last executing test programs: 13.684663589s ago: executing program 0 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) creat(&(0x7f0000000300)='./bus\x00', 0x0) (async) open(0x0, 0x16543e, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x0) getsockname$tipc(r8, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12.947954292s ago: executing program 4 (id=131): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1f, 0x0, 0x1009) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa000945f4fff600650005010400030a010102ac1414aa030cf84c0b3051d5787dfc56f018b706aa20fba47b5f08e394c36b1f30c7553f3e509edb266d6d5f62e012ca9cd4791c9c0f2b51a33eefcf728d3c9eab0c1609ec09aacfb67cebd2f55140379f498e80aa3363347e71c601d0eb32"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffffffffffecd) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="100000000000000000000026dfd240cc2a449e00a9c59dd0fcbc3667fe84f811", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) dup3(0xffffffffffffffff, r1, 0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000400)) 11.690404449s ago: executing program 0 (id=135): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109020dcbd351f2ece3d8286921664668d3da3ef1f5d5b304e579dd1f154b7d001079e55645675938e8056be719347ee84f9d22706c8bbea5f41251e78fb7b6f5a2ab2c8b260fa5983e282e4f1e36d85b5cef1fee6519e40aefa8b27f965a3fd44e24f482fdf4ee1e3de0eb107e7b016af5f1329f7f67cc4c277dfbebd1db80d921f406fcc1b50a1a42fd0000000000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000480)="0008b15610c2", 0x6, 0xfffffffffffffffd) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x701, 0xfffffffc, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2b, 0x5e, 0x6, 0x10, 0x77d, 0x627a, 0x10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x3, 0xe0, 0x46}}]}}]}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x8, 0x203, 0x2, 0x8, 0x6, 0x1, 0x2, 0x0, 0x1}}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000880)={0x2, 0x3, 0xe2, 0xe4, 0xfe, 0x9}) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r7 = getpid() ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000740)={0xa3, 0x0, &(0x7f00000006c0)}) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_usb_control_io$uac1(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="200ac5000000c50e00d07ea241cf622af2bc2d9713ce538f76f34e3fb5f52d6108179ade741b650f10a44d07d1875e96b38c164090c6f8440a86fda63de45d4f80d538080bbf54fe937a799476fef5c6d69eaf3d94c450ba31a6f834424db81ee74d9d218af5"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x0, 0x16, 0xbe, "a4308f09003fec0259d8bc89096707cd620a2dc4bec76f49f06770e5f39da583922de364381821efe741f28dd75f9f5cb91662b8f40fcacbb60563f2d17afdad95da8bc0a2e129ef52ff95c8ebcc2720264f23cb85fa5c7557adcb9e3b53fadda8d4929f5b11cbe4f9255fdb18ff9cff4369e3203b39e935eb3bbafbd54df711a6f791f38a88140dafae39bc24cc0d29c94e8cc68fff6761e7f65ee65ccfd314044457a8fd98641959bbb8b52c626def4a0a814334297ed1d9115fdbe0ba"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000600)=ANY=[@ANYBLOB="2082030088430804d9"], &(0x7f0000000640)={0x20, 0x83, 0x1, "9e"}, &(0x7f0000000680)={0x20, 0x84, 0x4, "e6dd04d0"}, 0x0}) syz_clone(0x6d9ba900, 0x0, 0x0, 0x0, 0x0, 0x0) 10.95034145s ago: executing program 1 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0xff80}, [], {0x14, 0x10}}, 0x28}}, 0x0) (fail_nth: 1) 10.121297225s ago: executing program 1 (id=139): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34324258}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/75, 0x4b, 0x0) 9.760131455s ago: executing program 1 (id=140): r0 = io_uring_setup(0x2e34, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xb, "7b8fb78a"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8, "00000300"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xda, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x3f2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x8, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1c, 0xc, 0x8}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xf, 0xc, 0x1, 0x10, 0x5}, 0x20, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xb2, "8d92ae1eaf8153602e8b3fc84432369c"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0xa, 0x7}]}, 0x2, [{0x72, &(0x7f0000000200)=@string={0x72, 0x3, "7240b5a2d2c2312dd315f3df9364e0c535f3deeac24592540b176615a599f338b184cb9c802cd913dfe5271d8094c8eb615ce44a032ef0df43b6157d95905df1aca02c636728c1fe3d5c1abd7394c9ceaf7f04d7cadb40da526465f0d49bebe338fd8160d29b744862c95115673c6753"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x412}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8.044507511s ago: executing program 4 (id=141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x4, 0xe}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009602"]) 7.629873776s ago: executing program 3 (id=142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r1, 0x5459, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x3) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x44, 0x1, 0x2}, 0x18, 0x2) landlock_restrict_self(r2, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) ptrace$getenv(0x4201, r6, 0x10001, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.365515738s ago: executing program 4 (id=143): r0 = mq_open(&(0x7f0000000540)=',):\x00', 0x40, 0x260, 0x0) lseek(r0, 0xfffffff9, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="1f6a92e3d5230c5a99298bae12b0ecdec5062e114f20ef0b8b54cb6deb661e2bfc19e169bd624e15df8d1ba044947b6a5a7505b0b7bcba74add1c2b1bcb3e29dc7eab190a89c3c02be44a5db263d6065c9d0a03c5e1ecce4e105a471109a81184f407e4c1733ffbe10b7970f297e392379ced05e2eb9c68149d2d60d577a9ce97ad1d1b509186393c339004d", 0x8c, 0x2, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = socket(0x18, 0x3, 0x7) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x70, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x8800) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000040)) tkill(r2, 0x7) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000100aaaaaaaaaaaaeaff07000f"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 6.992489871s ago: executing program 4 (id=145): r0 = socket$qrtr(0x2a, 0x2, 0x0) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000004c0)="0e9a", 0x2}], 0x2) unshare(0x20000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') copy_file_range(r1, 0x0, r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x9, 0x9, 0x3, @tick=0x7, {0x10, 0x9}, {0x2, 0x9}, @time=@time={0x7, 0xf}}, {0xfc, 0x81, 0x8, 0xff, @time={0x1000, 0x8}, {0x8, 0x4}, {}, @addr={0x7, 0xa}}, {0x62, 0x5f, 0xc0, 0x93, @tick=0x80, {0x81, 0xfa}, {0xe4, 0x81}, @addr={0x4, 0x6}}], 0x54) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=']) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x8, 0x45) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xa40, 0x0) copy_file_range(r7, 0x0, r7, 0x0, 0x9, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r9, &(0x7f0000000480), 0x10) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) close(0x3) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf250c00000008000300", @ANYRES32=r4, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8020}, 0x40) 6.716565408s ago: executing program 4 (id=146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306010003603e04002a90a027"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000b80)={0x1, 0x100, 0x12449013, 0x1ff, 0x8, 0x4}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811410203010902120001000000000904000600096e7e00"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$uac1(0x2, 0xa5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000040)=""/147) syz_usb_control_io(r0, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2a}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0) 6.69780998s ago: executing program 2 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x38, 0x19, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0xc8, 0x4, 0x400}, [@RTA_PRIORITY={0x8, 0x1e, 0x6}, @RTA_GATEWAY={0x14, 0x5, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = inotify_init() inotify_rm_watch(r2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x58, 0xa5, 0x75, 0x20, 0x99fa, 0x8988, 0x65cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6c, 0x7, 0x0, 0x70, 0xcf, 0xee}}]}}]}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb4, 0x15, 0x2, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xd, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 6.328613006s ago: executing program 1 (id=148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306010003603e04002a90a027"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000b80)={0x1, 0x100, 0x12449013, 0x1ff, 0x8, 0x4}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811410203010902120001000000000904000600096e7e00"], 0x0) syz_usb_disconnect(r4) syz_usb_connect$uac1(0x2, 0xa5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000040)=""/147) syz_usb_control_io(r0, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2a}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0) 6.084774823s ago: executing program 0 (id=149): syz_usb_connect$uac1(0x4, 0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000006b1d01014000010203010902710003010000000904000000010100000a24010000000a0102b1240704000000bed10924030000000000000904010006000000000000002cb3f63d7712d25709000400000007250100000000090402000001020000090402010101020000090400090000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001000000000904000002e964c2000905040000000000000705a6"], 0x0) 5.740141344s ago: executing program 3 (id=150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 5.097890984s ago: executing program 2 (id=151): r0 = socket(0x1e, 