: executing program 4 (id=4223): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x1, 0x0, 0x5}) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x17, 0x1}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x40840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/121, 0x79, 0x1, &(0x7f0000000340)=""/194, 0xc2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x68080) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=0x2, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000200), &(0x7f0000000300)=[r8], &(0x7f0000000340)}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 1m31.23830252s ago: executing program 4 (id=4228): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x64, r7, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x64}}, 0x20004800) epoll_wait(r6, &(0x7f0000000380)=[{}], 0x2, 0x1000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m27.57812201s ago: executing program 4 (id=4231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x84, 0x24, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0x10, 0xfff2}, {0xc, 0xfff3}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9b, 0x7, 0xfffffffc, 0x0, 0x1, 0x1ff, 0x7}}, {0x12, 0x2, [0x9, 0x80, 0x6, 0x7, 0x4, 0x9, 0x4]}}, {{0x1c, 0x1, {0xe, 0xc1, 0x6, 0xbfc, 0x2, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x84}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000540)}}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000200000006000000000000001400078008000b00000000000800084000000000"], 0x60}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000d5a0b72e307c334e97e3", @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000"], 0x14}}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth0_to_bridge\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xac}, 'veth0_vlan\x00'}}, 0x1e) close(r7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 1m25.167115868s ago: executing program 0 (id=4235): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x1c, 0x110, 0xd, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{}]}]}}}], 0x20}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x6f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x4321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20"], 0xfebe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000280)=""/40, &(0x7f0000000040)=0x28) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) r5 = syz_open_dev$mouse(&(0x7f0000000080), 0x4, 0x1) getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000000c0)=""/7, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x181800) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m24.138572714s ago: executing program 0 (id=4237): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x1c, 0x110, 0xd, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{}]}]}}}], 0x20}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x6f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x4321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000280)=""/40, &(0x7f0000000040)=0x28) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) r5 = syz_open_dev$mouse(&(0x7f0000000080), 0x4, 0x1) getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000000c0)=""/7, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x181800) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m21.004083483s ago: executing program 0 (id=4238): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000d46420000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='9p_client_res\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x80) pread64(r6, &(0x7f0000000080)=""/75, 0x8e, 0x0) splice(r1, 0x0, r2, 0x0, 0x1fffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000140)={0x0, 0x100, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, [0xfffffffe, 0x0, 0xf]}) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r8 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="02d12865e3cf890ad37dc6c1db039a5130a98c4cf74558b1dcc6c5a6cd057559f1bf3f917c580acbb7ff7741237d7fea1ff2abe3cbd52ee519008c8e7fb8acdad7edd934ea015e0134061f2ca962d438888fe9979f735d401e39f8e4b9df74c909f944b428c76b7f21060000007b25e4b0556e893f664f46072a17e08937ce132565b173dc14c424abcd8d3906266278e09620ece965c6b05beeb9ba67677071b0e47116640412d1e64373e2264e884904d6c54c30f1c4849773bf486326560ca87ab63f09dfa3ed8f04d9ee6a7c4448d4a601f288f77461f28d0d685825441a0fbbc065ec927b8fdf898d2e905888bddcd145c87668c86bba", 0xf9, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r9, r7, r8}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 1m19.328550088s ago: executing program 0 (id=4241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000d46420000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='9p_client_res\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x80) pread64(r5, &(0x7f0000000080)=""/75, 0x8e, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="02d12865e3cf890ad37dc6c1db039a5130a98c4cf74558b1dcc6c5a6cd057559f1bf3f917c580acbb7ff7741237d7fea1ff2abe3cbd52ee519008c8e7fb8acdad7edd934ea015e0134061f2ca962d438888fe9979f735d401e39f8e4b9df74c909f944b428c76b7f21060000007b25e4b0556e893f664f46072a17e08937ce132565b173dc14c424abcd8d3906266278e09620ece965c6b05beeb9ba67677071b0e47116640412d1e64373e2264e884904d6c54c30f1c4849773bf486326560ca87ab63f09dfa3ed8f04d9ee6a7c4448d4a601f288f77461f28d0d685825441a0fbbc065ec927b8fdf898d2e905888bddcd145c87668c86bba", 0xf9, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r8, r6, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 1m12.762895389s ago: executing program 0 (id=4245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x20004800) epoll_wait(r6, 0x0, 0x0, 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m5.932438366s ago: executing program 0 (id=4248): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x4, 0x3}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x4000000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000340)={0x48}) r7 = socket$inet6(0xa, 0x6, 0x0) listen(r7, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) dup(r5) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) 7.686282316s ago: executing program 3 (id=4321): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 7.508491583s ago: executing program 3 (id=4322): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000029000000020000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100010000"], 0x6b}, 0xfc00) 7.356711597s ago: executing program 3 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 6.292562648s ago: executing program 3 (id=4325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d704046"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0), 0x10) accept4(r3, 0x0, 0x0, 0x800) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}}, 0x0) close(0xffffffffffffffff) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r8, 0xc08c5114, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(r9, 0x0, 0x0) 6.217754236s ago: executing program 1 (id=4326): openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_io_uring_setup(0x22e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="9930b90f1ff0", 0x6}], 0x1}) r4 = syz_open_dev$video(&(0x7f0000002c40), 0x7fffffff, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f00000001c0)={0x1}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x20000c}, 0x1c) listen(r5, 0x7f) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000002c0)=0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x8600, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000380)={0x7, 0x0, 0x0, "5af93c8c63e38d74c9f2ad5d0d27da9b3c4138ce78c99350da069000ca9acc48", 0x3436324d}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00') io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 5.222645534s ago: executing program 1 (id=4327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='1,N,'], 0x31) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000019640)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xff000000, 'vxcan1\x00', 'xfrm0\x00', {}, {0xff}, 0x6, 0x3, 0x1}, 0x0, 0xb8, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x401, 0x4, 0x3ff, 'pptp\x00', 'syz1\x00', {0x4}}}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0xffffff00, 0xff000000, 'bond0\x00', 'veth0_macvtap\x00', {}, {}, 0x67, 0x1, 0x2d}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@addrtype={{0x30}, {0x18, 0x201, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x2, 0x8, [0x29, 0xf, 0x2, 0xe, 0x11, 0x3b, 0xb, 0x14, 0x15, 0x40, 0x31, 0x3f, 0x1b, 0x25, 0x1c, 0x13], 0x1, 0x404, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000040000000000c00000008080000", @ANYRES32, @ANYBLOB="0a000600080211000000000010005080050002000500000004000600"], 0x38}}, 0x0) 4.504772943s ago: executing program 1 (id=4328): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/124, 0x1a, 0x0, 0x2, 0x2}}, 0x48) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in=@multicast1}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) 4.266644956s ago: executing program 1 (id=4329): syz_usb_connect(0x3, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x20, 0xad, 0x16, 0x20, 0x7c0, 0x158b, 0xd096, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7f, 0x7f, 0x0, 0x4, [{{0x9, 0x4, 0xb3, 0x1, 0x1, 0x4f, 0x7e, 0xc2, 0x2, [], [{{0x9, 0x5, 0x9e3c19b1c3692ae7, 0x3, 0x3ff, 0x6, 0x80, 0x6}}]}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hpfs\x00', 0x0, &(0x7f0000000240)) 3.027597604s ago: executing program 3 (id=4330): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x2}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r5], 0x398}}, 0x0) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="b0000200008405000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072000500000000000000002000000000000000000000000000000000000000000000000000000000000000001f000000e4b30000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00group_id'], 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x0) r12 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r12, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_elf64(r12, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) 2.401633287s ago: executing program 1 (id=4331): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={0x0}}, 0x20004800) epoll_wait(r6, &(0x7f0000000380)=[{}], 0x2, 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 522.814225ms ago: executing program 3 (id=4332): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1, 0xc81, 0x0) (fail_nth: 2) 0s ago: executing program 1 (id=4333): openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(0x0, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x40}, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./control\x00', 0x0) openat(r6, &(0x7f0000000280)='./control\x00', 0x470082, 0x0) unlinkat(r6, &(0x7f0000000140)='./control\x00', 0x200) socket$inet6_dccp(0xa, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) kernel console output (not intermixed with test programs): ! [ 2611.125127][T26283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.143848][T26283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.157851][T26283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.168794][T26283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.182245][T26283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2611.191833][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3972'. [ 2611.230446][T26278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.247514][T26278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.264392][T26278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.283185][T26278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.303482][T26278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.314272][ T5236] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2611.331614][T26278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.342977][T26278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.363711][T26278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.381288][T26278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.392300][T26278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.411949][T26278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2611.465355][T26283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.475597][T26283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.485535][T26283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.494751][T26283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.517471][ T5236] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2611.526034][ T5236] usb 2-1: config 0 has no interface number 0 [ 2611.535102][T26278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.547439][T26278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.556573][T26278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.567227][T26278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.567432][ T5236] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2611.615775][T26437] veth0_vlan: entered promiscuous mode [ 2611.623262][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.663032][ T5236] usb 2-1: Product: syz [ 2611.668588][ T5236] usb 2-1: Manufacturer: syz [ 2611.673220][ T5236] usb 2-1: SerialNumber: syz [ 2611.677855][T26437] veth1_vlan: entered promiscuous mode [ 2611.686348][ T5236] usb 2-1: config 0 descriptor?? [ 2611.699686][ T5236] belkin_sa 2-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2611.716417][ T5236] usb 2-1: bcdDevice: fd7d, bfc: 0 [ 2611.751355][ T5236] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2611.901932][T14328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2611.912428][T26437] veth0_macvtap: entered promiscuous mode [ 2611.916672][T14328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2611.955840][T26437] veth1_macvtap: entered promiscuous mode [ 2611.977815][T14340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2612.001951][T14340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2612.012626][ T5236] usb 2-1: USB disconnect, device number 106 [ 2612.022471][T14326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2612.039703][T14326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2612.044295][ T5236] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2612.084365][ T5236] belkin_sa 2-1:0.116: device disconnected [ 2612.119490][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.132161][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.143329][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.155559][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.166815][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.177837][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.187947][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.198446][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.208668][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.221535][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.231510][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.242380][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.254823][T26437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2612.287617][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2612.291080][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.321636][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2612.323667][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.343753][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.356838][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.373521][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.393186][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.403450][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.414828][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.426187][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.437561][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.449007][T26437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.459975][T26437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.472193][T26437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2612.501173][T26437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.529526][T26437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.539593][T26437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.549488][T26437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.935725][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 2612.938950][T26689] syz.4.3970: attempt to access beyond end of device [ 2612.938950][T26689] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2612.946083][T20205] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2612.995633][T26689] SQUASHFS error: Failed to read block 0x0: -5 [ 2613.021182][T26689] unable to read squashfs_super_block [ 2613.071968][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2613.105979][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2613.165805][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2613.186817][T20205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2613.198780][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2613.207492][T20205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2613.221030][T20205] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2613.232762][T20205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.271600][T20205] usb 3-1: config 0 descriptor?? [ 2613.283607][T23129] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2613.519084][T23129] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2613.555455][T23129] usb 2-1: config 0 has no interface number 0 [ 2613.561470][T23129] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2613.561505][T23129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2613.561528][T23129] usb 2-1: Product: syz [ 2613.561544][T23129] usb 2-1: Manufacturer: syz [ 2613.561560][T23129] usb 2-1: SerialNumber: syz [ 2613.573800][T23129] usb 2-1: config 0 descriptor?? [ 2613.579466][T23129] belkin_sa 2-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2613.580236][T23129] usb 2-1: bcdDevice: fd7d, bfc: 0 [ 2613.588627][T23129] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2613.634564][T26700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2613.715578][T26690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2613.718585][T26690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2613.843210][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'. [ 2613.869021][T23129] usb 2-1: USB disconnect, device number 107 [ 2613.883831][T26704] syz.3.3882: attempt to access beyond end of device [ 2613.883831][T26704] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2613.884670][T26704] SQUASHFS error: Failed to read block 0x0: -5 [ 2613.884732][T26704] unable to read squashfs_super_block [ 2613.896928][T23129] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2613.897518][T23129] belkin_sa 2-1:0.116: device disconnected [ 2614.975525][T26707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2615.972886][T26717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4001'. [ 2616.109778][T20205] usbhid 3-1:0.0: can't add hid device: -71 [ 2616.125540][T26707] syz.0.3999: attempt to access beyond end of device [ 2616.125540][T26707] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2616.171926][T20205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2616.248651][T26707] SQUASHFS error: Failed to read block 0x0: -5 [ 2616.312512][T20205] usb 3-1: USB disconnect, device number 80 [ 2616.386388][T26707] unable to read squashfs_super_block [ 2616.907883][T26725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4003'. [ 2617.295068][T14836] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2617.349667][T26731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2617.373476][ T5319] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2617.466228][T26731] syz.3.4005: attempt to access beyond end of device [ 2617.466228][T26731] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2617.484430][T26731] SQUASHFS error: Failed to read block 0x0: -5 [ 2617.497959][T14836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2617.511722][T14836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2617.526815][T26723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2617.539309][T26731] unable to read squashfs_super_block [ 2617.549187][T14836] usb 2-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2617.585641][ T5319] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 2617.606519][ T5319] usb 5-1: config 0 has no interface number 0 [ 2617.624881][T14836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.661501][ T5319] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2617.674055][T26723] syz.2.4002: attempt to access beyond end of device [ 2617.674055][T26723] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2617.687816][T14836] usb 2-1: config 0 descriptor?? [ 2617.696628][T26723] SQUASHFS error: Failed to read block 0x0: -5 [ 2617.706015][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.725589][T26723] unable to read squashfs_super_block [ 2617.760752][ T5319] usb 5-1: Product: syz [ 2617.793658][ T5319] usb 5-1: Manufacturer: syz [ 2617.817818][ T5319] usb 5-1: SerialNumber: syz [ 2617.848950][ T5319] usb 5-1: config 0 descriptor?? [ 2617.864419][ T5319] belkin_sa 5-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2617.993533][ T5319] usb 5-1: bcdDevice: fd7d, bfc: 0 [ 2618.058454][ T5319] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2618.240679][T26730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2618.356900][T26730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2618.453235][T19675] usb 5-1: USB disconnect, device number 87 [ 2618.479608][T19675] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2618.509068][T19675] belkin_sa 5-1:0.116: device disconnected [ 2619.226805][T26074] udevd[26074]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2619.624050][ T5236] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2619.644533][T26744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2619.836403][ T5236] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2619.845809][ T5236] usb 4-1: config 0 has no interface number 0 [ 2619.875746][ T5236] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2619.913176][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.936728][ T5236] usb 4-1: Product: syz [ 2619.939890][T26752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2619.942386][T26744] syz.2.4007: attempt to access beyond end of device [ 2619.942386][T26744] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2619.962660][ T5236] usb 4-1: Manufacturer: syz [ 2619.974163][ T5236] usb 4-1: SerialNumber: syz [ 2619.981554][ T5236] usb 4-1: config 0 descriptor?? [ 2619.995786][ T5236] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2620.001219][T26752] syz.4.4009: attempt to access beyond end of device [ 2620.001219][T26752] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2620.019587][T26752] SQUASHFS error: Failed to read block 0x0: -5 [ 2620.029704][T26752] unable to read squashfs_super_block [ 2620.030728][ T5236] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2620.050916][T14836] usbhid 2-1:0.0: can't add hid device: -71 [ 2620.051642][T26744] SQUASHFS error: Failed to read block 0x0: -5 [ 2620.097551][T26744] unable to read squashfs_super_block [ 2620.108357][T14836] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2620.109880][ T5236] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2620.139235][T14836] usb 2-1: USB disconnect, device number 108 [ 2620.290236][ T5319] usb 4-1: USB disconnect, device number 93 [ 2620.318662][ T5319] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2622.572159][ T5319] belkin_sa 4-1:0.116: device disconnected [ 2623.487947][T26766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4012'. [ 2623.509165][T20437] Bluetooth: hci2: command 0x0406 tx timeout [ 2624.812358][ T5325] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2624.864228][T14836] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2625.238983][ T5325] usb 5-1: Using ep0 maxpacket: 32 [ 2625.256542][T14836] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2625.276068][ T5325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2625.301237][T14836] usb 4-1: config 0 has no interface number 0 [ 2625.314290][ T5325] usb 5-1: config 0 has no interfaces? [ 2626.226260][T14836] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2626.236117][T14836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.244863][T14836] usb 4-1: Product: syz [ 2626.249430][T14836] usb 4-1: Manufacturer: syz [ 2626.259480][ T5325] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2626.269569][ T5325] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2626.278936][T14836] usb 4-1: config 0 descriptor?? [ 2626.283961][ T5325] usb 5-1: Product: syz [ 2626.288141][ T5325] usb 5-1: Manufacturer: syz [ 2626.292756][ T5325] usb 5-1: SerialNumber: syz [ 2626.298013][T14836] usb 4-1: can't set config #0, error -71 [ 2626.312492][T14836] usb 4-1: USB disconnect, device number 94 [ 2626.327724][T26786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 2626.339818][ T5325] usb 5-1: config 0 descriptor?? [ 2626.585557][T19675] usb 5-1: USB disconnect, device number 88 [ 2626.733568][T26577] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2626.946326][T26577] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 2626.981832][T26577] usb 3-1: config 0 has no interface number 0 [ 2626.997933][T26792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2627.019586][T26577] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2627.051426][T26577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.078232][T26800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2627.087425][T26577] usb 3-1: Product: syz [ 2627.091632][T26577] usb 3-1: Manufacturer: syz [ 2627.099963][T26577] usb 3-1: SerialNumber: syz [ 2627.139786][T26577] usb 3-1: config 0 descriptor?? [ 2627.168205][T26577] belkin_sa 3-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2627.199533][T26577] usb 3-1: bcdDevice: fd7d, bfc: 0 [ 2627.222269][T26577] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2627.265907][T14836] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2627.304337][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4019'. [ 2627.351192][T26798] syz.1.4017: attempt to access beyond end of device [ 2627.351192][T26798] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2627.381466][T26800] syz.0.4020: attempt to access beyond end of device [ 2627.381466][T26800] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2627.464018][T26577] usb 3-1: USB disconnect, device number 81 [ 2627.472937][T26577] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2627.486925][T26798] SQUASHFS error: Failed to read block 0x0: -5 [ 2627.525446][T14836] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2627.537626][T26577] belkin_sa 3-1:0.116: device disconnected [ 2627.548928][T26800] SQUASHFS error: Failed to read block 0x0: -5 [ 2627.556029][T26798] unable to read squashfs_super_block [ 2627.563452][T14836] usb 4-1: config 0 has no interface number 0 [ 2627.588226][T14836] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2627.643539][ T5325] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2627.650304][T26800] unable to read squashfs_super_block [ 2627.673505][T14836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.723823][T14836] usb 4-1: Product: syz [ 2627.728033][T14836] usb 4-1: Manufacturer: syz [ 2627.759558][T14836] usb 4-1: SerialNumber: syz [ 2627.793124][T14836] usb 4-1: config 0 descriptor?? [ 2627.807258][T14836] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2627.878112][T14836] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2627.897091][ T5325] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 2627.914902][T14836] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2627.926039][ T5325] usb 5-1: config 0 has no interface number 0 [ 2627.950386][ T5325] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2628.023645][ T5325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.043435][ T5325] usb 5-1: Product: syz [ 2628.056928][ T5325] usb 5-1: Manufacturer: syz [ 2628.067989][ T5325] usb 5-1: SerialNumber: syz [ 2628.087462][T20205] usb 4-1: USB disconnect, device number 95 [ 2628.094266][ T5325] usb 5-1: config 0 descriptor?? [ 2628.125892][ T5325] belkin_sa 5-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2628.154816][ T5325] usb 5-1: bcdDevice: fd7d, bfc: 0 [ 2628.168455][ T5325] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 2628.200202][T20205] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2628.275745][T20205] belkin_sa 4-1:0.116: device disconnected [ 2628.340369][T14836] usb 5-1: USB disconnect, device number 89 [ 2628.364225][T14836] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 2628.399755][T14836] belkin_sa 5-1:0.116: device disconnected [ 2628.533478][ T5325] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2628.729192][ T5325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2628.754392][ T5325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2628.772433][ T5325] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2628.782037][ T5325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2628.801853][ T5325] usb 3-1: config 0 descriptor?? [ 2629.230289][T26810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2629.243996][T26810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2630.343514][T14836] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2630.666226][T14836] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2630.686688][T14836] usb 2-1: config 0 has no interface number 0 [ 2631.895701][T14836] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2631.920130][T14836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2631.942725][T14836] usb 2-1: Product: syz [ 2631.955832][T14836] usb 2-1: config 0 descriptor?? [ 2631.968522][T14836] usb 2-1: can't set config #0, error -71 [ 2631.982081][T14836] usb 2-1: USB disconnect, device number 109 [ 2632.043440][ T8253] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2632.070545][T26839] tipc: Enabling of bearer rejected, failed to enable media [ 2632.083734][ T5325] usbhid 3-1:0.0: can't add hid device: -71 [ 2632.089859][ T5325] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2632.129487][ T5325] usb 3-1: USB disconnect, device number 82 [ 2632.316985][ T8253] usb 5-1: Using ep0 maxpacket: 32 [ 2632.405768][ T8253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2632.432997][ T8253] usb 5-1: config 0 has no interfaces? [ 2632.464958][ T8253] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2632.507275][ T8253] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2632.548044][ T8253] usb 5-1: Product: syz [ 2632.577112][ T8253] usb 5-1: Manufacturer: syz [ 2632.583561][T14836] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 2632.600390][ T8253] usb 5-1: SerialNumber: syz [ 2632.610073][ T8253] usb 5-1: config 0 descriptor?? [ 2632.668726][T26851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2632.707675][T26845] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2632.807871][T26846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2632.832406][T14836] usb 2-1: not running at top speed; connect to a high speed hub [ 2632.940073][T14836] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2633.009531][T14836] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2633.019018][T26855] syz.3.4031: attempt to access beyond end of device [ 2633.019018][T26855] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2633.044616][T26846] syz.2.4030: attempt to access beyond end of device [ 2633.044616][T26846] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2633.056116][T26855] SQUASHFS error: Failed to read block 0x0: -5 [ 2633.057745][T26846] SQUASHFS error: Failed to read block 0x0: -5 [ 2633.072168][T23182] usb 5-1: USB disconnect, device number 90 [ 2633.082862][T26846] unable to read squashfs_super_block [ 2633.111902][T14836] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2633.130039][T14836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2633.187961][T26855] unable to read squashfs_super_block [ 2633.193546][T14836] usb 2-1: Product: syz [ 2633.215454][T14836] usb 2-1: Manufacturer: Ф [ 2633.245326][T14836] usb 2-1: SerialNumber: syz [ 2633.352554][T26842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2633.777550][T14836] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 2633.865879][T14836] usb 2-1: USB disconnect, device number 110 [ 2636.133613][T26858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 2636.284117][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4034'. [ 2636.463791][ T5319] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2637.719315][T26882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'. [ 2637.863634][T19675] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2637.873521][T23182] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2637.985943][ T5319] usb 5-1: device not accepting address 91, error -71 [ 2638.008769][T26897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2638.119543][T19675] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 2638.138869][T23182] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2638.151777][T19675] usb 3-1: config 0 has no interface number 0 [ 2638.166854][T23182] usb 2-1: config 0 has no interface number 0 [ 2638.168297][T26897] syz.4.4039: attempt to access beyond end of device [ 2638.168297][T26897] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2638.186495][T26901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2638.198909][T19675] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2638.216841][ T5323] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2638.226716][T23182] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2638.234921][T26897] SQUASHFS error: Failed to read block 0x0: -5 [ 2638.242048][T19675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.242077][T19675] usb 3-1: Product: syz [ 2638.257518][T23182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.272669][T23182] usb 2-1: Product: syz [ 2638.277107][T19675] usb 3-1: Manufacturer: syz [ 2638.282806][T26897] unable to read squashfs_super_block [ 2638.339390][T23182] usb 2-1: Manufacturer: syz [ 2638.340457][T26901] syz.0.4040: attempt to access beyond end of device [ 2638.340457][T26901] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2638.344209][T19675] usb 3-1: SerialNumber: syz [ 2638.382343][T26901] SQUASHFS error: Failed to read block 0x0: -5 [ 2638.388655][T23182] usb 2-1: SerialNumber: syz [ 2638.401018][T23182] usb 2-1: config 0 descriptor?? [ 2638.411171][T23182] belkin_sa 2-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2638.423068][T19675] usb 3-1: config 0 descriptor?? [ 2638.433933][T23182] usb 2-1: bcdDevice: fd7d, bfc: 0 [ 2638.450196][T19675] belkin_sa 3-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2638.465836][ T5323] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2638.475063][ T5323] usb 4-1: config 0 has no interface number 0 [ 2638.475224][T23182] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2638.492672][T19675] usb 3-1: bcdDevice: fd7d, bfc: 0 [ 2638.492938][T26901] unable to read squashfs_super_block [ 2638.526735][ T5323] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2638.537341][T19675] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 2638.542545][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.563591][ T5323] usb 4-1: Product: syz [ 2638.569370][ T5323] usb 4-1: Manufacturer: syz [ 2638.585560][ T5323] usb 4-1: SerialNumber: syz [ 2638.686791][T19675] usb 3-1: USB disconnect, device number 83 [ 2638.704607][ T5323] usb 4-1: config 0 descriptor?? [ 2638.718799][T19675] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 2638.733262][T26577] usb 2-1: USB disconnect, device number 111 [ 2638.763956][T26577] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2638.812346][T19675] belkin_sa 3-1:0.116: device disconnected [ 2638.848524][T26577] belkin_sa 2-1:0.116: device disconnected [ 2638.857488][ T5323] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2638.934537][ T5323] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2638.990223][ T5323] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2639.063054][ T5323] usb 4-1: USB disconnect, device number 96 [ 2639.071376][ T5323] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2639.100805][ T5323] belkin_sa 4-1:0.116: device disconnected [ 2642.013929][ T5323] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2642.063984][ T8253] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2642.153837][T26930] tipc: Enabling of bearer rejected, failed to enable media [ 2642.245818][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2642.262216][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2642.313008][ T8253] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 2642.323131][ T5323] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2642.332793][ T8253] usb 3-1: config 0 has no interface number 0 [ 2642.369556][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.389764][ T8253] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2642.402597][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4046'. [ 2642.440503][ T5323] usb 4-1: config 0 descriptor?? [ 2642.451342][ T8253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.473337][ T8253] usb 3-1: Product: syz [ 2642.485334][ T8253] usb 3-1: Manufacturer: syz [ 2642.493312][ T8253] usb 3-1: SerialNumber: syz [ 2642.741748][ T8253] usb 3-1: config 0 descriptor?? [ 2642.940127][ T8253] belkin_sa 3-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2643.094765][ T8253] usb 3-1: bcdDevice: fd7d, bfc: 0 [ 2643.148324][ T8253] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2643.186335][ T8253] usb 3-1: USB disconnect, device number 84 [ 2643.233758][T26923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2643.254109][ T8253] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2643.286211][T26923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2643.327720][ T8253] belkin_sa 3-1:0.116: device disconnected [ 2643.456570][T19675] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 2643.464442][T23182] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2644.099486][T23182] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2644.145435][T19675] usb 5-1: not running at top speed; connect to a high speed hub [ 2644.163031][T23182] usb 2-1: config 0 has no interface number 0 [ 2644.633248][T19675] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2644.664074][T23182] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2644.698953][T19675] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2644.708354][T23182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.039165][T19675] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2645.411374][T23182] usb 2-1: Product: syz [ 2645.445471][T23182] usb 2-1: Manufacturer: syz [ 2645.450190][T23182] usb 2-1: SerialNumber: syz [ 2645.465910][T19675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.486971][T23182] usb 2-1: config 0 descriptor?? [ 2645.512713][T19675] usb 5-1: Product: syz [ 2645.540988][T19675] usb 5-1: Manufacturer: Ф [ 2646.728298][T19675] usb 5-1: SerialNumber: syz [ 2646.762791][T26930] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2646.867313][ T5323] usbhid 4-1:0.0: can't add hid device: -71 [ 2646.877946][ T5323] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2646.897677][T23182] usb 2-1: can't set config #0, error -71 [ 2646.917736][ T5323] usb 4-1: USB disconnect, device number 97 [ 2646.969535][T23182] usb 2-1: USB disconnect, device number 112 [ 2647.054221][T19675] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2647.092146][T19675] usb 5-1: USB disconnect, device number 93 [ 2647.334932][ T8253] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2647.355934][T26953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2648.827860][ T8253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2648.936795][ T8253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2648.953627][ T8253] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2648.963729][ T8253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.974431][ T8253] usb 3-1: config 0 descriptor?? [ 2649.035796][T26959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4054'. [ 2649.545490][T26951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2649.753220][T26951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2650.178395][T23129] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2650.450932][T23129] usb 4-1: device descriptor read/all, error -71 [ 2650.632965][T26974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2650.740318][T26976] syz.4.4057: attempt to access beyond end of device [ 2650.740318][T26976] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2650.763774][T26976] SQUASHFS error: Failed to read block 0x0: -5 [ 2650.776253][T26976] unable to read squashfs_super_block [ 2650.861785][T26977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2651.342353][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4059'. [ 2651.772742][ T8253] usbhid 3-1:0.0: can't add hid device: -71 [ 2651.772875][ T8253] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2651.783900][ T8253] usb 3-1: USB disconnect, device number 85 [ 2651.818085][T23129] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2652.025586][T23129] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2652.025608][T23129] usb 4-1: config 0 has no interface number 0 [ 2652.028022][T23129] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2652.028042][T23129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.028055][T23129] usb 4-1: Product: syz [ 2652.028064][T23129] usb 4-1: Manufacturer: syz [ 2652.028073][T23129] usb 4-1: SerialNumber: syz [ 2652.029877][T23129] usb 4-1: config 0 descriptor?? [ 2652.034737][T23129] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2652.035290][T23129] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2652.036326][T23129] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2652.141157][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2653.084878][T26993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2653.109783][T27000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4061'. [ 2653.192095][T19675] usb 4-1: USB disconnect, device number 100 [ 2653.199832][T19675] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2653.200155][T19675] belkin_sa 4-1:0.116: device disconnected [ 2653.394419][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4063'. [ 2653.403938][T26993] syz.1.4060: attempt to access beyond end of device [ 2653.403938][T26993] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2653.404087][T26993] SQUASHFS error: Failed to read block 0x0: -5 [ 2653.404215][T26993] unable to read squashfs_super_block [ 2653.625503][T27009] tipc: Enabling of bearer rejected, failed to enable media [ 2654.287660][T23182] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2654.327718][T27014] tipc: Enabling of bearer rejected, failed to enable media [ 2656.728873][T23129] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 2656.954116][T23182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2656.972007][T23182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2656.981895][T23182] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2656.984875][T23129] usb 2-1: not running at top speed; connect to a high speed hub [ 2656.990981][T23182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2657.147932][T23129] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2657.163460][T23129] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2657.182567][T23129] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2657.229921][T23182] usb 4-1: config 0 descriptor?? [ 2657.290249][T23129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.302528][T23129] usb 2-1: Product: syz [ 2657.306842][T23129] usb 2-1: Manufacturer: Ф [ 2657.319666][T23129] usb 2-1: SerialNumber: syz [ 2658.163040][T23129] usb 2-1: can't set config #1, error -71 [ 2658.247756][T23129] usb 2-1: USB disconnect, device number 113 [ 2658.392915][T27038] tipc: Enabling of bearer rejected, failed to enable media [ 2658.503517][ T8253] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2658.524280][T23182] usb 4-1: can't set config #0, error -71 [ 2658.532416][T23182] usb 4-1: USB disconnect, device number 101 [ 2658.584091][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4073'. [ 2658.609770][T27030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4070'. [ 2659.266479][ T5236] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2659.908307][ T8253] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 2659.928643][ T8253] usb 5-1: config 0 has no interface number 0 [ 2659.952728][ T8253] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2659.963526][ T8253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2659.971709][ T8253] usb 5-1: Product: syz [ 2659.977249][ T8253] usb 5-1: Manufacturer: syz [ 2659.982139][ T8253] usb 5-1: SerialNumber: syz [ 2659.989872][ T8253] usb 5-1: config 0 descriptor?? [ 2660.000841][ T8253] belkin_sa 5-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2660.011921][ T8253] usb 5-1: bcdDevice: fd7d, bfc: 0 [ 2660.018679][ T8253] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2660.063439][ T5236] usb 3-1: Using ep0 maxpacket: 32 [ 2660.085158][ T5236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2660.113625][ T5236] usb 3-1: config 0 has no interfaces? [ 2660.125329][ T5236] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2660.139162][ T5236] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2660.154114][ T5236] usb 3-1: Product: syz [ 2660.158352][ T5236] usb 3-1: Manufacturer: syz [ 2660.163938][ T5236] usb 3-1: SerialNumber: syz [ 2660.262328][T23182] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 2660.468408][ T5236] usb 3-1: config 0 descriptor?? [ 2661.274644][ T8253] usb 5-1: USB disconnect, device number 94 [ 2661.374102][ T8253] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2661.502850][ T8253] belkin_sa 5-1:0.116: device disconnected [ 2661.651777][T19675] usb 3-1: USB disconnect, device number 86 [ 2662.088147][ T8253] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2662.592919][T27062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4077'. [ 2662.753710][ T8253] usb 2-1: Using ep0 maxpacket: 32 [ 2662.756025][T23182] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2662.779372][ T8253] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2662.795513][ T8253] usb 2-1: config 0 has no interfaces? [ 2662.808456][ T8253] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2662.823658][ T8253] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2662.832575][ T8253] usb 2-1: Product: syz [ 2662.838580][ T8253] usb 2-1: Manufacturer: syz [ 2662.843306][ T8253] usb 2-1: SerialNumber: syz [ 2662.856655][ T8253] usb 2-1: config 0 descriptor?? [ 2663.174747][ T8253] usb 2-1: USB disconnect, device number 114 [ 2669.647839][T23182] usb 4-1: device descriptor read/all, error -71 [ 2669.654729][T23182] usb usb4-port1: attempt power cycle [ 2670.019276][T27083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'. [ 2670.120664][T27087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2670.209797][T27095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4083'. [ 2670.281944][T27087] syz.3.4086: attempt to access beyond end of device [ 2670.281944][T27087] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2670.325891][T27087] SQUASHFS error: Failed to read block 0x0: -5 [ 2670.332564][T27087] unable to read squashfs_super_block [ 2670.543561][T26577] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2670.584298][T23129] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2670.755606][T26577] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 2670.776874][T26577] usb 5-1: config 0 has no interface number 0 [ 2670.798678][T26577] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2670.799234][T23129] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 2670.816242][T26577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2670.816273][T26577] usb 5-1: Product: syz [ 2670.816323][T26577] usb 5-1: Manufacturer: syz [ 2670.816368][T26577] usb 5-1: SerialNumber: syz [ 2670.835901][T26577] usb 5-1: config 0 descriptor?? [ 2670.884970][T26577] belkin_sa 5-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2670.919219][T26577] usb 5-1: bcdDevice: fd7d, bfc: 0 [ 2670.923505][T23129] usb 3-1: config 0 has no interface number 0 [ 2670.957773][T23129] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2670.963492][T26577] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2670.982954][T23129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2670.997581][T23129] usb 3-1: Product: syz [ 2671.019357][T23129] usb 3-1: Manufacturer: syz [ 2671.027741][T23129] usb 3-1: SerialNumber: syz [ 2671.059600][T23129] usb 3-1: config 0 descriptor?? [ 2671.092437][T23129] belkin_sa 3-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2671.133110][T23129] usb 3-1: bcdDevice: fd7d, bfc: 0 [ 2671.162106][T23129] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 2671.184552][T27107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 2671.203805][T26577] usb 5-1: USB disconnect, device number 95 [ 2671.259614][T26577] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2671.302777][T26577] belkin_sa 5-1:0.116: device disconnected [ 2671.427291][T23129] usb 3-1: USB disconnect, device number 87 [ 2671.455484][T23129] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 2671.499096][T23129] belkin_sa 3-1:0.116: device disconnected [ 2671.587938][T20205] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2671.885559][T20205] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2671.901508][T20205] usb 2-1: config 0 has no interface number 0 [ 2671.940814][T20205] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2672.749200][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 2673.083967][T20205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.092508][T20205] usb 2-1: Product: syz [ 2673.096805][T20205] usb 2-1: Manufacturer: syz [ 2673.101474][T20205] usb 2-1: SerialNumber: syz [ 2673.111054][T20205] usb 2-1: config 0 descriptor?? [ 2673.119559][T20205] belkin_sa 2-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2673.130222][T20205] usb 2-1: bcdDevice: fd7d, bfc: 0 [ 2673.137056][T20205] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2673.474237][ T8253] usb 2-1: USB disconnect, device number 115 [ 2673.487403][ T8253] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2673.597286][T23129] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2673.749557][ T8253] belkin_sa 2-1:0.116: device disconnected [ 2674.566130][T23129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2674.613504][T23129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2674.638792][T23129] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2674.686783][T23129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2674.692460][T23129] usb 4-1: config 0 descriptor?? [ 2674.814403][T27126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2674.937237][T27129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4095'. [ 2674.973508][T27133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2675.000004][T27126] syz.0.4093: attempt to access beyond end of device [ 2675.000004][T27126] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2675.023490][T27126] SQUASHFS error: Failed to read block 0x0: -5 [ 2675.076386][T27126] unable to read squashfs_super_block [ 2675.144053][T27119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2675.219663][T27119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2675.510833][T27133] syz.2.4094: attempt to access beyond end of device [ 2675.510833][T27133] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2675.535305][T27133] SQUASHFS error: Failed to read block 0x0: -5 [ 2676.256775][T27133] unable to read squashfs_super_block [ 2677.699652][T27151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2677.952317][T27151] syz.1.4098: attempt to access beyond end of device [ 2677.952317][T27151] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2677.969293][T27151] SQUASHFS error: Failed to read block 0x0: -5 [ 2678.008141][T27151] unable to read squashfs_super_block [ 2678.341196][T23129] usbhid 4-1:0.0: can't add hid device: -71 [ 2678.359540][T23129] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2678.389427][T23129] usb 4-1: USB disconnect, device number 105 [ 2682.113807][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 2684.440906][T27171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2685.820850][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 2685.963584][ T8253] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2685.973974][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4109'. [ 2686.215235][ T8253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2686.297784][ T8253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2686.307206][T27202] tipc: Enabling of bearer rejected, failed to enable media [ 2686.362157][ T8253] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2686.392914][ T8253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2686.410521][ T8253] usb 4-1: config 0 descriptor?? [ 2687.634803][T27210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2687.647969][ T5236] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 2687.715750][T27210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2687.853486][ T5236] usb 2-1: not running at top speed; connect to a high speed hub [ 2687.903100][ T5236] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2687.936889][ T5236] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2689.254567][ T5236] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2689.632578][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.659536][ T5236] usb 2-1: Product: syz [ 2689.673575][ T5236] usb 2-1: Manufacturer: Ф [ 2689.683966][ T5236] usb 2-1: SerialNumber: syz [ 2689.711160][ T5236] usb 2-1: can't set config #1, error -71 [ 2689.729198][ T5236] usb 2-1: USB disconnect, device number 116 [ 2691.013589][ T8253] usbhid 4-1:0.0: can't add hid device: -71 [ 2691.205450][ T8253] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2691.649915][ T8253] usb 4-1: USB disconnect, device number 106 [ 2692.512934][T27238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4118'. [ 2692.957757][T27246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4119'. [ 2693.013569][ T5323] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2693.285653][ T5323] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2693.295055][ T5323] usb 2-1: config 0 has no interface number 0 [ 2693.307273][ T5323] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2693.319052][ T5323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2694.453473][ T5323] usb 2-1: Product: syz [ 2694.475553][ T5323] usb 2-1: Manufacturer: syz [ 2694.517241][ T5323] usb 2-1: SerialNumber: syz [ 2694.536836][ T5323] usb 2-1: config 0 descriptor?? [ 2694.548161][ T5323] usb 2-1: can't set config #0, error -71 [ 2694.556525][ T5323] usb 2-1: USB disconnect, device number 117 [ 2695.103973][T24942] Bluetooth: hci1: command 0x0406 tx timeout [ 2695.118541][T24942] Bluetooth: hci8: command 0x0406 tx timeout [ 2695.125897][T24942] Bluetooth: hci6: command 0x0406 tx timeout [ 2695.976950][T27275] tipc: Enabling of bearer rejected, failed to enable media [ 2696.040533][T27274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4126'. [ 2696.053539][ T5323] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2696.112874][T27272] [U] ¼xw6&Ÿ}szÝñ=KoZìƱ_z¹ªÉÎ.