0x805, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) pread64(r1, &(0x7f00000001c0)=""/140, 0x8c, 0x7) syz_clone3(&(0x7f0000000900)={0x40000800, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xae) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000001c0)) sendto$packet(r0, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0xf5, 0x0, 0x1, 0x7}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') r4 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000140)) setrlimit(0xc, &(0x7f00000022c0)={0xfffffffd, 0x3}) read$snddsp(0xffffffffffffffff, &(0x7f0000000240), 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x980912, 0x4}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000300)={0x1, "d1f079dd373a99defa3738f414da987206795b581585b78009fac5c7601793b70087f83918502e915eaf40a06d70f76f126ebe42cb4d4574dfe0993dd045c864", {0xa, 0x7}}) syz_io_uring_setup(0x3936, &(0x7f0000000040)={0x0, 0x103fb8, 0x0, 0x3, 0x11c, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000100)) 4.918528958s ago: executing program 2 (id=152): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x14, 0x1, 0x51}}], 0x14}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0xa5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xe4, 0x8, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x80, 0x4, 0x6}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0x4, 0xe3, 0x8, 0x7}, 0x23, &(0x7f0000000140)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x34, 0x7f, 0x40, 0xa, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x7, 0xd}, @ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x2, 0x0, 0xfc00}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc1a}}, {0x34, &(0x7f00000001c0)=@string={0x34, 0x3, "2b1dda83f9a81cda4ab7543da97ebd8ee52decebae1b58dc7667f0382b6711c6586a97064deb703ab142772bb6b89a8651be"}}, {0x85, &(0x7f0000000240)=@string={0x85, 0x3, "b7195405d472be3de82d003a3d587a775cb24d49a1bd33d0b67a7216c728827d92b94e4ad466f49346f1abba78332ad07e4c0cf1bfde8969a3f44b9843f061e0ac7eef641e9196eb735073fcb89658b12a9528c7d4a853892d73cbd9e72796aa70b8bc056b00b2b5e9ed023cd2f7dfbfc708e1e6e6ea4e4e4e57d20df2135d760bcca6"}}, {0x8f, &(0x7f0000000300)=@string={0x8f, 0x3, "e444b79989e867a3b1f5f38a71fdda8851e1696096eacd6185e9fe087248bc1a03eea1b6951134f0de93a617453ed09727840ee6cf9edc943f54270b520450bff5ba4c8cd86182a906be6fa2c7de47a4da282486a151b5104551482c983e2a0813b6857a6655ed7d29826d37b71f5957e5b731b729cb9e94efc167ec2e0f5b465c69417403bd6f048ff2eeaa64"}}, {0xee, &(0x7f0000000440)=@string={0xee, 0x3, "70962cc81cdd6f3adaca45d146722d412a85ff0e14664f0459d01b27e2bdeb0f165aadf5d8822854adc86192d722eb8123ffc6e35cc57fe4149e8f7bdc5de78e6d273b2cb24044451cf42f5974cfda8763bb9167492b6976e684b380e6eaa844db3484e7f0bc079ae74d12bbc592fa39bf55adb39dbb01d42063653de597c4558c5ed91bf84e7ec9c7ff458ca6f42baac588604d8582ce2f18c35d5d4f1ac21e27b80b08711794a63415f9dccba9c8eba029dc833f614c6287ea60f0c372bc31ee3d9abef7e1c491ad3702292f8bfb10e8e035ee1a5c58f646d587fe1cf8bfafe7199b54b82b83a62ab3c0f5"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.53279471s ago: executing program 0 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) (fail_nth: 10) 3.756495834s ago: executing program 0 (id=154): r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = inotify_init() io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x5, r1, 0x0}]) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xac, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000840)={0x13}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073c1ab3000000000240007800c00028088000140000000020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r6 = epoll_create1(0x0) mkdirat(r0, &(0x7f0000000b80)='./file0\x00', 0x80) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc0d8ef614bc5a3e9ab", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000380)={0x10000008}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x204041, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x0, 0x40000) r9 = syz_open_procfs(r8, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000280)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "a59f539e041c716b", "03232100000001f886b8ac3200bb82ca", "50268165", "6fd0fcb400"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000240)=0x2, 0x4) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000900000000ff054900"], 0x0) creat(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x11, "04c208b93e063c0dcd72a2533d35fa56d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.45033619s ago: executing program 3 (id=155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x6, 0x61, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "f2904c54"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x5, 0x4, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0xd, 0x0, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x2, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x7, 0xa2}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x111, 0x5, 0xa, 0xe, 0x40, 0x30}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100a}}, {0xe, &(0x7f0000000200)=@string={0xe, 0x3, "8af6d15bdc6412e43ad9340e"}}, {0x101, &(0x7f0000000240)=@string={0x101, 0x3, "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"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x4, 0x4e0, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0xc8, 0xc8, 0x62, 0x20, 0x1410, 0x2120, 0x993a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ce, 0x3, 0x8, 0x9, 0x70, 0xb0, [{{0x9, 0x4, 0xa0, 0x81, 0x0, 0xbb, 0xdd, 0xa1, 0x2}}, {{0x9, 0x4, 0xc8, 0x1, 0xf, 0xff, 0x3, 0x7b, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x704, 0x2, 0x21, 0x3f}, {0x6, 0x24, 0x1a, 0x4, 0xa}, [@mbim={0xc, 0x24, 0x1b, 0xffff, 0x3, 0x80, 0x6, 0x2, 0x8}]}, @uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x4400, 0xe, "6f86167c23f020cd"}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x7, 0x4}, @as_header={0x7, 0x24, 0x1, 0x2, 0x2c, 0x1}]}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0xef, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x40, 0x7f}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x7, 0x6, 0x6, [@generic={0xc2, 0x3, "273e1e0fe7bbf2e14b6b06013ce6b56b3c95f52fff5d5e768395a666dddd46cc3ccf2c2812af29adcd70fe7b30df09870979e51e6eeb40d1240b57ad8416d503a380ccb9d6a42af7156666549ed74faf2061e8f83af8b0dc466017ec26a278b4f77717c71a93fb503dfc273e02cdd1b881bd54acd2d0ffe76db87ef250cb70eb2d6e2da50355643107f5a27747f24c852ef5678c1a3e9f6fbbd2893ad1b3671e34ec5ae2bfd73f8c9344c64fb32304b6751369a5bdb3b9f24262ce8101aa9d89"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x9, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x34, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0xc, 0xf7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x0, 0xe}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x8, 0x6, 0x9}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x9, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5d}, @generic={0x8c, 0x21, "6b026854b61f50eb608a6f22a91b339904897341095bd24b7226d03e61162cb5d171a76d4cf080679e8dc2b171074559c50dc0cc49859dd5c8f03220de98b016a2bf1bfd8018979780615ef8c1dd2e67db1c9a5062bb71bce43625bfe007350b948c69641d9f8d25f9615516690136801f70b86d93905bcc2fe864dbd4e12d82633579dc2db1279b7916"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x5, 0x4, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x9, 0x6, 0x8, [@generic={0x85, 0x2e, "15459bfc46d89f8ec1f783299fbf06d45ac5f7bdd596bb3e6b3923f379b8b5acc727ee85d7887c6f2b7e2645fa790b796490703345ba246db6869563a5f41c7729635841da2bd98745d75a72297714513dc2f1412a8f84595bd4c60b9e53e622dee57f0f369ffcace6df4b603c0457270f9aa4993f12850bf962975a89145c5ee73384"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x34, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0xfe, 0x40, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfd, 0x7}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x8, 0x2, 0x5, [@generic={0x6a, 0xf, "51311a61a13c1f44391bea4b55d682b0be51158204047afe066cbb73303665e18e7fe6919f1588f25d922cc382792dc2e19e54fb8a57d58906f17eb0d487c5b3b91e6609498e31331c22276783ce621e2da4f56da62455322494e47b9c40e8d724576a5be4c66f39"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x40, 0x15, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x5, 0x6, 0x40}}]}}, {{0x9, 0x4, 0x64, 0x7, 0x8, 0x1b, 0xb9, 0x31, 0x93, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x7, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x16, 0x2690}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x4, 0x2, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x82, 0x3, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x9, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x5c2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7f, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x7, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x7, 0x5, 0x5, [@generic={0xe6, 0x23, "92ba65bdd689c24fabb7d948b9ef7a8586e5549ab19bbc3aa1e1a971389983ea29545e68e9d3f0e05d55bc8250eaa0e643e4af45a930b772960acfa4d0c98645426800b328b98843707160aa76199851e83bcbeb1346a7c60334382c3f2f9423c7128e30835235734d3b5521382b37fb3c62c0753ef6f50665a178de9b68dce0e87066e0f5a43e9ae3120a700e46625887518679c10dd0f30e4f2e35e986eaa4e2b0380c0e97d81c35a5fb4647eba077e4746ac6f47134d8e1464018b78f8eceb2d1cc5ccc624462c832ddd7b26e94dcd9f59cefda1082afb869e31e529b2651d8479998"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0xff}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x201, 0x2, 0x5, 0x8, 0x8, 0x7}, 0x5, &(0x7f0000000d40)={0x5, 0xf, 0x5}, 0x4, [{0x8f, &(0x7f0000000d80)=@string={0x8f, 