Õ Z<Ïž>P¬Ž³CŽ¢d™q¤ßrq-…aÝ.Ò [ 2696.230949][T27263] [U] o¿YìR¸3O¦K¬€Ìì5kl·Å2€ZÙí;oüúÍ3ÿ)W\ [ 2696.285860][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2696.316793][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2696.342078][ T5323] usb 2-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2696.353846][T23182] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2696.361697][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2696.363424][T20205] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2696.382786][ T5323] usb 2-1: config 0 descriptor?? [ 2696.585502][T23182] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 2696.603451][T23182] usb 5-1: config 0 has no interface number 0 [ 2696.612533][T23182] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2696.626279][T20205] usb 3-1: not running at top speed; connect to a high speed hub [ 2696.635082][T23182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.643104][T23182] usb 5-1: Product: syz [ 2696.650575][T23182] usb 5-1: Manufacturer: syz [ 2696.656262][T23182] usb 5-1: SerialNumber: syz [ 2696.662028][T20205] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2696.673514][ T8253] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2696.674855][T20205] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2696.693521][T20205] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2696.704164][T23182] usb 5-1: config 0 descriptor?? [ 2696.718376][T23182] belkin_sa 5-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2696.728383][T20205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.739455][T23182] usb 5-1: bcdDevice: fd7d, bfc: 0 [ 2696.745038][T20205] usb 3-1: Product: syz [ 2696.750566][T20205] usb 3-1: Manufacturer: Ф [ 2696.758218][T23182] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2696.771101][T20205] usb 3-1: SerialNumber: syz [ 2696.780837][T27277] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2696.813019][T27268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2696.824213][T27268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2696.897486][ T8253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2696.924303][ T8253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2696.958754][ T8253] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2697.004911][ T8253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.009799][T23182] usb 5-1: USB disconnect, device number 96 [ 2697.041571][ T8253] usb 4-1: config 0 descriptor?? [ 2697.114379][T23182] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2697.149256][T23182] belkin_sa 5-1:0.116: device disconnected [ 2697.574721][T27281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2698.316231][ T5323] usbhid 2-1:0.0: can't add hid device: -71 [ 2698.334593][ T5323] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2698.334663][T20205] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 2698.361314][ T5323] usb 2-1: USB disconnect, device number 118 [ 2698.378340][T27281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2698.432410][T20205] usb 3-1: USB disconnect, device number 88 [ 2700.411183][T27295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2700.638521][ T8253] usbhid 4-1:0.0: can't add hid device: -71 [ 2700.638637][ T8253] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2700.657989][ T8253] usb 4-1: USB disconnect, device number 107 [ 2700.696152][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4133'. [ 2700.825602][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4134'. [ 2701.001920][T27311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4136'. [ 2701.011981][T20205] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2701.235917][T20205] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 2701.235950][T20205] usb 3-1: config 0 has no interface number 0 [ 2701.239907][T20205] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2701.239941][T20205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2701.239962][T20205] usb 3-1: Product: syz [ 2701.239979][T20205] usb 3-1: Manufacturer: syz [ 2701.239996][T20205] usb 3-1: SerialNumber: syz [ 2701.246707][T20205] usb 3-1: config 0 descriptor?? [ 2701.253225][T20205] belkin_sa 3-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2701.262211][T20205] usb 3-1: bcdDevice: fd7d, bfc: 0 [ 2701.278774][T20205] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2701.352490][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4138'. [ 2701.456129][T20205] usb 3-1: USB disconnect, device number 89 [ 2701.459351][T20205] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2701.459985][T20205] belkin_sa 3-1:0.116: device disconnected [ 2702.970621][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4140'. [ 2703.218190][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4141'. [ 2703.294863][T27346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4144'. [ 2703.304133][ T5236] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2703.383528][T23182] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2703.511684][T20205] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2703.525411][ T5236] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2703.533901][ T5236] usb 2-1: config 0 has no interface number 0 [ 2703.542071][ T5236] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2703.551575][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.559886][ T5236] usb 2-1: Product: syz [ 2703.564217][ T5236] usb 2-1: Manufacturer: syz [ 2703.568820][ T5236] usb 2-1: SerialNumber: syz [ 2703.576070][ T5236] usb 2-1: config 0 descriptor?? [ 2703.583806][ T8253] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2703.584773][ T5236] belkin_sa 2-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2703.606037][T23182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2703.617426][ T5236] usb 2-1: bcdDevice: fd7d, bfc: 0 [ 2703.625180][T23182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2703.638976][ T5236] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2703.649058][T23182] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2703.661249][T23182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2703.672262][T23182] usb 3-1: config 0 descriptor?? [ 2703.705911][T20205] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 2703.714636][T20205] usb 5-1: config 0 has no interface number 0 [ 2703.732847][T20205] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2703.743983][T20205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.752033][T20205] usb 5-1: Product: syz [ 2703.766243][T20205] usb 5-1: Manufacturer: syz [ 2703.770930][T20205] usb 5-1: SerialNumber: syz [ 2703.779335][T20205] usb 5-1: config 0 descriptor?? [ 2703.792056][T20205] belkin_sa 5-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2703.814300][ T8253] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2703.823007][ T8253] usb 4-1: config 0 has no interface number 0 [ 2703.826198][T20205] usb 5-1: bcdDevice: fd7d, bfc: 0 [ 2703.838402][ T8253] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2703.848204][ T8253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.858106][ T8253] usb 4-1: Product: syz [ 2703.862442][ T8253] usb 4-1: Manufacturer: syz [ 2703.863814][T20205] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 2703.874675][ T8253] usb 4-1: SerialNumber: syz [ 2703.885100][ T8253] usb 4-1: config 0 descriptor?? [ 2703.886246][T26577] usb 2-1: USB disconnect, device number 119 [ 2703.926830][T26577] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2703.926846][ T8253] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2703.939398][ T8253] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2703.962952][T26577] belkin_sa 2-1:0.116: device disconnected [ 2704.027163][ T8253] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB2 [ 2704.094668][ T8253] usb 5-1: USB disconnect, device number 97 [ 2704.115299][T27341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2704.145024][ T8253] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 2704.162226][T27341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2704.174150][ T8253] belkin_sa 5-1:0.116: device disconnected [ 2704.248092][ T5236] usb 4-1: USB disconnect, device number 108 [ 2704.251961][ T5236] belkin ttyUSB2: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB2 [ 2704.252663][ T5236] belkin_sa 4-1:0.116: device disconnected [ 2704.363283][T27348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4145'. [ 2705.070774][T27355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2706.420489][T23182] usbhid 3-1:0.0: can't add hid device: -71 [ 2706.427448][T23182] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2706.450712][T23182] usb 3-1: USB disconnect, device number 90 [ 2706.664931][T27362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4148'. [ 2706.995138][T23129] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2707.009474][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4151'. [ 2707.081266][T27375] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2707.092148][T27375] cramfs: wrong magic [ 2707.243494][T23129] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 2707.297672][T23129] usb 5-1: config 0 has no interface number 0 [ 2707.446678][T23129] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2707.727056][T23129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2707.759971][T23129] usb 5-1: Product: syz [ 2707.769926][T23129] usb 5-1: Manufacturer: syz [ 2707.787548][T23129] usb 5-1: SerialNumber: syz [ 2707.817451][T23129] usb 5-1: config 0 descriptor?? [ 2707.821882][T23129] belkin_sa 5-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2707.822542][T23129] usb 5-1: bcdDevice: fd7d, bfc: 0 [ 2707.828433][T23129] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2707.933817][T27379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 2708.196022][T26577] usb 5-1: USB disconnect, device number 98 [ 2708.215770][T26577] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2708.270078][T26577] belkin_sa 5-1:0.116: device disconnected [ 2708.568163][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4153'. [ 2708.703081][T27391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4155'. [ 2708.835458][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4154'. [ 2708.904102][ T5236] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2709.203619][ T5323] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2709.243190][ T5236] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2709.287054][ T5236] usb 4-1: config 0 has no interface number 0 [ 2709.301980][ T5236] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2709.312139][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2709.321505][ T5236] usb 4-1: Product: syz [ 2709.326764][ T5236] usb 4-1: Manufacturer: syz [ 2709.332139][ T5236] usb 4-1: SerialNumber: syz [ 2709.614300][ T5236] usb 4-1: config 0 descriptor?? [ 2709.634523][ T5236] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2710.306702][ T5236] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2710.362186][ T5236] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2710.427254][ T5236] usb 4-1: USB disconnect, device number 109 [ 2710.448086][ T5236] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2710.460260][ T5323] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 2710.464919][ T5236] belkin_sa 4-1:0.116: device disconnected [ 2710.491385][ T5323] usb 3-1: config 0 has no interface number 0 [ 2710.501484][ T5323] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2710.501520][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.501542][ T5323] usb 3-1: Product: syz [ 2710.501558][ T5323] usb 3-1: Manufacturer: syz [ 2710.501574][ T5323] usb 3-1: SerialNumber: syz [ 2710.504559][ T5323] usb 3-1: config 0 descriptor?? [ 2710.514962][ T5323] belkin_sa 3-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2710.515974][ T5323] usb 3-1: bcdDevice: fd7d, bfc: 0 [ 2710.522851][ T5323] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2710.582521][T27410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4158'. [ 2710.777585][ T5236] usb 3-1: USB disconnect, device number 91 [ 2710.793165][ T5236] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2710.815094][ T5236] belkin_sa 3-1:0.116: device disconnected [ 2713.506811][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.736669][T27429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 2713.807588][T27433] tipc: Enabling of bearer rejected, failed to enable media [ 2714.253504][T26577] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 2715.174333][T26577] usb 5-1: not running at top speed; connect to a high speed hub [ 2715.206409][T27437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4166'. [ 2715.224118][T26577] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2715.260364][T26577] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2715.284546][T26577] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2715.298908][T26577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.318467][T26577] usb 5-1: Product: syz [ 2715.328595][T26577] usb 5-1: Manufacturer: Ф [ 2715.340879][T26577] usb 5-1: SerialNumber: syz [ 2715.409241][T27433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2715.452308][T27441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 2715.593973][T24929] Bluetooth: hci3: command 0x0406 tx timeout [ 2716.563534][ T5323] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2716.622594][T26577] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2716.660138][T26577] usb 5-1: USB disconnect, device number 99 [ 2716.772616][T27459] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4171'. [ 2716.784595][ T5323] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 2716.793018][ T5323] usb 3-1: config 0 has no interface number 0 [ 2716.808196][ T5323] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2716.823483][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.847817][ T5323] usb 3-1: Product: syz [ 2716.852024][ T5323] usb 3-1: Manufacturer: syz [ 2716.861961][ T5323] usb 3-1: SerialNumber: syz [ 2716.870901][ T5323] usb 3-1: config 0 descriptor?? [ 2716.879135][ T5323] belkin_sa 3-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2716.890882][ T5323] usb 3-1: bcdDevice: fd7d, bfc: 0 [ 2716.909176][ T5323] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2717.014731][ T5319] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2717.351741][ T5319] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2717.398806][ T5319] usb 4-1: config 0 has no interface number 0 [ 2717.505075][ T5319] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2717.522899][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2717.531550][ T5319] usb 4-1: Product: syz [ 2717.536044][ T5319] usb 4-1: Manufacturer: syz [ 2717.540864][ T5319] usb 4-1: SerialNumber: syz [ 2717.857209][ T5319] usb 4-1: config 0 descriptor?? [ 2717.869085][ T5319] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2717.904607][ T5319] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2717.934013][ T5319] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 2717.954075][ T5323] usb 3-1: USB disconnect, device number 92 [ 2718.032872][ T5323] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2718.081628][ T5323] belkin_sa 3-1:0.116: device disconnected [ 2718.143274][ T5319] usb 4-1: USB disconnect, device number 110 [ 2718.192280][ T5319] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 2718.257465][ T5319] belkin_sa 4-1:0.116: device disconnected [ 2719.084129][T23182] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2719.295752][T23182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2719.341293][T23182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2719.373459][T23182] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2719.413464][T23182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.435096][T23182] usb 5-1: config 0 descriptor?? [ 2719.654640][T27465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2719.655151][T27465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2719.890050][T26577] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2720.091938][T26577] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2720.100774][T26577] usb 4-1: config 0 has no interface number 0 [ 2720.133675][T26577] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2720.158749][T26577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2720.171156][T26577] usb 4-1: Product: syz [ 2720.175656][T26577] usb 4-1: Manufacturer: syz [ 2720.185655][T26577] usb 4-1: SerialNumber: syz [ 2720.217457][T26577] usb 4-1: config 0 descriptor?? [ 2720.238440][T26577] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2720.251010][T26577] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2720.285312][T26577] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2720.858273][T27493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4179'. [ 2721.320647][T23182] usbhid 5-1:0.0: can't add hid device: -71 [ 2721.346753][T23182] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2721.379865][T23182] usb 5-1: USB disconnect, device number 100 [ 2721.796993][T23182] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2722.005722][T23182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2722.017040][T23182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2722.033496][T23182] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2722.044277][T23182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2722.082416][T23182] usb 5-1: config 0 descriptor?? [ 2722.569076][T27496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2722.598806][T27496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2724.253590][T27487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 2724.387311][T26577] usb 4-1: USB disconnect, device number 111 [ 2724.404241][T26577] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2724.444234][T26577] belkin_sa 4-1:0.116: device disconnected [ 2724.680394][T23182] usbhid 5-1:0.0: can't add hid device: -71 [ 2724.767808][T23182] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2724.877971][T23182] usb 5-1: USB disconnect, device number 101 [ 2725.407592][T27504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4182'. [ 2725.543346][T27512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4183'. [ 2725.551439][T27516] tipc: Enabling of bearer rejected, failed to enable media [ 2725.994522][T23182] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 2727.181370][T23182] usb 3-1: not running at top speed; connect to a high speed hub [ 2727.212478][T23182] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2727.241257][T23182] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2727.252029][T23182] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2727.271852][T23182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2727.293348][T23182] usb 3-1: Product: syz [ 2727.301020][T23182] usb 3-1: Manufacturer: Ф [ 2727.309609][T23182] usb 3-1: SerialNumber: syz [ 2727.322893][T27520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2727.380088][T27538] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4192'. [ 2727.848310][T27547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2727.906134][T27547] syz.4.4193: attempt to access beyond end of device [ 2727.906134][T27547] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2727.920909][T27547] SQUASHFS error: Failed to read block 0x0: -5 [ 2727.943039][T27547] unable to read squashfs_super_block [ 2732.721155][T23182] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -110 [ 2735.294655][T27557] tipc: Enabling of bearer rejected, failed to enable media [ 2735.372711][T26577] usb 3-1: USB disconnect, device number 93 [ 2735.585968][T27572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'. [ 2735.602361][T27574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4200'. [ 2735.953809][T27580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4198'. [ 2736.263838][ T5325] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2736.272723][T24929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2736.283167][T24929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2736.303769][T24929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2736.316716][T24929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2736.325069][T24929] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2736.333635][T20205] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2736.341609][T24929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2736.459174][T14326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.495651][ T5325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2736.511335][ T5325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2736.530076][ T5325] usb 2-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2736.562740][ T5325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2736.582356][ T5325] usb 2-1: config 0 descriptor?? [ 2736.584219][T20205] usb 5-1: config 0 has an invalid interface number: 116 but max is 0 [ 2736.600603][T20205] usb 5-1: config 0 has no interface number 0 [ 2736.610796][T20205] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2736.620713][T20205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2736.628789][T20205] usb 5-1: Product: syz [ 2736.633111][T20205] usb 5-1: Manufacturer: syz [ 2736.637947][T20205] usb 5-1: SerialNumber: syz [ 2736.650578][T20205] usb 5-1: config 0 descriptor?? [ 2736.661185][T14326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.662578][T20205] belkin_sa 5-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2736.684113][T20205] usb 5-1: bcdDevice: fd7d, bfc: 0 [ 2736.698318][T20205] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2736.753962][T26577] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2736.828204][T14326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.931266][T14326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2736.952914][T27591] chnl_net:caif_netlink_parms(): no params data found [ 2736.962595][T26577] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2736.982469][T26577] usb 4-1: config 0 has no interface number 0 [ 2736.985136][ T5319] usb 5-1: USB disconnect, device number 102 [ 2737.006468][T26577] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2737.026460][ T5319] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2737.026562][T27585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2737.054311][T26577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2737.072552][T26577] usb 4-1: Product: syz [ 2737.078125][T26577] usb 4-1: Manufacturer: syz [ 2737.084221][T26577] usb 4-1: SerialNumber: syz [ 2737.091718][T26577] usb 4-1: config 0 descriptor?? [ 2737.097760][ T5319] belkin_sa 5-1:0.116: device disconnected [ 2737.126944][T26577] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2737.147473][T26577] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 2737.149659][T27585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2737.163896][T26577] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2737.374175][T26577] usb 4-1: USB disconnect, device number 112 [ 2737.399015][T26577] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2737.419735][T27591] bridge0: port 1(bridge_slave_0) entered blocking state [ 2737.439064][T26577] belkin_sa 4-1:0.116: device disconnected [ 2737.443795][T27591] bridge0: port 1(bridge_slave_0) entered disabled state [ 2737.491116][T27591] bridge_slave_0: entered allmulticast mode [ 2737.509597][T27591] bridge_slave_0: entered promiscuous mode [ 2737.567003][T27591] bridge0: port 2(bridge_slave_1) entered blocking state [ 2737.586344][T27591] bridge0: port 2(bridge_slave_1) entered disabled state [ 2737.601919][T27591] bridge_slave_1: entered allmulticast mode [ 2737.621751][T27591] bridge_slave_1: entered promiscuous mode [ 2737.656496][T14326] bridge_slave_1: left allmulticast mode [ 2737.662220][T14326] bridge_slave_1: left promiscuous mode [ 2737.673139][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2737.722607][T14326] bridge_slave_0: left allmulticast mode [ 2737.728924][T14326] bridge_slave_0: left promiscuous mode [ 2737.744552][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2738.102817][T27608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4205'. [ 2738.402123][T20437] Bluetooth: hci4: command tx timeout [ 2738.473607][T23129] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2738.747700][T23129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2738.782831][T23129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2739.010310][T23129] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2739.043247][T23129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.055953][ T5325] usbhid 2-1:0.0: can't add hid device: -71 [ 2739.062483][ T5325] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2739.144308][ T5325] usb 2-1: USB disconnect, device number 120 [ 2739.160325][T23129] usb 4-1: config 0 descriptor?? [ 2739.862606][T27611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2739.991381][T27611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.556829][T20437] Bluetooth: hci4: command tx timeout [ 2740.856912][T14326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2740.892431][T27624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4209'. [ 2740.911029][T14326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2740.952688][T14326] bond0 (unregistering): Released all slaves [ 2741.218197][T27591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2741.253159][T27591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2742.623566][T20437] Bluetooth: hci4: command tx timeout [ 2742.775836][T23129] usbhid 4-1:0.0: can't add hid device: -71 [ 2742.805151][T23129] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2743.021060][T27591] team0: Port device team_slave_0 added [ 2743.021396][T23129] usb 4-1: USB disconnect, device number 113 [ 2743.080720][T27591] team0: Port device team_slave_1 added [ 2744.717107][T27591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2744.723805][T20437] Bluetooth: hci4: command tx timeout [ 2744.763572][T27591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2744.791104][T27591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2744.879564][T14326] hsr_slave_0: left promiscuous mode [ 2744.912785][T14326] hsr_slave_1: left promiscuous mode [ 2744.945209][T23129] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2744.959056][T14326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2744.994954][T14326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2745.016098][T14326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2745.169400][T14326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2745.555590][T14326] veth1_macvtap: left promiscuous mode [ 2745.601703][T14326] veth0_macvtap: left promiscuous mode [ 2745.639086][T14326] veth1_vlan: left promiscuous mode [ 2745.663599][T14326] veth0_vlan: left promiscuous mode [ 2746.208134][T23129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2746.232255][T23129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2746.250934][T23129] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2746.260125][T23129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2746.281919][T23129] usb 4-1: config 0 descriptor?? [ 2746.809266][T27661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2746.824167][T27661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2749.740711][T23129] usbhid 4-1:0.0: can't add hid device: -71 [ 2749.754523][T23129] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2749.770955][T23129] usb 4-1: USB disconnect, device number 114 [ 2752.846392][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 2752.863566][ T5323] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2752.979523][T14326] team0 (unregistering): Port device team_slave_1 removed [ 2753.120864][T14326] team0 (unregistering): Port device team_slave_0 removed [ 2755.054346][T27591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2755.061329][T27591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2755.117948][T27591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2757.239407][T27591] hsr_slave_0: entered promiscuous mode [ 2757.280974][T27591] hsr_slave_1: entered promiscuous mode [ 2757.365540][T27591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2757.392654][T27591] Cannot create hsr debugfs directory [ 2758.249191][T27748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4234'. [ 2759.165229][ T5323] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2776.412345][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2778.924402][T27827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2779.213230][T27825] syz.0.4248: attempt to access beyond end of device [ 2779.213230][T27825] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2779.500122][T24929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2781.785085][T24929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2781.795499][T24929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2781.955208][T24929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2781.963763][T27825] SQUASHFS error: Failed to read block 0x0: -5 [ 2782.003149][T27825] unable to read squashfs_super_block [ 2782.023884][T24929] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2782.034716][T24929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2782.195477][T27851] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4253'. [ 2784.165610][T20437] Bluetooth: hci6: command tx timeout [ 2786.229033][T20437] Bluetooth: hci6: command tx timeout [ 2787.352764][T24929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2787.378695][T24929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2787.392610][T24929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2787.406566][T24929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2787.414857][T24929] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2787.429106][T24929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2787.611676][T14326] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2788.540981][T20437] Bluetooth: hci6: command tx timeout [ 2788.595886][T14326] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2789.503917][T20437] Bluetooth: hci2: command tx timeout [ 2789.622214][T27591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2789.736355][T14326] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2789.773117][T27591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2790.433819][T27591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2790.462805][T27591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2790.561028][T14326] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2790.635052][T20437] Bluetooth: hci6: command tx timeout [ 2791.046976][T27898] udevd[27898]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 2791.561780][ T5319] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2791.605298][T20437] Bluetooth: hci2: command tx timeout [ 2791.804072][ T5319] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2791.812288][ T5319] usb 2-1: config 0 has no interface number 0 [ 2791.851232][ T5319] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2791.862429][ T5319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2791.870766][ T5319] usb 2-1: Product: syz [ 2791.876181][ T5319] usb 2-1: Manufacturer: syz [ 2791.880805][ T5319] usb 2-1: SerialNumber: syz [ 2791.890765][ T5319] usb 2-1: config 0 descriptor?? [ 2791.902131][ T5319] belkin_sa 2-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 2791.918578][ T5319] usb 2-1: bcdDevice: fd7d, bfc: 0 [ 2791.952974][ T5319] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 2793.673812][T20437] Bluetooth: hci2: command tx timeout [ 2794.111240][T26577] usb 2-1: USB disconnect, device number 123 [ 2794.151070][T26577] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 2794.174207][T26577] belkin_sa 2-1:0.116: device disconnected [ 2794.733112][T27932] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4263'. [ 2795.402829][T27839] chnl_net:caif_netlink_parms(): no params data found [ 2795.756815][T20437] Bluetooth: hci2: command tx timeout [ 2797.872609][T24929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2797.877353][T24929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2797.878593][T24929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2797.881274][T24929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2797.916058][T24929] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2797.958691][T24929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2800.066710][T24929] Bluetooth: hci7: command tx timeout [ 2801.973761][ T5323] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2802.163498][T24929] Bluetooth: hci7: command tx timeout [ 2802.170663][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2802.190461][ T5323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2802.200707][ T5323] usb 2-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2802.210411][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2802.240169][ T5323] usb 2-1: config 0 descriptor?? [ 2802.643015][T14326] bridge_slave_1: left allmulticast mode [ 2802.648860][T14326] bridge_slave_1: left promiscuous mode [ 2802.654910][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2802.667000][T27966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2802.685754][T14326] bridge_slave_0: left allmulticast mode [ 2802.691464][T14326] bridge_slave_0: left promiscuous mode [ 2802.697348][T27966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.703712][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.251876][T24929] Bluetooth: hci7: command tx timeout [ 2805.047688][ T5323] usbhid 2-1:0.0: can't add hid device: -71 [ 2805.061729][ T5323] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2805.096000][ T5323] usb 2-1: USB disconnect, device number 124 [ 2806.100911][T27984] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4274'. [ 2806.345369][T24929] Bluetooth: hci7: command tx timeout [ 2806.590543][T27991] fuse: Unknown parameter '0x0000000000000006' [ 2806.720336][T14326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2806.737454][T14326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2806.754009][T14326] bond0 (unregistering): Released all slaves [ 2810.430005][T27899] chnl_net:caif_netlink_parms(): no params data found [ 2811.515799][T27839] bridge0: port 1(bridge_slave_0) entered blocking state [ 2811.523041][T27839] bridge0: port 1(bridge_slave_0) entered disabled state [ 2811.562065][T27839] bridge_slave_0: entered allmulticast mode [ 2811.576978][T27839] bridge_slave_0: entered promiscuous mode [ 2811.600018][T14326] hsr_slave_0: left promiscuous mode [ 2811.600670][T14326] hsr_slave_1: left promiscuous mode [ 