0x3, "9291fbf58b82b063d5935c0342ed6718d761acabd525a96058fa0fee90743f555faa6807c5b9132a9ab327d525f534c23352b602c6bf68a2dfd55749bdcdc5bcbeac82345d8211363445336a38197e9dfaac842b79f76e99ccc0e30f30c4891e7918c9bd4a0b71ba8de664ced63b9ab9a8d623e44963b89bd056c9ee8ff740150954604a6707e79566b9626488"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x807}}, {0xfd, &(0x7f0000000e80)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x401a}}]}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x8000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0xc, &(0x7f00000003c0)={0x0, 0x6, 0x16, {0x16, 0x5, "46c44828f385659c854a3f216674a8dce7e6f4d4"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x24, &(0x7f0000000500)={0x40, 0x6, 0xbf, "4db83027767a825a0c9969c86f3782ce6defdc40856b2bface310f333dff52c6bb0b664661bf67ea3ca2cf82793bb7ac5ca78f54c7d27ace6c10977f9ed2a116ab795ec712bee489712df8d7b9d006749fd5a7f95fb1f2a0904d8ff3cf73e49192d1cb5153e881ed2f8fc6aa1f184b53ca0824f4fca3a904d75910c36efbb3e0827bb74634e1540777c67b51e90b628fcfaa94e7f2ec31a8d8515526318e5df7f5e831e00c9aeb75bb5e1c63e6e609b148faa7d788e1af326317179ee84173"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xf2}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0xc5, 0x8000, 0x7, 0x9, 0x22, 0x7, 0x3, 0x3, 0x7, 0x0, 0x81, 0x7}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000700)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x3, "e758f5"}, 0x0, 0x0, 0x0, 0x0}) 2.502184528s ago: executing program 4 (id=156): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "49438b08"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) socket(0x2a, 0x2, 0x0) r1 = io_uring_setup(0xc90, &(0x7f0000000080)) r2 = io_uring_setup(0x487d, &(0x7f0000000140)={0x0, 0xd02c, 0x2, 0x0, 0x1a1}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x3, 'lo\x00', 0x7}, 0x18) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r1, 0x0, 0x0, 0x1f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/103, 0x67}], 0x1) syz_usb_ep_write(r0, 0xc, 0x9a, &(0x7f00000002c0)="90ea9d7656be3fbd21b0cfcfc880db2d07a2dab71d4beb78d3b9979e0d5d3b1753992454848e99fdc95d71adf1b07df3cca7ea5240fd768d25a71f8f22f0bdbdff128fd4ff3f743d7f2348b314ad1b245c347080f9bc221b0efc864f6f117df882e903a2b6fb829ec762840d8245ef1622e8a8404fa206680fff346b1603a3aff19ddf965631b275195dba1d9e223811ce598bdd135782cb474b") syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0xc, &(0x7f0000000200)={0x20, 0x23, 0x76, {0x76, 0xd, "28569eac562c02f0f9fcfbd7f80fec9b50593f4d195ae9f301fa14b4c73e517ebcbc23d64cdbc20bdcb866d2f9c770b4163f71d64504f87b8cb372d2f3a3acefb529d180e1fd96df89804c5648f8dcb038dc60c677844a374ba6ab435530582af77436261dd7419a0665dc3af1e8a960f8468db2"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x10, &(0x7f00000003c0)={0x20, 0x1, 0x50, "2b6957e431518c6f00fb2f6509b5331f60a3250a40b84d79fda16b52c00ad05060a9e44f1730909e7aa5eb00717c70362238323f492d107953561c960a5a6eff050e4f01aa62ffed2b34b52161c90742"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x81}}) 2.280714733s ago: executing program 2 (id=157): r0 = socket$qrtr(0x2a, 0x2, 0x0) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000004c0)="0e9a", 0x2}], 0x2) unshare(0x20000400) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') copy_file_range(r1, 0x0, r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x9, 0x9, 0x3, @tick=0x7, {0x10, 0x9}, {0x2, 0x9}, @time=@time={0x7, 0xf}}, {0xfc, 0x81, 0x8, 0xff, @time={0x1000, 0x8}, {0x8, 0x4}, {}, @addr={0x7, 0xa}}, {0x62, 0x5f, 0xc0, 0x93, @tick=0x80, {0x81, 0xfa}, {0xe4, 0x81}, @addr={0x4, 0x6}}], 0x54) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=']) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x8, 0x45) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xa40, 0x0) copy_file_range(r6, 0x0, r6, 0x0, 0x9, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r7, &(0x7f0000000480), 0x10) 2.224871254s ago: executing program 2 (id=158): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1, 0x3}, 0x18, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_restrict_self(r0, 0x2) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@mcast1, 0x0, 0xe, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x4, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$amidi(&(0x7f0000001300), 0x5, 0x610e40) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="af95bb000010000000"], 0x20}}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) dup(r9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000000)={0x6000, 0x80600}) 1.984358166s ago: executing program 2 (id=159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) waitid$P_PIDFD(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008"], 0x68}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x282) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000950000/0x3000)=nil, 0x3000}) 1.555654076s ago: executing program 1 (id=160): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0x4, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setuid(0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)={0x4c, r2, 0x11, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4c678a2abcd8ee1090ea120ee284c534"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x45}]}, 0x4c}}, 0x20044800) 665.270725ms ago: executing program 3 (id=161): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x6000, 0x80600}) 469.789368ms ago: executing program 3 (id=162): r0 = mq_open(&(0x7f0000000540)=',):\x00', 0x40, 0x260, 0x0) lseek(r0, 0xfffffff9, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="1f6a92e3d5230c5a99298bae12b0ecdec5062e114f20ef0b8b54cb6deb661e2bfc19e169bd624e15df8d1ba044947b6a5a7505b0b7bcba74add1c2b1bcb3e29dc7eab190a89c3c02be44a5db263d6065c9d0a03c5e1ecce4e105a471109a81184f407e4c1733ffbe10b7970f297e392379ced05e2eb9c68149d2d60d577a9ce97ad1d1b509186393c339004db113407695", 0x91, 0x2, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = socket(0x18, 0x3, 0x7) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x70, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x8800) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000040)) tkill(r2, 0x7) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000100aaaaaaaaaaaaeaff07000f"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 296.568025ms ago: executing program 1 (id=163): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04000800de14248bc327f7782298febb9fd42e6ebf6f1fa30b0ddd01bc27bfa1662e2fddb6956635c2c7e9893ef624b4ac5dee12227d1d61010711371b0fc9f2f929d4d57f32131fe4f9914cdddf04ebd0ac1bec813adbe9fa00005d99348717e1c8e9cd1fd2b072c8f2d411ccd59c473d"], 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7004218c6f5ec3c19a0000000000014100"/46], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24000010) dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77", 0xa1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x0, 0x3, 0x0, 0xb85f, 0x3, 0x6, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x80000001, 0x81e, 0x8, 0xe, 0xb6, 0x61, '\x00', 0xe, 0x4}) 143.55645ms ago: executing program 3 (id=164): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x6, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b0001002e1f1d1fe5edb4d88cdbf56272696472d9e6b3838273b8c75c5d57b11a49913507b469c693bd5611bf27b014430678ad2e57813c2df77145e706a90586aeab0f50b4c332e54f9ec02d", @ANYRESDEC, @ANYBLOB="352674ce04f97064ce0701049aa8ea6b68fb43e50ae809476b54c8055bb0356ac80f1a04ec3ebbc9276ebc3e1e393334", @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x4000001) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 0s ago: executing program 0 (id=165): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000002140)={&(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0], &(0x7f0000002100)=[0x0, 0x0, 0x0], 0x5, 0x4, 0x3, 0x3}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000002180)={0x1, 0x1, 0x4, 0x70000, 0x9, {}, {0x1, 0xc, 0x8, 0x12, 0xfa, 0x7, "883983ad"}, 0x8, 0x4, {0xffffffffffffffff}, 0x3, 0x0, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r1, &(0x7f0000002200)=0x4, 0x8) r3 = dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000002340)={&(0x7f0000002240)=[0x0], &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x3, 0x4}) setxattr$security_evm(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), &(0x7f0000002400)=@ng={0x4, 0x14, "febad5906aaba5fc550236"}, 0xd, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000002440)) syz_emit_vhci(&(0x7f0000002480)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0xe4, 0xc9, 0x6, 0x10}}}, 0xb) r4 = syz_open_dev$loop(&(0x7f00000024c0), 0x2, 0x800) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000002500)={0x0, {}, 0x0, {}, 0x0, 0x6, 0x7, 0x9, "e09584667313c1b87eb9399f5d6e34e3fc9d5a1ed2b4aa7bfe21e1d5cc934b3fd9fdf4103da57b144a6c2f746404095fcd435f377185ccad2d80647d695d3fb2", "64e2eea21c3017b168fa175e1d425f152b3b61b2f0c88074c8bfe481f9fe2e94", [0x1, 0x7]}) sendfile(r1, r3, 0x0, 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000025c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0xd2c, '\x00', 0x0, r3, 0x2, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000002640)={0xd5c77002, 0x4000}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000002680)={0x40, 0x3, 0x1}, 0x10) r5 = openat(r3, &(0x7f00000026c0)='./file0\x00', 0x222000, 0x4) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000002700)={0x8, 0x6, 0x9, 0x800, 0x8, "dfbf20a257e15cfac07d85ebaf1ad67257063f"}) r6 = openat$bsg(0xffffff9c, &(0x7f0000002740), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000002780)={0x0, 0x6, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sched_setscheduler(r0, 0x2, &(0x7f00000027c0)=0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000002800)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r5, 0x0) syz_io_uring_setup(0x4966, &(0x7f0000002840)={0x0, 0x383e, 0x200, 0x1, 0x67, 0x0, r5}, &(0x7f00000028c0), &(0x7f0000002900)=0x0) r9 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r7, r8, &(0x7f0000002940)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x3, {0x0, r2}, 0x7, 0xc, 0x0, {0x0, 0x0, r9}}) openat$cgroup_ro(r3, &(0x7f0000002980)='cgroup.controllers\x00', 0x0, 0x0) connect$inet6(r5, &(0x7f00000029c0)={0xa, 0x4e20, 0x2, @mcast2, 0xd57}, 0x1c) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x2d) cachestat(r9, &(0x7f0000002a00)={0xd, 0x9}, &(0x7f0000002a40), 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): DUID 00:04:43:bd:4a:27:48:6e:f0:f7:43:25:6e:f3:b3:e1:ba:f0 forked to background, child pid 5503 [ 56.712642][ T5504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.727015][ T5504] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. syzkaller login: [ 82.861330][ T5829] cgroup: Unknown subsys name 'net' [ 82.998915][ T5829] cgroup: Unknown subsys name 'cpuset' [ 83.008012][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.643227][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.210822][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.227871][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.235552][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.246662][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.264726][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.451096][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.465043][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.472815][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.484952][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.495339][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.592111][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.600159][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.609146][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.617708][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.626241][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.690051][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.697901][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.708369][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.717050][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.724825][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.736529][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.745988][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.764895][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.775731][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.783521][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.111763][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.407851][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.416083][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.423453][ T5843] bridge_slave_0: entered allmulticast mode [ 89.431940][ T5843] bridge_slave_0: entered promiscuous mode [ 89.456497][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 89.473916][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.481191][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.488643][ T5843] bridge_slave_1: entered allmulticast mode [ 89.496141][ T5843] bridge_slave_1: entered promiscuous mode [ 89.603405][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.650069][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 89.697856][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.750734][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.816444][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 89.855374][ T5843] team0: Port device team_slave_0 added [ 89.895676][ T5843] team0: Port device team_slave_1 added [ 89.917615][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.925265][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.932688][ T5848] bridge_slave_0: entered allmulticast mode [ 89.941642][ T5848] bridge_slave_0: entered promiscuous mode [ 90.016882][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.024048][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.031364][ T5848] bridge_slave_1: entered allmulticast mode [ 90.039072][ T5848] bridge_slave_1: entered promiscuous mode [ 90.060688][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.067855][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.095107][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.131747][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.139067][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.146860][ T5846] bridge_slave_0: entered allmulticast mode [ 90.154081][ T5846] bridge_slave_0: entered promiscuous mode [ 90.176099][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.183309][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.190943][ T5853] bridge_slave_0: entered allmulticast mode [ 90.198399][ T5853] bridge_slave_0: entered promiscuous mode [ 90.207100][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.214074][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.241434][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.259703][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.267013][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.274133][ T5846] bridge_slave_1: entered allmulticast mode [ 90.282268][ T5846] bridge_slave_1: entered promiscuous mode [ 90.305606][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.315394][ T5150] Bluetooth: hci0: command tx timeout [ 90.315973][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.328172][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.335521][ T5853] bridge_slave_1: entered allmulticast mode [ 90.342742][ T5853] bridge_slave_1: entered promiscuous mode [ 90.392262][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.418567][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.470037][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.508007][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.554692][ T5150] Bluetooth: hci1: command tx timeout [ 90.577544][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.585094][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.592299][ T5855] bridge_slave_0: entered allmulticast mode [ 90.599998][ T5855] bridge_slave_0: entered promiscuous mode [ 90.610068][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.637189][ T5848] team0: Port device team_slave_0 added [ 90.648270][ T5843] hsr_slave_0: entered promiscuous mode [ 90.655443][ T5843] hsr_slave_1: entered promiscuous mode [ 90.665263][ T5853] team0: Port device team_slave_0 added [ 90.671479][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.678962][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.686450][ T5855] bridge_slave_1: entered allmulticast mode [ 90.693720][ T5855] bridge_slave_1: entered promiscuous mode [ 90.714987][ T5150] Bluetooth: hci2: command tx timeout [ 90.722030][ T5848] team0: Port device team_slave_1 added [ 90.744268][ T5853] team0: Port device team_slave_1 added [ 90.782115][ T5846] team0: Port device team_slave_0 added [ 90.791702][ T5846] team0: Port device team_slave_1 added [ 90.868191][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.877987][ T5150] Bluetooth: hci3: command tx timeout [ 90.878021][ T5840] Bluetooth: hci4: command tx timeout [ 90.883778][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.915610][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.927588][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.935247][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.961458][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.975574][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.988779][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.033683][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.040812][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.067041][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.086382][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.093363][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.119958][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.158826][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.167776][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.194409][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.207713][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.214880][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.240836][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.328354][ T5848] hsr_slave_0: entered promiscuous mode [ 91.335421][ T5848] hsr_slave_1: entered promiscuous mode [ 91.341686][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.350621][ T5848] Cannot create hsr debugfs directory [ 91.360425][ T5855] team0: Port device team_slave_0 added [ 91.421679][ T5855] team0: Port device team_slave_1 added [ 91.493888][ T5853] hsr_slave_0: entered promiscuous mode [ 91.500784][ T5853] hsr_slave_1: entered promiscuous mode [ 91.507475][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.515249][ T5853] Cannot create hsr debugfs directory [ 91.538675][ T5846] hsr_slave_0: entered promiscuous mode [ 91.546219][ T5846] hsr_slave_1: entered promiscuous mode [ 91.552402][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.560126][ T5846] Cannot create hsr debugfs directory [ 91.613682][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.621222][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.647549][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.714869][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.721858][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.748161][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.855634][ T10] cfg80211: failed to load regulatory.db [ 91.993612][ T5855] hsr_slave_0: entered promiscuous mode [ 92.000592][ T5855] hsr_slave_1: entered promiscuous mode [ 92.006924][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.015108][ T5855] Cannot create hsr debugfs directory [ 92.083288][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.096125][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.156108][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.171876][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.375436][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.388423][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.395292][ T5840] Bluetooth: hci0: command tx timeout [ 92.419393][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.431109][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.518738][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.537733][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.551103][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.561961][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.634793][ T5840] Bluetooth: hci1: command tx timeout [ 92.657583][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.672378][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.683500][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.697301][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.805316][ T5840] Bluetooth: hci2: command tx timeout [ 92.846406][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.859978][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.873087][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.899190][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.913039][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.954747][ T5840] Bluetooth: hci3: command tx timeout [ 92.955035][ T5150] Bluetooth: hci4: command tx timeout [ 92.981495][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.014011][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.066681][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.079530][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.086891][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.101587][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.113450][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.129226][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.136407][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.184168][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.191446][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.213681][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.220847][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.232522][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.249991][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.269551][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.276757][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.287002][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.294163][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.337195][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.344339][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.354050][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.361195][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.433992][ T5848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.446491][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.523843][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.606991][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.646329][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.684106][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.701892][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.722491][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.734065][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.762381][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.769540][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.780376][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.787611][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.856898][ T5846] veth0_vlan: entered promiscuous mode [ 93.870798][ T5846] veth1_vlan: entered promiscuous mode [ 93.926991][ T5853] veth0_vlan: entered promiscuous mode [ 93.962663][ T5853] veth1_vlan: entered promiscuous mode [ 93.993151][ T5848] veth0_vlan: entered promiscuous mode [ 94.033755][ T5843] veth0_vlan: entered promiscuous mode [ 94.048892][ T5843] veth1_vlan: entered promiscuous mode [ 94.079016][ T5848] veth1_vlan: entered promiscuous mode [ 94.088077][ T5846] veth0_macvtap: entered promiscuous mode [ 94.101480][ T5846] veth1_macvtap: entered promiscuous mode [ 94.126588][ T5853] veth0_macvtap: entered promiscuous mode [ 94.147269][ T5853] veth1_macvtap: entered promiscuous mode [ 94.163547][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.195692][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.210800][ T5843] veth0_macvtap: entered promiscuous mode [ 94.226310][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.236124][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.246125][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.255335][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.280613][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.291736][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.303751][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.314362][ T5843] veth1_macvtap: entered promiscuous mode [ 94.337155][ T5848] veth0_macvtap: entered promiscuous mode [ 94.349777][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.377047][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.388063][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.404245][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.416576][ T5848] veth1_macvtap: entered promiscuous mode [ 94.428907][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.437901][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.447147][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.456196][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.474804][ T5150] Bluetooth: hci0: command tx timeout [ 94.513371][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.531006][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.542519][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.554862][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.566216][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.577612][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.588197][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.598280][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.608797][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.620967][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.653724][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.662572][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.673263][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.683946][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.714896][ T5150] Bluetooth: hci1: command tx timeout [ 94.725600][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.736953][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.747934][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.758642][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.768617][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.779364][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.791497][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.828871][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.840836][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.853434][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.866040][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.877554][ T5150] Bluetooth: hci2: command tx timeout [ 94.878853][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.894534][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.907205][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.955336][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964072][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.973940][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.982757][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.000126][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.008252][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.038212][ T5855] veth0_vlan: entered promiscuous mode [ 95.044106][ T5150] Bluetooth: hci4: command tx timeout [ 95.044667][ T5840] Bluetooth: hci3: command tx timeout [ 95.068961][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.093762][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.124248][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.143580][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.172733][ T5855] veth1_vlan: entered promiscuous mode [ 95.199666][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.207622][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.299778][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.307968][ T5855] veth0_macvtap: entered promiscuous mode [ 95.331487][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.370958][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.377008][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.400177][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.440115][ T5855] veth1_macvtap: entered promiscuous mode [ 