2811.601413][T14326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2811.601458][T14326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2811.602262][T14326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2811.602292][T14326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2811.644642][T14326] veth1_macvtap: left promiscuous mode [ 2811.692944][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4279'. [ 2811.702058][T14326] veth0_macvtap: left promiscuous mode [ 2811.702238][T14326] veth1_vlan: left promiscuous mode [ 2811.702356][T14326] veth0_vlan: left promiscuous mode [ 2813.054646][T14326] team0 (unregistering): Port device team_slave_1 removed [ 2813.333002][T14326] team0 (unregistering): Port device team_slave_0 removed [ 2813.630456][T28043] fuse: Unknown parameter '0x0000000000000006' [ 2814.357906][T27839] bridge0: port 2(bridge_slave_1) entered blocking state [ 2814.367604][T27839] bridge0: port 2(bridge_slave_1) entered disabled state [ 2814.383710][T27839] bridge_slave_1: entered allmulticast mode [ 2814.391082][T27839] bridge_slave_1: entered promiscuous mode [ 2814.559942][T27839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2814.768411][T27839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2815.651551][T27899] bridge0: port 1(bridge_slave_0) entered blocking state [ 2815.681047][T27899] bridge0: port 1(bridge_slave_0) entered disabled state [ 2815.701594][T27899] bridge_slave_0: entered allmulticast mode [ 2815.714917][T27899] bridge_slave_0: entered promiscuous mode [ 2815.719598][ T5236] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2815.751264][T27899] bridge0: port 2(bridge_slave_1) entered blocking state [ 2815.760052][T27899] bridge0: port 2(bridge_slave_1) entered disabled state [ 2815.767653][T27899] bridge_slave_1: entered allmulticast mode [ 2815.778793][T27899] bridge_slave_1: entered promiscuous mode [ 2815.884463][T27839] team0: Port device team_slave_0 added [ 2815.916168][ T5236] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 2815.929967][T28058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4287'. [ 2815.939119][ T5236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2815.939170][ T5236] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2815.992770][ T5236] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2816.008382][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2816.033445][ T5236] usb 4-1: Product: syz [ 2816.039408][ T5236] usb 4-1: Manufacturer: syz [ 2816.053477][ T5236] usb 4-1: SerialNumber: syz [ 2816.073208][T27839] team0: Port device team_slave_1 added [ 2816.084561][ T5236] usb 4-1: config 0 descriptor?? [ 2816.121223][ T5236] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2816.147418][ T5236] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 2816.175378][T27899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2816.289274][T27949] chnl_net:caif_netlink_parms(): no params data found [ 2816.311878][T27899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2816.352011][ T5323] usb 4-1: USB disconnect, device number 115 [ 2816.385150][T27839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2816.392223][T27839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2816.418189][ C1] vkms_vblank_simulate: vblank timer overrun [ 2816.453456][T27839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2816.539605][T27899] team0: Port device team_slave_0 added [ 2816.560781][T27839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2816.578298][T27839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2816.619308][T27839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2816.677096][T27899] team0: Port device team_slave_1 added [ 2816.952433][T27899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2816.987522][T27899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2817.060511][T27899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2817.103597][T27839] hsr_slave_0: entered promiscuous mode [ 2817.110490][T27839] hsr_slave_1: entered promiscuous mode [ 2817.119785][T27839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2817.127548][T27839] Cannot create hsr debugfs directory [ 2817.197818][T27899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2817.216394][T27899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2817.243547][T27899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2817.297520][T28091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2817.405100][T28091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2817.463238][T27949] bridge0: port 1(bridge_slave_0) entered blocking state [ 2817.470898][T27949] bridge0: port 1(bridge_slave_0) entered disabled state [ 2817.478598][T27949] bridge_slave_0: entered allmulticast mode [ 2817.486328][T27949] bridge_slave_0: entered promiscuous mode [ 2817.520627][T28089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2817.651654][T27949] bridge0: port 2(bridge_slave_1) entered blocking state [ 2817.683577][T27949] bridge0: port 2(bridge_slave_1) entered disabled state [ 2817.690805][T27949] bridge_slave_1: entered allmulticast mode [ 2817.705313][T27949] bridge_slave_1: entered promiscuous mode [ 2817.854444][T27899] hsr_slave_0: entered promiscuous mode [ 2817.867484][T27899] hsr_slave_1: entered promiscuous mode [ 2817.889232][T27899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2817.913298][T27899] Cannot create hsr debugfs directory [ 2817.955903][T27949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2817.984136][T27949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2818.264311][T28102] FAULT_INJECTION: forcing a failure. [ 2818.264311][T28102] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2818.314724][T28102] CPU: 1 UID: 0 PID: 28102 Comm: syz.3.4291 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 2818.325535][T28102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2818.335603][T28102] Call Trace: [ 2818.338893][T28102] [ 2818.341834][T28102] dump_stack_lvl+0x241/0x360 [ 2818.346536][T28102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2818.351746][T28102] ? __pfx__printk+0x10/0x10 [ 2818.356353][T28102] ? __pfx_lock_release+0x10/0x10 [ 2818.361411][T28102] should_fail_ex+0x3b0/0x4e0 [ 2818.366110][T28102] _copy_from_user+0x2f/0xe0 [ 2818.370729][T28102] copy_msghdr_from_user+0xae/0x680 [ 2818.375957][T28102] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2818.381904][T28102] __sys_sendmsg+0x23d/0x3a0 [ 2818.386509][T28102] ? __pfx___sys_sendmsg+0x10/0x10 [ 2818.391631][T28102] ? vfs_write+0x7c4/0xc90 [ 2818.396053][T28102] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2818.402372][T28102] ? do_syscall_64+0x100/0x230 [ 2818.407124][T28102] ? do_syscall_64+0xb6/0x230 [ 2818.411796][T28102] do_syscall_64+0xf3/0x230 [ 2818.416309][T28102] ? clear_bhb_loop+0x35/0x90 [ 2818.420975][T28102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2818.426950][T28102] RIP: 0033:0x7fa3eff7def9 [ 2818.431359][T28102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2818.450959][T28102] RSP: 002b:00007fa3f0da3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2818.459457][T28102] RAX: ffffffffffffffda RBX: 00007fa3f0136058 RCX: 00007fa3eff7def9 [ 2818.467855][T28102] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 2818.475818][T28102] RBP: 00007fa3f0da3090 R08: 0000000000000000 R09: 0000000000000000 [ 2818.483779][T28102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2818.491740][T28102] R13: 0000000000000001 R14: 00007fa3f0136058 R15: 00007fff32616968 [ 2818.499711][T28102] [ 2818.502852][ C1] vkms_vblank_simulate: vblank timer overrun [ 2818.518843][T28105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2818.935481][T27949] team0: Port device team_slave_0 added [ 2819.035822][T27949] team0: Port device team_slave_1 added [ 2819.375461][T27949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2819.382486][T27949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2819.409905][T27949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2820.357467][T27949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2820.362564][T28122] fuse: Unknown parameter '0x0000000000000006' [ 2820.382740][T27949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2820.443479][T27949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2820.489158][T28127] FAULT_INJECTION: forcing a failure. [ 2820.489158][T28127] name failslab, interval 1, probability 0, space 0, times 1 [ 2820.506969][T28127] CPU: 1 UID: 0 PID: 28127 Comm: syz.3.4294 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 2820.517767][T28127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2820.527840][T28127] Call Trace: [ 2820.531135][T28127] [ 2820.534063][T28127] dump_stack_lvl+0x241/0x360 [ 2820.538764][T28127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2820.544001][T28127] ? __wake_up_klogd+0xcc/0x110 [ 2820.548904][T28127] should_fail_ex+0x3b0/0x4e0 [ 2820.553636][T28127] ? getname_flags+0xb7/0x540 [ 2820.558348][T28127] should_failslab+0xac/0x100 [ 2820.563053][T28127] ? getname_flags+0xb7/0x540 [ 2820.567835][T28127] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2820.573229][T28127] getname_flags+0xb7/0x540 [ 2820.577751][T28127] do_sys_openat2+0xd2/0x1d0 [ 2820.582349][T28127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2820.588337][T28127] ? __pfx_do_sys_openat2+0x10/0x10 [ 2820.593528][T28127] ? __fget_files+0x3f6/0x470 [ 2820.598291][T28127] __x64_sys_openat+0x247/0x2a0 [ 2820.603136][T28127] ? __pfx___x64_sys_openat+0x10/0x10 [ 2820.608509][T28127] ? do_syscall_64+0x100/0x230 [ 2820.613321][T28127] ? do_syscall_64+0xb6/0x230 [ 2820.618096][T28127] do_syscall_64+0xf3/0x230 [ 2820.622620][T28127] ? clear_bhb_loop+0x35/0x90 [ 2820.627298][T28127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2820.633178][T28127] RIP: 0033:0x7fa3eff7def9 [ 2820.637582][T28127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2820.657350][T28127] RSP: 002b:00007fa3f0d82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2820.665849][T28127] RAX: ffffffffffffffda RBX: 00007fa3f0136130 RCX: 00007fa3eff7def9 [ 2820.673839][T28127] RDX: 0000000000200002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 2820.681841][T28127] RBP: 00007fa3f0d82090 R08: 0000000000000000 R09: 0000000000000000 [ 2820.689833][T28127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2820.697819][T28127] R13: 0000000000000000 R14: 00007fa3f0136130 R15: 00007fff32616968 [ 2820.706162][T28127] [ 2820.709194][ C1] vkms_vblank_simulate: vblank timer overrun [ 2822.009329][T14326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2823.150930][T27949] hsr_slave_0: entered promiscuous mode [ 2823.166515][T27949] hsr_slave_1: entered promiscuous mode [ 2823.182637][T27949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2823.192542][T27949] Cannot create hsr debugfs directory [ 2823.291017][T14326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2823.393745][ T5323] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2824.049943][ T5323] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 2824.080842][ T5323] usb 2-1: config 0 has no interface number 0 [ 2824.120294][ T5323] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 2824.230374][ T5323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2824.273471][ T5323] usb 2-1: Product: syz [ 2824.277687][ T5323] usb 2-1: Manufacturer: syz [ 2824.319900][ T5323] usb 2-1: SerialNumber: syz [ 2824.362318][ T5323] usb 2-1: config 0 descriptor?? [ 2824.446271][T28161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4300'. [ 2824.526130][ T5323] usb 2-1: can't set config #0, error -71 [ 2824.552391][T14326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2824.576345][ T5323] usb 2-1: USB disconnect, device number 125 [ 2825.311245][T14326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2825.660016][T28179] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4304'. [ 2826.410117][T14326] bridge_slave_1: left allmulticast mode [ 2826.421695][T14326] bridge_slave_1: left promiscuous mode [ 2826.441514][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2826.461247][T14326] bridge_slave_0: left allmulticast mode [ 2826.480522][T14326] bridge_slave_0: left promiscuous mode [ 2826.512743][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2826.552902][T14326] bridge_slave_1: left allmulticast mode [ 2826.573722][T14326] bridge_slave_1: left promiscuous mode [ 2826.600761][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2826.645935][T14326] bridge_slave_0: left allmulticast mode [ 2826.651632][T14326] bridge_slave_0: left promiscuous mode [ 2826.651812][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2826.677633][T28184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4305'. [ 2827.551917][T14326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2827.569187][T14326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2827.582999][T14326] bond0 (unregistering): Released all slaves [ 2827.802538][T14326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2827.815102][T14326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2827.826276][T14326] bond0 (unregistering): Released all slaves [ 2828.123933][T28203] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2828.347823][T28215] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 2828.360816][T28215] netlink: 512 bytes leftover after parsing attributes in process `syz.1.4311'. [ 2828.553750][T20205] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2828.607765][T14326] hsr_slave_0: left promiscuous mode [ 2828.631407][T14326] hsr_slave_1: left promiscuous mode [ 2828.638804][T14326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2828.647345][T14326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2828.676688][T14326] hsr_slave_0: left promiscuous mode [ 2828.705218][T14326] hsr_slave_1: left promiscuous mode [ 2828.726492][T14326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2828.739613][T14326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2828.763869][T20205] usb 4-1: Using ep0 maxpacket: 8 [ 2828.770382][T14326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2828.778544][T14326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2828.787797][T20205] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55 [ 2828.803606][T20205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2828.825417][T20205] usb 4-1: config 0 descriptor?? [ 2828.836335][T20205] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2828.845638][T14326] veth1_macvtap: left promiscuous mode [ 2828.851361][T14326] veth0_macvtap: left promiscuous mode [ 2828.857791][T14326] veth1_vlan: left promiscuous mode [ 2828.863314][T14326] veth0_vlan: left promiscuous mode [ 2828.873807][T20205] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2829.366493][T20205] usb 4-1: USB disconnect, device number 116 [ 2829.779380][T28228] FAULT_INJECTION: forcing a failure. [ 2829.779380][T28228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2829.827586][T28228] CPU: 1 UID: 0 PID: 28228 Comm: syz.1.4314 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 2829.838412][T28228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2829.848485][T28228] Call Trace: [ 2829.851776][T28228] [ 2829.854718][T28228] dump_stack_lvl+0x241/0x360 [ 2829.859419][T28228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2829.864634][T28228] ? __pfx__printk+0x10/0x10 [ 2829.869247][T28228] ? snprintf+0xda/0x120 [ 2829.873523][T28228] should_fail_ex+0x3b0/0x4e0 [ 2829.878236][T28228] _copy_to_user+0x2f/0xb0 [ 2829.882680][T28228] simple_read_from_buffer+0xca/0x150 [ 2829.888080][T28228] proc_fail_nth_read+0x1ec/0x260 [ 2829.893138][T28228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2829.898706][T28228] ? rw_verify_area+0x520/0x6b0 [ 2829.903581][T28228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2829.909152][T28228] vfs_read+0x204/0xbc0 [ 2829.913331][T28228] ? __pfx_lock_release+0x10/0x10 [ 2829.918382][T28228] ? __pfx_vfs_read+0x10/0x10 [ 2829.923090][T28228] ? __fget_files+0x29/0x470 [ 2829.927702][T28228] ? __fget_files+0x3f6/0x470 [ 2829.932417][T28228] ksys_read+0x1a0/0x2c0 [ 2829.936689][T28228] ? __pfx_ksys_read+0x10/0x10 [ 2829.941478][T28228] ? do_syscall_64+0x100/0x230 [ 2829.946261][T28228] ? do_syscall_64+0xb6/0x230 [ 2829.950967][T28228] do_syscall_64+0xf3/0x230 [ 2829.955488][T28228] ? clear_bhb_loop+0x35/0x90 [ 2829.960186][T28228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2829.966097][T28228] RIP: 0033:0x7f03cb57c93c [ 2829.970535][T28228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2829.990165][T28228] RSP: 002b:00007f03cc299030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2829.998608][T28228] RAX: ffffffffffffffda RBX: 00007f03cb735f80 RCX: 00007f03cb57c93c [ 2830.006606][T28228] RDX: 000000000000000f RSI: 00007f03cc2990a0 RDI: 0000000000000005 [ 2830.014598][T28228] RBP: 00007f03cc299090 R08: 0000000000000000 R09: 0000000000000000 [ 2830.022585][T28228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2830.030573][T28228] R13: 0000000000000000 R14: 00007f03cb735f80 R15: 00007ffd15e2e908 [ 2830.038582][T28228] [ 2830.041760][ C1] vkms_vblank_simulate: vblank timer overrun [ 2830.292947][T28232] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2830.784610][T28237] FAULT_INJECTION: forcing a failure. [ 2830.784610][T28237] name failslab, interval 1, probability 0, space 0, times 0 [ 2830.797410][T28237] CPU: 0 UID: 0 PID: 28237 Comm: syz.1.4316 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 2830.808200][T28237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2830.818269][T28237] Call Trace: [ 2830.821559][T28237] [ 2830.824496][T28237] dump_stack_lvl+0x241/0x360 [ 2830.829195][T28237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2830.834408][T28237] ? __pfx__printk+0x10/0x10 [ 2830.839010][T28237] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 2830.844569][T28237] ? __pfx___might_resched+0x10/0x10 [ 2830.849870][T28237] should_fail_ex+0x3b0/0x4e0 [ 2830.854589][T28237] ? vm_area_alloc+0x24/0x1d0 [ 2830.859278][T28237] should_failslab+0xac/0x100 [ 2830.863970][T28237] ? vm_area_alloc+0x24/0x1d0 [ 2830.868656][T28237] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2830.874038][T28237] ? mas_find+0x950/0xbb0 [ 2830.878483][T28237] vm_area_alloc+0x24/0x1d0 [ 2830.883003][T28237] mmap_region+0xc3d/0x2090 [ 2830.887544][T28237] ? __pfx_mmap_region+0x10/0x10 [ 2830.892490][T28237] ? __pfx_cap_mmap_addr+0x10/0x10 [ 2830.897699][T28237] ? cap_mmap_addr+0x54/0x2c0 [ 2830.902427][T28237] ? bpf_lsm_capable+0x9/0x10 [ 2830.907117][T28237] ? security_capable+0x90/0xb0 [ 2830.911991][T28237] do_mmap+0x8f9/0x1010 [ 2830.916166][T28237] ? __pfx_do_mmap+0x10/0x10 [ 2830.920783][T28237] __se_sys_remap_file_pages+0x6ae/0x9a0 [ 2830.926432][T28237] ? __pfx___schedule+0x10/0x10 [ 2830.931309][T28237] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 2830.937480][T28237] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2830.943474][T28237] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2830.949816][T28237] ? do_syscall_64+0x100/0x230 [ 2830.954597][T28237] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 2830.960332][T28237] do_syscall_64+0xf3/0x230 [ 2830.964847][T28237] ? clear_bhb_loop+0x35/0x90 [ 2830.969537][T28237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2830.975440][T28237] RIP: 0033:0x7f03cb57def9 [ 2830.979864][T28237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2830.999489][T28237] RSP: 002b:00007f03cafde038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 2831.007924][T28237] RAX: ffffffffffffffda RBX: 00007f03cb736130 RCX: 00007f03cb57def9 [ 2831.015908][T28237] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffb000 [ 2831.023889][T28237] RBP: 00007f03cafde090 R08: 0000000000000000 R09: 0000000000000000 [ 2831.031872][T28237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2831.039852][T28237] R13: 0000000000000000 R14: 00007f03cb736130 R15: 00007ffd15e2e908 [ 2831.047848][T28237] [ 2831.109271][T14326] team0 (unregistering): Port device team_slave_1 removed [ 2831.222228][T14326] team0 (unregistering): Port device team_slave_0 removed [ 2831.272979][T20437] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2831.286076][T20437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2831.310099][T20437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2831.324369][T20437] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2831.332858][T20437] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2831.352111][T20437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2832.794168][T14326] team0 (unregistering): Port device team_slave_1 removed [ 2832.861909][T14326] team0 (unregistering): Port device team_slave_0 removed [ 2833.424775][T20437] Bluetooth: hci4: command tx timeout [ 2834.111118][T27899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2834.241431][T27899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2834.336781][T27899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2834.450338][T27899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2834.894821][T28262] FAULT_INJECTION: forcing a failure. [ 2834.894821][T28262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2834.943986][T28262] CPU: 0 UID: 0 PID: 28262 Comm: syz.1.4320 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 2834.954806][T28262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2834.964889][T28262] Call Trace: [ 2834.968184][T28262] [ 2834.971129][T28262] dump_stack_lvl+0x241/0x360 [ 2834.975834][T28262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2834.981058][T28262] ? __pfx__printk+0x10/0x10 [ 2834.985672][T28262] ? __pfx_lock_release+0x10/0x10 [ 2834.990726][T28262] should_fail_ex+0x3b0/0x4e0 [ 2834.995454][T28262] _copy_from_user+0x2f/0xe0 [ 2835.000157][T28262] sk_getsockopt+0x1d2/0x3890 [ 2835.004868][T28262] ? __pfx_sk_getsockopt+0x10/0x10 [ 2835.010026][T28262] ? __pfx___might_resched+0x10/0x10 [ 2835.015334][T28262] ? __might_fault+0xaa/0x120 [ 2835.020048][T28262] ? __pfx_lock_release+0x10/0x10 [ 2835.025121][T28262] ? __might_fault+0xc6/0x120 [ 2835.029823][T28262] do_sock_getsockopt+0x2d5/0x7e0 [ 2835.034881][T28262] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2835.040449][T28262] ? __fget_files+0x3f6/0x470 [ 2835.045189][T28262] __sys_getsockopt+0x271/0x330 [ 2835.050062][T28262] ? __pfx___sys_getsockopt+0x10/0x10 [ 2835.055457][T28262] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2835.061811][T28262] ? do_syscall_64+0x100/0x230 [ 2835.066600][T28262] __x64_sys_getsockopt+0xb5/0xd0 [ 2835.071654][T28262] do_syscall_64+0xf3/0x230 [ 2835.076179][T28262] ? clear_bhb_loop+0x35/0x90 [ 2835.080884][T28262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2835.086790][T28262] RIP: 0033:0x7f03cb57def9 [ 2835.091219][T28262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2835.110847][T28262] RSP: 002b:00007f03cc299038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2835.119300][T28262] RAX: ffffffffffffffda RBX: 00007f03cb735f80 RCX: 00007f03cb57def9 [ 2835.127302][T28262] RDX: 000000000000001e RSI: 0000000000000001 RDI: 0000000000000003 [ 2835.135389][T28262] RBP: 00007f03cc299090 R08: 0000000020000500 R09: 0000000000000000 [ 2835.143386][T28262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2835.151386][T28262] R13: 0000000000000000 R14: 00007f03cb735f80 R15: 00007ffd15e2e908 [ 2835.159430][T28262] [ 2835.268187][T28272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2835.318970][T26577] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 2835.333553][T26577] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2835.364945][T28272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2835.458523][T28272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2835.469606][T14334] wlan1: authenticated [ 2835.493706][T14334] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 2835.503973][T20437] Bluetooth: hci4: command tx timeout [ 2835.649985][T14355] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 2835.788250][T14355] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 2835.916116][ T4587] wlan1: association with 08:02:11:00:00:00 timed out [ 2836.394536][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.625552][T27899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2836.634325][T14836] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2836.690698][T28241] chnl_net:caif_netlink_parms(): no params data found [ 2836.727022][T27899] 8021q: adding VLAN 0 to HW filter on device team0 [ 2836.782964][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2836.790167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2836.839975][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 2836.847173][T14351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2836.861580][T14836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2836.873698][T14836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2836.883736][T14836] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 2836.893164][T14836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2836.905259][T14836] usb 4-1: config 0 descriptor?? [ 2836.993319][T28241] bridge0: port 1(bridge_slave_0) entered blocking state [ 2837.000564][T28241] bridge0: port 1(bridge_slave_0) entered disabled state [ 2837.008972][T28241] bridge_slave_0: entered allmulticast mode [ 2837.017420][T28241] bridge_slave_0: entered promiscuous mode [ 2837.062868][T28241] bridge0: port 2(bridge_slave_1) entered blocking state [ 2837.085574][T28241] bridge0: port 2(bridge_slave_1) entered disabled state [ 2837.093142][T28241] bridge_slave_1: entered allmulticast mode [ 2837.122621][T28241] bridge_slave_1: entered promiscuous mode [ 2837.308755][T28241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2837.340315][T28286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2837.374054][T28286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2837.433734][T28241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2837.535542][T27949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2837.582254][T28308] x_tables: duplicate underflow at hook 3 [ 2837.588811][T20437] Bluetooth: hci4: command tx timeout [ 2837.588915][T27949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2837.778889][T28241] team0: Port device team_slave_0 added [ 2837.797426][T27949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2837.853040][T28241] team0: Port device team_slave_1 added [ 2837.943680][T27949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2838.016978][T28241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2838.026415][T28241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2838.053944][T28241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2838.095078][T28241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2838.102054][T28241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2838.188693][T28241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2838.476550][T28241] hsr_slave_0: entered promiscuous mode [ 2838.530782][T28241] hsr_slave_1: entered promiscuous mode [ 2838.553548][T28241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2838.591376][T28241] Cannot create hsr debugfs directory [ 2838.633723][T23182] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2838.843662][T23182] usb 2-1: Using ep0 maxpacket: 32 [ 2838.855136][T14351] bridge_slave_1: left allmulticast mode [ 2838.871346][T23182] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2838.884111][T14351] bridge_slave_1: left promiscuous mode [ 2838.900481][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 2838.909849][T23182] usb 2-1: config 127 has an invalid interface number: 179 but max is 0 [ 2838.930342][T14351] bridge_slave_0: left allmulticast mode [ 2838.938148][T23182] usb 2-1: config 127 has no interface number 0 [ 2838.957897][T14351] bridge_slave_0: left promiscuous mode [ 2838.970122][T23182] usb 2-1: config 127 interface 179 altsetting 1 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 2838.992288][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 2839.002942][T23182] usb 2-1: config 127 interface 179 has no altsetting 0 [ 2839.046804][T23182] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d0.96 [ 2839.075629][T23182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2839.103826][T23182] usb 2-1: Product: syz [ 2839.108196][T23182] usb 2-1: Manufacturer: syz [ 2839.112993][T23182] usb 2-1: SerialNumber: syz [ 2839.284919][T14351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2839.297924][T14351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2839.325551][T14351] bond0 (unregistering): Released all slaves [ 2839.413236][T28318] hpfs: Bad magic ... probably not HPFS [ 2839.465813][T14836] usbhid 4-1:0.0: can't add hid device: -71 [ 2839.471855][T14836] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2839.506506][T23182] iowarrior 2-1:127.179: no interrupt-out endpoint found [ 2839.542706][T14836] usb 4-1: USB disconnect, device number 117 [ 2839.553278][T23182] usb 2-1: USB disconnect, device number 126 [ 2839.651098][T14351] hsr_slave_0: left promiscuous mode [ 2839.666016][T20437] Bluetooth: hci4: command tx timeout [ 2839.678871][T14351] hsr_slave_1: left promiscuous mode [ 2839.689028][T14351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2839.696821][T28335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4330'. [ 2839.710665][T14351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2839.996238][T14351] team0 (unregistering): Port device team_slave_1 removed [ 2840.045703][T14351] team0 (unregistering): Port device team_slave_0 removed [ 2842.483854][T27899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2842.679731][T28371] FAULT_INJECTION: forcing a failure. [ 2842.679731][T28371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2842.679821][T28371] [ 2842.679827][T28371] ====================================================== [ 2842.679835][T28371] WARNING: possible circular locking dependency detected [ 2842.679843][T28371] 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 Not tainted [ 2842.679854][T28371] ------------------------------------------------------ [ 2842.679861][T28371] syz.3.4332/28371 is trying to acquire lock: [ 2842.679872][T28371] ffffffff8e613cb8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x20/0xa0 [ 2842.679927][T28371] [ 2842.679927][T28371] but task is already holding lock: [ 2842.679933][T28371] ffff8880b893e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2842.679975][T28371] [ 2842.679975][T28371] which lock already depends on the new lock. [ 2842.679975][T28371] [ 2842.679982][T28371] [ 2842.679982][T28371] the existing dependency chain (in reverse order) is: [ 2842.679989][T28371] [ 2842.679989][T28371] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 2842.680012][T28371] lock_acquire+0x1ed/0x550 [ 2842.680034][T28371] _raw_spin_lock_nested+0x31/0x40 [ 2842.680050][T28371] raw_spin_rq_lock_nested+0x2a/0x140 [ 2842.680069][T28371] task_fork_fair+0x61/0x1e0 [ 2842.680091][T28371] sched_cgroup_fork+0x37c/0x410 [ 2842.680105][T28371] copy_process+0x2217/0x3dc0 [ 2842.680125][T28371] kernel_clone+0x223/0x880 [ 2842.680146][T28371] user_mode_thread+0x132/0x1a0 [ 2842.680167][T28371] rest_init+0x23/0x300 [ 2842.680186][T28371] start_kernel+0x47a/0x500 [ 2842.680207][T28371] x86_64_start_reservations+0x2a/0x30 [ 2842.680225][T28371] x86_64_start_kernel+0x9f/0xa0 [ 2842.680242][T28371] common_startup_64+0x13e/0x147 [ 2842.680259][T28371] [ 2842.680259][T28371] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 2842.680283][T28371] lock_acquire+0x1ed/0x550 [ 2842.680302][T28371] _raw_spin_lock_irqsave+0xd5/0x120 [ 2842.680323][T28371] try_to_wake_up+0xb0/0x1470 [ 2842.680345][T28371] up+0x72/0x90 [ 2842.680361][T28371] console_unlock+0x22f/0x4d0 [ 2842.680376][T28371] vprintk_emit+0x5dc/0x7c0 [ 2842.680392][T28371] dev_vprintk_emit+0x2ae/0x330 [ 2842.680407][T28371] dev_printk_emit+0xdd/0x120 [ 2842.680422][T28371] __netdev_printk+0x3e0/0x4d0 [ 2842.680443][T28371] netdev_info+0x122/0x170 [ 2842.680458][T28371] nsim_udp_tunnel_unset_port+0x2f3/0x590 [ 2842.680480][T28371] __udp_tunnel_nic_device_sync+0xa1f/0x1380 [ 2842.680503][T28371] udp_tunnel_nic_flush+0x4e5/0xa00 [ 2842.680525][T28371] udp_tunnel_nic_netdevice_event+0xafb/0x12f0 [ 2842.680547][T28371] notifier_call_chain+0x19f/0x3e0 [ 2842.680571][T28371] unregister_netdevice_many_notify+0xd81/0x1c40 [ 2842.680592][T28371] unregister_netdevice_queue+0x303/0x370 [ 2842.680612][T28371] nsim_destroy+0x180/0x5c0 [ 2842.680631][T28371] __nsim_dev_port_del+0x14b/0x1b0 [ 2842.680653][T28371] nsim_dev_reload_destroy+0x28a/0x490 [ 2842.680673][T28371] nsim_drv_remove+0x58/0x160 [ 2842.680694][T28371] device_release_driver_internal+0x4a9/0x7c0 [ 2842.680713][T28371] bus_remove_device+0x34f/0x420 [ 2842.680734][T28371] device_del+0x57a/0x9b0 [ 2842.680749][T28371] device_unregister+0x20/0xc0 [ 2842.680764][T28371] del_device_store+0x363/0x480 [ 2842.680782][T28371] kernfs_fop_write_iter+0x3a1/0x500 [ 2842.680798][T28371] vfs_write+0xa72/0xc90 [ 2842.680818][T28371] ksys_write+0x1a0/0x2c0 [ 2842.680838][T28371] do_syscall_64+0xf3/0x230 [ 2842.680855][T28371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2842.680874][T28371] [ 2842.680874][T28371] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 2842.680898][T28371] validate_chain+0x18e0/0x5900 [ 2842.680918][T28371] __lock_acquire+0x137a/0x2040 [ 2842.680938][T28371] lock_acquire+0x1ed/0x550 [ 2842.680957][T28371] _raw_spin_lock_irqsave+0xd5/0x120 [ 2842.680978][T28371] down_trylock+0x20/0xa0 [ 2842.680995][T28371] __down_trylock_console_sem+0x109/0x250 [ 2842.681013][T28371] vprintk_emit+0x2aa/0x7c0 [ 2842.681028][T28371] _printk+0xd5/0x120 [ 2842.681043][T28371] should_fail_ex+0x391/0x4e0 [ 2842.681059][T28371] strncpy_from_user+0x36/0x2e0 [ 2842.681074][T28371] strncpy_from_user_nofault+0x71/0x140 [ 2842.681097][T28371] bpf_probe_read_compat_str+0xe9/0x180 [ 2842.681119][T28371] bpf_prog_e3f550b2299101ce+0x40/0x42 [ 2842.681134][T28371] bpf_trace_run4+0x334/0x590 [ 2842.681151][T28371] __traceiter_sched_switch+0x98/0xd0 [ 2842.681168][T28371] __schedule+0x253f/0x4a10 [ 2842.681189][T28371] preempt_schedule_common+0x84/0xd0 [ 2842.681211][T28371] preempt_schedule+0xe1/0xf0 [ 2842.681232][T28371] preempt_schedule_thunk+0x1a/0x30 [ 2842.681248][T28371] __local_bh_enable_ip+0x179/0x200 [ 2842.681267][T28371] sock_i_ino+0xa8/0xc0 [ 2842.681287][T28371] netlink_seq_show+0x32c/0x480 [ 2842.681305][T28371] traverse+0x1df/0x550 [ 2842.681323][T28371] seq_read_iter+0xc5e/0xd60 [ 2842.681340][T28371] seq_read+0x3a4/0x4f0 [ 2842.681357][T28371] proc_reg_read+0x204/0x2f0 [ 2842.681379][T28371] vfs_readv+0x6c2/0xa90 [ 2842.681396][T28371] __x64_sys_preadv+0x1c7/0x2d0 [ 2842.681417][T28371] do_syscall_64+0xf3/0x230 [ 2842.681434][T28371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2842.681453][T28371] [ 2842.681453][T28371] other info that might help us debug this: [ 2842.681453][T28371] [ 2842.681459][T28371] Chain exists of: [ 2842.681459][T28371] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 2842.681459][T28371] [ 2842.681487][T28371] Possible unsafe locking scenario: [ 2842.681487][T28371] [ 2842.681492][T28371] CPU0 CPU1 [ 2842.681498][T28371] ---- ---- [ 2842.681504][T28371] lock(&rq->__lock); [ 2842.681516][T28371] lock(&p->pi_lock); [ 2842.681528][T28371] lock(&rq->__lock); [ 2842.681541][T28371] lock((console_sem).lock); [ 2842.681553][T28371] [ 2842.681553][T28371] *** DEADLOCK *** [ 2842.681553][T28371] [ 2842.681558][T28371] 4 locks held by syz.3.4332/28371: [ 2842.681569][T28371] #0: ffff888055052e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 2842.681612][T28371] #1: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: rhashtable_walk_start_check+0x72/0xb60 [ 2842.681657][T28371] #2: ffff8880b893e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2842.681698][T28371] #3: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 2842.681740][T28371] [ 2842.681740][T28371] stack backtrace: [ 2842.681747][T28371] CPU: 1 UID: 0 PID: 28371 Comm: syz.3.4332 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 2842.681768][T28371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2842.681779][T28371] Call Trace: [ 2842.681787][T28371] [ 2842.681795][T28371] dump_stack_lvl+0x241/0x360 [ 