95.471297][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.483200][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.502446][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.516062][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.531105][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.544277][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.557717][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.583809][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.597664][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.608303][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.631412][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.678974][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.690917][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.707987][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.719121][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.749638][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.762239][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.773506][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.784356][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.799286][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.843019][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.852440][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.865861][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.877908][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.900738][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.925413][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.999705][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.514864][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 96.664633][ T5840] Bluetooth: hci0: command tx timeout [ 96.687182][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 96.700703][ T47] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 96.710572][ T47] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 96.722737][ T47] usb 5-1: Product: syz [ 96.728199][ T47] usb 5-1: Manufacturer: syz [ 96.732994][ T47] usb 5-1: SerialNumber: syz [ 96.794890][ T5840] Bluetooth: hci1: command tx timeout [ 96.804329][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.842291][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.955978][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.956907][ T47] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 96.972489][ T5840] Bluetooth: hci2: command tx timeout [ 97.023082][ T47] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 97.031786][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.031840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.055466][ T47] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 97.063490][ T47] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 97.115334][ T5840] Bluetooth: hci3: command tx timeout [ 97.121246][ T5840] Bluetooth: hci4: command tx timeout [ 97.156821][ T47] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 97.192529][ T47] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 97.217119][ T47] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 97.255492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.347195][ T5910] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.379693][ T5910] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.425136][ T47] usb 5-1: USB disconnect, device number 2 [ 97.440705][ T5910] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.455193][ T47] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 97.483737][ T47] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 97.501713][ T5910] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.513123][ T47] visor 5-1:1.0: device disconnected [ 97.582122][ T5910] geneve2: entered promiscuous mode [ 97.645609][ T5910] geneve2: entered allmulticast mode [ 97.723773][ T5910] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.742397][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.770573][ T5910] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.781640][ T5910] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.793262][ T5910] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 98.495536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.536667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.574674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.693130][ T5888] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.715012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.988968][ T5888] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.127168][ T5888] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.174233][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.203770][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.238097][ T5932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.248252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.333062][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.645412][ T5913] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.964711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 100.264852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 100.284044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 100.732365][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 102.270896][ T5888] usb 5-1: USB disconnect, device number 3 [ 102.423881][ T5960] tc_dump_action: action bad kind [ 102.503382][ T5964] loop9: detected capacity change from 0 to 8 [ 102.530028][ T5964] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 102.543627][ T5964] loop9: partition table partially beyond EOD, truncated [ 102.564007][ T5964] loop9: p1 size 81768186 extends beyond EOD, truncated [ 102.704542][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.937551][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.955796][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 103.032948][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 103.124065][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 2304, setting to 64 [ 103.135346][ T5834] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 103.258600][ T5885] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 103.289506][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.332108][ T5885] usb 2-1: Product: syz [ 103.343266][ T5885] usb 2-1: Manufacturer: syz [ 103.367235][ T5885] usb 2-1: SerialNumber: syz [ 103.401309][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.413871][ T5885] usb 2-1: config 0 descriptor?? [ 103.445147][ T5885] usb 2-1: ucan: probing device on interface #0 [ 103.453962][ T5885] usb 2-1: ucan: invalid endpoint configuration [ 103.481444][ T5834] usb 5-1: New USB device found, idVendor=5050, idProduct=0500, bcdDevice=33.00 [ 103.490763][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.499554][ T5885] usb 2-1: ucan: probe failed; try to update the device firmware [ 103.524676][ T5834] usb 5-1: Product: syz [ 103.536189][ T5834] usb 5-1: Manufacturer: syz [ 103.554541][ T5834] usb 5-1: SerialNumber: syz [ 103.571620][ T5834] usb 5-1: config 0 descriptor?? [ 103.604400][ T5834] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 103.615496][ T5970] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.623797][ T5834] usb 5-1: Detected FT232HP [ 103.688047][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 103.689961][ T5885] usb 2-1: USB disconnect, device number 2 [ 104.911062][ T5980] capability: warning: `syz.0.20' uses deprecated v2 capabilities in a way that may be insecure [ 106.464689][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.907237][ T5965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.934797][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 106.953883][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.077107][ T5834] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 107.081037][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.122100][ T5834] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 107.136370][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.154938][ T5834] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 107.178151][ T5834] usb 5-1: USB disconnect, device number 4 [ 107.192945][ T5834] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 107.213750][ T5834] ftdi_sio 5-1:0.0: device disconnected [ 107.228647][ T47] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 107.239477][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.246266][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.275110][ T47] usb 4-1: config 0 descriptor?? [ 107.494570][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 107.503539][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.524656][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.548956][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 107.564035][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.590740][ T5889] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 107.603048][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.656988][ T5889] usb 2-1: config 0 descriptor?? [ 107.872552][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 107.899700][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 107.943360][ T5889] usb 2-1: USB disconnect, device number 3 [ 108.111936][ T47] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input5 [ 108.214988][ T47] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input6 [ 108.316034][ T6002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.26'. [ 108.387461][ T47] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 108.429224][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.483705][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.457570][ T30] audit: type=1800 