2842.681815][T28371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2842.681839][T28371] ? print_circular_bug+0x130/0x1a0 [ 2842.681859][T28371] check_noncircular+0x36a/0x4a0 [ 2842.681880][T28371] ? __pfx_check_noncircular+0x10/0x10 [ 2842.681899][T28371] ? lockdep_lock+0x123/0x2b0 [ 2842.681928][T28371] ? _find_first_zero_bit+0xd3/0x100 [ 2842.681952][T28371] validate_chain+0x18e0/0x5900 [ 2842.681981][T28371] ? __pfx_validate_chain+0x10/0x10 [ 2842.681999][T28371] ? __pfx_prb_first_seq+0x10/0x10 [ 2842.682028][T28371] ? this_cpu_in_panic+0x4f/0x80 [ 2842.682052][T28371] ? _prb_read_valid+0xa39/0xac0 [ 2842.682082][T28371] ? mark_lock+0x9a/0x350 [ 2842.682106][T28371] __lock_acquire+0x137a/0x2040 [ 2842.682137][T28371] lock_acquire+0x1ed/0x550 [ 2842.682158][T28371] ? down_trylock+0x20/0xa0 [ 2842.682177][T28371] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 2842.682201][T28371] ? __pfx_lock_acquire+0x10/0x10 [ 2842.682222][T28371] ? rcu_is_watching+0x15/0xb0 [ 2842.682248][T28371] ? vprintk_store+0xd3e/0x1160 [ 2842.682271][T28371] _raw_spin_lock_irqsave+0xd5/0x120 [ 2842.682293][T28371] ? down_trylock+0x20/0xa0 [ 2842.682311][T28371] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2842.682340][T28371] down_trylock+0x20/0xa0 [ 2842.682360][T28371] __down_trylock_console_sem+0x109/0x250 [ 2842.682381][T28371] ? _printk+0xd5/0x120 [ 2842.682397][T28371] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 2842.682418][T28371] ? __pfx_lock_release+0x10/0x10 [ 2842.682444][T28371] vprintk_emit+0x2aa/0x7c0 [ 2842.682463][T28371] ? __pfx_vprintk_emit+0x10/0x10 [ 2842.682479][T28371] ? is_bpf_text_address+0x285/0x2a0 [ 2842.682502][T28371] ? is_bpf_text_address+0x26/0x2a0 [ 2842.682530][T28371] _printk+0xd5/0x120 [ 2842.682550][T28371] ? __pfx__printk+0x10/0x10 [ 2842.682573][T28371] should_fail_ex+0x391/0x4e0 [ 2842.682593][T28371] strncpy_from_user+0x36/0x2e0 [ 2842.682612][T28371] strncpy_from_user_nofault+0x71/0x140 [ 2842.682655][T28371] bpf_probe_read_compat_str+0xe9/0x180 [ 2842.682679][T28371] ? bpf_trace_run4+0x244/0x590 [ 2842.682698][T28371] bpf_prog_e3f550b2299101ce+0x40/0x42 [ 2842.682714][T28371] bpf_trace_run4+0x334/0x590 [ 2842.682733][T28371] ? rcu_read_lock_sched_held+0x8d/0x130 [ 2842.682757][T28371] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 2842.682782][T28371] ? __pfx_bpf_trace_run4+0x10/0x10 [ 2842.682804][T28371] ? __pfx_probe_sched_switch+0x10/0x10 [ 2842.682825][T28371] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 2842.682845][T28371] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 2842.682864][T28371] __traceiter_sched_switch+0x98/0xd0 [ 2842.682885][T28371] __schedule+0x253f/0x4a10 [ 2842.682918][T28371] ? lockdep_unlock+0x16a/0x300 [ 2842.682940][T28371] ? arch_stack_walk+0x16d/0x1b0 [ 2842.682959][T28371] ? __pfx___schedule+0x10/0x10 [ 2842.682990][T28371] ? mark_lock+0x2a4/0x350 [ 2842.683015][T28371] ? __lock_acquire+0x137a/0x2040 [ 2842.683040][T28371] ? preempt_schedule+0xe1/0xf0 [ 2842.683064][T28371] preempt_schedule_common+0x84/0xd0 [ 2842.683089][T28371] preempt_schedule+0xe1/0xf0 [ 2842.683113][T28371] ? __pfx_preempt_schedule+0x10/0x10 [ 2842.683137][T28371] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2842.683166][T28371] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2842.683189][T28371] preempt_schedule_thunk+0x1a/0x30 [ 2842.683208][T28371] ? mark_lock+0x9a/0x350 [ 2842.683231][T28371] __local_bh_enable_ip+0x179/0x200 [ 2842.683253][T28371] ? sock_i_ino+0x24/0xc0 [ 2842.683274][T28371] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2842.683299][T28371] ? sock_i_ino+0x24/0xc0 [ 2842.683324][T28371] sock_i_ino+0xa8/0xc0 [ 2842.683346][T28371] netlink_seq_show+0x32c/0x480 [ 2842.683370][T28371] ? __pfx_netlink_seq_show+0x10/0x10 [ 2842.683387][T28371] ? rhashtable_walk_next+0x1ca/0x410 [ 2842.683410][T28371] ? __netlink_seq_next+0x175/0x1a0 [ 2842.683432][T28371] traverse+0x1df/0x550 [ 2842.683457][T28371] seq_read_iter+0xc5e/0xd60 [ 2842.683486][T28371] seq_read+0x3a4/0x4f0 [ 2842.683508][T28371] ? __pfx_seq_read+0x10/0x10 [ 2842.683528][T28371] ? __pfx_lock_release+0x10/0x10 [ 2842.683559][T28371] ? __pfx_seq_read+0x10/0x10 [ 2842.683578][T28371] proc_reg_read+0x204/0x2f0 [ 2842.683604][T28371] vfs_readv+0x6c2/0xa90 [ 2842.683627][T28371] ? __pfx_proc_reg_read+0x10/0x10 [ 2842.683652][T28371] ? __pfx_vfs_readv+0x10/0x10 [ 2842.683676][T28371] ? __fget_files+0x29/0x470 [ 2842.683701][T28371] __x64_sys_preadv+0x1c7/0x2d0 [ 2842.683727][T28371] ? __pfx___x64_sys_preadv+0x10/0x10 [ 2842.683751][T28371] ? do_syscall_64+0x100/0x230 [ 2842.683772][T28371] ? do_syscall_64+0xb6/0x230 [ 2842.683791][T28371] do_syscall_64+0xf3/0x230 [ 2842.683810][T28371] ? clear_bhb_loop+0x35/0x90 [ 2842.683832][T28371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2842.683853][T28371] RIP: 0033:0x7fa3eff7def9 [ 2842.683868][T28371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2842.683884][T28371] RSP: 002b:00007fa3f0d82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2842.683903][T28371] RAX: ffffffffffffffda RBX: 00007fa3f0136130 RCX: 00007fa3eff7def9 [ 2842.683922][T28371] RDX: 0000000000000001 RSI: 00000000200014c0 RDI: 0000000000000007 [ 2842.683935][T28371] RBP: 00007fa3f0d82090 R08: 0000000000000000 R09: 0000000000000000 [ 2842.683947][T28371] R10: 0000000000000c81 R11: 0000000000000246 R12: 0000000000000001 [ 2842.683959][T28371] R13: 0000000000000000 R14: 00007fa3f0136130 R15: 00007fff32616968 [ 2842.683980][T28371] [ 2843.865840][T28371] CPU: 1 UID: 0 PID: 28371 Comm: syz.3.4332 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0 [ 2843.876591][T28371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2843.886711][T28371] Call Trace: [ 2843.889983][T28371] [ 2843.892893][T28371] dump_stack_lvl+0x241/0x360 [ 2843.897577][T28371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2843.902751][T28371] ? __pfx__printk+0x10/0x10 [ 2843.907320][T28371] should_fail_ex+0x3b0/0x4e0 [ 2843.911978][T28371] strncpy_from_user+0x36/0x2e0 [ 2843.916803][T28371] strncpy_from_user_nofault+0x71/0x140 [ 2843.922331][T28371] bpf_probe_read_compat_str+0xe9/0x180 [ 2843.927872][T28371] ? bpf_trace_run4+0x244/0x590 [ 2843.932699][T28371] bpf_prog_e3f550b2299101ce+0x40/0x42 [ 2843.938130][T28371] bpf_trace_run4+0x334/0x590 [ 2843.942784][T28371] ? rcu_read_lock_sched_held+0x8d/0x130 [ 2843.948394][T28371] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 2843.954525][T28371] ? __pfx_bpf_trace_run4+0x10/0x10 [ 2843.959703][T28371] ? __pfx_probe_sched_switch+0x10/0x10 [ 2843.965224][T28371] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 2843.971877][T28371] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 2843.977919][T28371] __traceiter_sched_switch+0x98/0xd0 [ 2843.983371][T28371] __schedule+0x253f/0x4a10 [ 2843.987871][T28371] ? lockdep_unlock+0x16a/0x300 [ 2843.992700][T28371] ? arch_stack_walk+0x16d/0x1b0 [ 2843.997700][T28371] ? __pfx___schedule+0x10/0x10 [ 2844.002527][T28371] ? mark_lock+0x2a4/0x350 [ 2844.006927][T28371] ? __lock_acquire+0x137a/0x2040 [ 2844.011947][T28371] ? preempt_schedule+0xe1/0xf0 [ 2844.016776][T28371] preempt_schedule_common+0x84/0xd0 [ 2844.022042][T28371] preempt_schedule+0xe1/0xf0 [ 2844.026704][T28371] ? __pfx_preempt_schedule+0x10/0x10 [ 2844.032054][T28371] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2844.038010][T28371] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2844.044311][T28371] preempt_schedule_thunk+0x1a/0x30 [ 2844.049486][T28371] ? mark_lock+0x9a/0x350 [ 2844.053806][T28371] __local_bh_enable_ip+0x179/0x200 [ 2844.058984][T28371] ? sock_i_ino+0x24/0xc0 [ 2844.063291][T28371] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2844.068989][T28371] ? sock_i_ino+0x24/0xc0 [ 2844.073298][T28371] sock_i_ino+0xa8/0xc0 [ 2844.077443][T28371] netlink_seq_show+0x32c/0x480 [ 2844.082272][T28371] ? __pfx_netlink_seq_show+0x10/0x10 [ 2844.087622][T28371] ? rhashtable_walk_next+0x1ca/0x410 [ 2844.092993][T28371] ? __netlink_seq_next+0x175/0x1a0 [ 2844.098188][T28371] traverse+0x1df/0x550 [ 2844.102336][T28371] seq_read_iter+0xc5e/0xd60 [ 2844.106926][T28371] seq_read+0x3a4/0x4f0 [ 2844.111062][T28371] ? __pfx_seq_read+0x10/0x10 [ 2844.115734][T28371] ? __pfx_lock_release+0x10/0x10 [ 2844.120751][T28371] ? __pfx_seq_read+0x10/0x10 [ 2844.125406][T28371] proc_reg_read+0x204/0x2f0 [ 2844.130066][T28371] vfs_readv+0x6c2/0xa90 [ 2844.134293][T28371] ? __pfx_proc_reg_read+0x10/0x10 [ 2844.139389][T28371] ? __pfx_vfs_readv+0x10/0x10 [ 2844.144139][T28371] ? __fget_files+0x29/0x470 [ 2844.148723][T28371] __x64_sys_preadv+0x1c7/0x2d0 [ 2844.153556][T28371] ? __pfx___x64_sys_preadv+0x10/0x10 [ 2844.158905][T28371] ? do_syscall_64+0x100/0x230 [ 2844.163648][T28371] ? do_syscall_64+0xb6/0x230 [ 2844.168299][T28371] do_syscall_64+0xf3/0x230 [ 2844.172782][T28371] ? clear_bhb_loop+0x35/0x90 [ 2844.177445][T28371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2844.183316][T28371] RIP: 0033:0x7fa3eff7def9 [ 2844.187707][T28371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2844.207291][T28371] RSP: 002b:00007fa3f0d82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2844.215693][T28371] RAX: ffffffffffffffda RBX: 00007fa3f0136130 RCX: 00007fa3eff7def9 [ 2844.223653][T28371] RDX: 0000000000000001 RSI: 00000000200014c0 RDI: 0000000000000007 [ 2844.231615][T28371] RBP: 00007fa3f0d82090 R08: 0000000000000000 R09: 0000000000000000 [ 2844.239564][T28371] R10: 0000000000000c81 R11: 0000000000000246 R12: 0000000000000001 [ 2844.247527][T28371] R13: 0000000000000000 R14: 00007fa3f0136130 R15: 00007fff32616968 [ 2844.255501][T28371] [ 2844.486595][T27899] veth0_vlan: entered promiscuous mode [ 2844.497657][T27899] veth1_vlan: entered promiscuous mode [ 2844.649877][T27949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2844.690805][T27949] 8021q: adding VLAN 0 to HW filter on device team0 [ 2844.737741][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 2844.744925][T14351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2844.761918][T27899] veth0_macvtap: entered promiscuous mode [ 2844.780321][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 2844.787496][T14351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2844.858900][T27899] veth1_macvtap: entered promiscuous mode [ 2844.916744][T28241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2844.932830][T28241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2844.961525][T28241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2844.982799][T27899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.008281][T27899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.032366][T27899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.049452][T27899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.061070][T27899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.083427][T27899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.094120][T27899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.108048][T27899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.120056][T27899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2845.130603][T28241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2845.174359][T27899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.186163][T27899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.197970][T27899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.208708][T27899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.219734][T27899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.230472][T27899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.240874][T27899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.251671][T27899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.262786][T27899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2845.292471][T27899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2845.302084][T27899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2845.310983][T27899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2845.320435][T27899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2845.418719][T27949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2845.435086][T27899] ieee80211 phy139: Selected rate control algorithm 'minstrel_ht' [ 2845.466748][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2845.468597][T27899] ieee80211 phy140: Selected rate control algorithm 'minstrel_ht' [ 2845.488390][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2845.512623][T14326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2845.522026][T14326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2845.568389][T28241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2845.598951][T28241] 8021q: adding VLAN 0 to HW filter on device team0 [ 2845.610262][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 2845.617400][T14351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2845.646842][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 2845.653997][T14334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2845.665833][T27949] veth0_vlan: entered promiscuous mode [ 2845.682380][T27949] veth1_vlan: entered promiscuous mode [ 2845.730129][T27949] veth0_macvtap: entered promiscuous mode [ 2845.756578][T27949] veth1_macvtap: entered promiscuous mode [ 2845.795979][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.810794][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.821076][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.834258][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.844303][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.855444][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.865309][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.875957][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.885906][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2845.896391][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.907853][T27949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2845.926559][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.937728][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.951250][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.963097][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.973213][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2845.984333][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2845.994529][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2846.005088][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.014962][T27949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2846.026865][T27949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.038460][T27949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2846.049287][T27949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2846.058957][T27949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2846.069117][T27949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2846.077888][T27949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2846.120983][T28241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2846.129503][T27949] ieee80211 phy141: Selected rate control algorithm 'minstrel_ht' [ 2846.171715][T14326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2846.178059][T27949] ieee80211 phy142: Selected rate control algorithm 'minstrel_ht' [ 2846.187389][T14326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2846.223310][T14351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2846.241693][T14351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2846.329936][T28241] veth0_vlan: entered promiscuous mode [ 2846.341881][T28241] veth1_vlan: entered promiscuous mode [ 2846.366300][T28241] veth0_macvtap: entered promiscuous mode [ 2846.374723][T28241] veth1_macvtap: entered promiscuous mode [ 2846.395533][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2846.406226][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.416166][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2846.427360][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.437342][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2846.448356][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.458257][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2846.470778][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.480747][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2846.491291][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.501130][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2846.511753][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.522723][T28241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2846.537608][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2846.549293][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.562248][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2846.573994][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.584565][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2846.595044][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.605222][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2846.615683][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.627545][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2846.638258][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.648596][T28241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2846.659125][T28241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2846.670409][T28241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2846.685714][T28241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2846.695927][T28241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2846.705625][T28241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2846.714959][T28241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2846.755143][T28241] ieee80211 phy143: Selected rate control algorithm 'minstrel_ht' [ 2846.778011][ T4587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2846.780146][T28241] ieee80211 phy144: Selected rate control algorithm 'minstrel_ht' [ 2846.794874][ T4587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2846.828575][T14334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2846.839160][T14334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50