audit(1744859108.908:2): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.24" name="bus" dev="ramfs" ino=7933 res=0 errno=0 [ 109.514891][ T5889] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 110.084779][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.274805][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 110.294217][ T47] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.324254][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.364560][ T47] usb 3-1: Product: syz [ 110.368872][ T47] usb 3-1: Manufacturer: syz [ 110.387563][ T47] usb 3-1: SerialNumber: syz [ 110.417457][ T47] r8152-cfgselector 3-1: Unknown version 0x0000 [ 110.431443][ T47] r8152-cfgselector 3-1: config 0 descriptor?? [ 110.504545][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.678392][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.726665][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 110.750897][ T5885] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 110.802848][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.820020][ T5885] usb 1-1: Product: syz [ 110.834829][ T5885] usb 1-1: Manufacturer: syz [ 110.839560][ T5885] usb 1-1: SerialNumber: syz [ 110.881130][ T5885] usb 1-1: config 0 descriptor?? [ 110.919773][ T5885] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 111.184566][ T5889] usb 4-1: device descriptor read/64, error -71 [ 111.345958][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.457067][ T5889] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 111.472299][ T5889] usb 4-1: device reset changed ep0 maxpacket size! [ 111.502541][ T5834] usb 4-1: USB disconnect, device number 2 [ 111.565695][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 111.583885][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.616746][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.631826][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 111.648590][ T5888] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 111.664519][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.688167][ T5888] usb 5-1: config 0 descriptor?? [ 111.904272][ T5834] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.083227][ T47] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 112.100123][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 112.118286][ T5834] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 112.128641][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 112.146889][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 112.162978][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.176311][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 112.199447][ T5834] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 112.213179][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.225427][ T5834] usb 4-1: Product: syz [ 112.229642][ T5834] usb 4-1: Manufacturer: syz [ 112.239371][ T5834] usb 4-1: SerialNumber: syz [ 112.265272][ T5885] usb 1-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 112.275749][ T5888] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input7 [ 112.288335][ T5834] usb 4-1: config 0 descriptor?? [ 112.295075][ T6016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.333129][ T5888] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input8 [ 112.341369][ T5834] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 112.364312][ T5834] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 112.380044][ T5888] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 112.445644][ T5834] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 112.508176][ T6030] usb 1-1: USB disconnect, device number 2 [ 112.554724][ T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.712321][ T6016] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 112.747875][ T6030] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 112.758519][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 112.790203][ T6016] netlink: 'syz.3.31': attribute type 10 has an invalid length. [ 112.799354][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.826092][ T6030] ssu100 1-1:0.0: device disconnected [ 112.837011][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.849345][ T6016] batman_adv: batadv0: Adding interface: team0 [ 112.863786][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.881320][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.905459][ T6016] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.906446][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.944240][ T47] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 112.963506][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.978592][ T6032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 112.984485][ T6016] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 113.016264][ T47] usb 2-1: config 0 descriptor?? [ 113.021964][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.069969][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.061140][ C1] kye 0003:0458:5011.0002: usb_submit_urb(ctrl) failed: -1 [ 114.108334][ T6011] raw-gadget.1 gadget.4: fail, usb_ep_queue returned -108 [ 114.167740][ T120] usb 4-1: USB disconnect, device number 3 [ 114.205277][ T5834] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 114.374626][ T5834] usb 5-1: device descriptor read/64, error -32 [ 114.532870][ T47] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input9 [ 114.585929][ T6041] : renamed from dummy0 (while UP) [ 114.614648][ T5834] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 114.634593][ T6030] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 114.662131][ T47] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input10 [ 114.746522][ T47] kye 0003:0458:5011.0003: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 114.775073][ T5834] usb 5-1: device descriptor read/64, error -32 [ 114.807188][ T6030] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 114.816901][ T6030] usb 1-1: config 0 has no interface number 0 [ 114.829657][ T6030] usb 1-1: config 0 interface 188 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 114.860634][ T6030] usb 1-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.947272][ T6030] usb 1-1: New USB device found, idVendor=7392, idProduct=c811, bcdDevice=d9.c8 [ 114.980431][ T6030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.028718][ T6030] usb 1-1: Product: syz [ 115.061293][ T6030] usb 1-1: Manufacturer: syz [ 115.091910][ T6030] usb 1-1: SerialNumber: syz [ 115.101267][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.146907][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.165804][ T6030] usb 1-1: config 0 descriptor?? [ 115.177928][ T6043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.275378][ T6030] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 115.309741][ T6030] hid-generic 0000:0000:0000.0004: hidraw2: HID v0.00 Device [syz1] on syz0 [ 115.469369][ T6030] usb 1-1: USB disconnect, device number 3 [ 115.658982][ T5885] usb 5-1: USB disconnect, device number 5 [ 117.640404][ T5834] usb 2-1: USB disconnect, device number 4 [ 117.855592][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.895068][ T6045] delete_channel: no stack [ 118.058072][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 118.095418][ T5885] usb 1-1: config 0 has no interfaces? [ 118.144127][ T5885] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 118.179265][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.218930][ T5885] usb 1-1: Product: syz [ 118.237207][ T5885] usb 1-1: Manufacturer: syz [ 118.260137][ T5885] usb 1-1: SerialNumber: syz [ 118.296707][ T5885] usb 1-1: config 0 descriptor?? [ 118.341141][ T30] audit: type=1326 audit(1744859117.808:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.44" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 118.416770][ T6066] dccp_invalid_packet: P.Data Offset(4) too small [ 119.034627][ T6030] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.464649][ T6030] usb 2-1: Using ep0 maxpacket: 32 [ 119.471448][ T6030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.505554][ T6030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.564721][ T6030] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.617989][ T6030] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 119.648269][ T6030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.795835][ T6030] usb 2-1: config 0 descriptor?? [ 120.411561][ T6030] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0005/input/input11 [ 120.488866][ T6030] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0005/input/input12 [ 120.618524][ T6030] kye 0003:0458:5011.0005: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 120.807090][ T6030] usb 2-1: USB disconnect, device number 5 [ 120.892744][ T5889] usb 1-1: USB disconnect, device number 4 [ 120.964369][ T6083] process 'syz.4.46' launched './file1' with NULL argv: empty string added [ 121.444950][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.604504][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 121.611640][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.633071][ T47] usb 1-1: config 7 has an invalid interface number: 7 but max is 0 [ 121.644646][ T47] usb 1-1: config 7 has no interface number 0 [ 121.650741][ T47] usb 1-1: config 7 interface 7 has no altsetting 0 [ 121.683349][ T47] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=f9.7e [ 121.693167][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.714906][ T47] usb 1-1: Product: syz [ 121.724587][ T47] usb 1-1: Manufacturer: syz [ 121.729387][ T47] usb 1-1: SerialNumber: syz [ 122.251009][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 122.383891][ T6103] netlink: 'syz.4.51': attribute type 6 has an invalid length. [ 122.797434][ T47] usb 1-1: Expected 3 endpoints, found: 0 [ 122.843802][ T47] usb 1-1: USB disconnect, device number 5 [ 122.904519][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.502096][ T5889] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 123.539072][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 123.592950][ T5889] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 123.660234][ T5889] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 123.692419][ T5889] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 124.079171][ T5889] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 124.105017][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.653194][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 124.984531][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.183027][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 125.195046][ T5889] ath6kl: Failed to submit usb control message: -110 [ 125.213579][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.237284][ T5889] ath6kl: unable to send the bmi data to the device: -110 [ 125.244652][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.269107][ T5889] ath6kl: Unable to send get target info: -110 [ 125.277271][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 125.293694][ T5889] ath6kl: Failed to init ath6kl core: -110 [ 125.319090][ T5889] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 125.333019][ T47] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 125.372875][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.427641][ T47] usb 2-1: config 0 descriptor?? [ 126.108069][ T5890] usb 4-1: USB disconnect, device number 4 [ 126.748641][ T47] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0006/input/input13 [ 126.794863][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.926014][ T47] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0006/input/input14 [ 126.984572][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 126.991458][ T5889] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 127.006863][ T5889] usb 1-1: config 8 has no interface number 0 [ 127.023647][ T5889] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 127.078285][ T5889] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 127.110526][ T5889] usb 1-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 127.145850][ T5889] usb 1-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.162722][ T47] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 127.168871][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.198096][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.217705][ T5889] usb 1-1: config 8 interface 206 has no altsetting 0 [ 127.252022][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 127.261498][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.364177][ T5889] usb 1-1: Product: syz [ 127.374320][ T5889] usb 1-1: Manufacturer: syz [ 127.383006][ T5889] usb 1-1: SerialNumber: syz [ 127.724032][ T5889] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 127.833446][ T5889] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 127.925990][ T6030] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.934547][ T5834] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 127.969638][ T5889] usb 1-1: USB disconnect, device number 6 [ 128.084751][ T5834] usb 2-1: device descriptor read/64, error -32 [ 128.103577][ T5889] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 128.137291][ T6030] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.149912][ T5889] garmin_gps 1-1:8.206: device disconnected [ 128.153265][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.172067][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.186353][ T6030] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.200798][ T6030] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.214002][ T6030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.250959][ T6030] usb 3-1: config 0 descriptor?? [ 128.340235][ T5834] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 128.469450][ T6147] program syz.4.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.715655][ T6030] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 128.754192][ T6030] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 129.053847][ T6143] Zero length message leads to an empty skb [ 129.072199][ T47] usb 3-1: USB disconnect, device number 3 [ 129.144662][ T6030] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 129.354800][ T30] audit: type=1800 audit(1744859128.818:4): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="bus" dev="ramfs" ino=9277 res=0 errno=0 [ 129.377968][ T6030] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.418032][ T6030] usb 1-1: config 179 has no interface number 0 [ 129.440934][ T6030] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 129.478426][ T6030] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 129.510375][ T6030] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 255, setting to 64 [ 129.544480][ T6030] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.632917][ T6030] usb 1-1: config 179 interface 65 has no altsetting 0 [ 129.684064][ T6030] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 129.777120][ T6030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.813370][ T6152] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 129.825617][ T6152] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.006357][ T6030] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 130.154806][ T5195] input input16: unable to receive magic message: -110 [ 130.167706][ T120] usb 2-1: USB disconnect, device number 6 [ 130.200595][ T5195] input input16: unable to receive magic message: -32 [ 130.246592][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 130.282603][ T5195] input input16: unable to receive magic message: -71 [ 130.292459][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.301240][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.346944][ T6030] usb 1-1: USB disconnect, device number 7 [ 130.366888][ T6030] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 130.472977][ T30] audit: type=1326 audit(1744859129.938:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 130.519610][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 130.554161][ T30] audit: type=1326 audit(1744859129.968:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 130.622006][ T30] audit: type=1326 audit(1744859129.968:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=195 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 130.671480][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 130.694567][ T30] audit: type=1326 audit(1744859129.968:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 130.695972][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.724787][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.734370][ T30] audit: type=1326 audit(1744859129.968:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 130.865881][ T30] audit: type=1326 audit(1744859129.968:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 130.944524][ T30] audit: type=1326 audit(1744859129.978:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 130.994226][ T30] audit: type=1326 audit(1744859129.978:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 131.020166][ T30] audit: type=1326 audit(1744859129.978:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 131.112334][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.158899][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.294565][ T120] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 131.397727][ T6166] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.413302][ T6166] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.422949][ T6166] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.439364][ T6166] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.444560][ T5834] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.457863][ T120] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 131.474171][ T120] usb 1-1: config 0 has no interface number 0 [ 131.480508][ T120] usb 1-1: config 0 interface 188 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 131.492049][ T120] usb 1-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.511525][ T120] usb 1-1: New USB device found, idVendor=7392, idProduct=c811, bcdDevice=d9.c8 [ 131.523713][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.532707][ T120] usb 1-1: Product: syz [ 131.540477][ T120] usb 1-1: Manufacturer: syz [ 131.545680][ T120] usb 1-1: SerialNumber: syz [ 131.555895][ T120] usb 1-1: config 0 descriptor?? [ 131.567220][ T6180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.631340][ T6175] netlink: 'syz.1.65': attribute type 12 has an invalid length. [ 131.639662][ T6175] netlink: 'syz.1.65': attribute type 29 has an invalid length. [ 131.649096][ T6175] netlink: 'syz.1.65': attribute type 2 has an invalid length. [ 131.656702][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 131.656737][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.656761][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 131.656803][ T5834] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 131.656827][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.680750][ T5834] usb 4-1: config 0 descriptor?? [ 131.692074][ T6175] netlink: 128 bytes leftover after parsing attributes in process `syz.1.65'. [ 131.745721][ T5834] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.763086][ T5834] usb 4-1: MIDIStreaming interface descriptor not found [ 131.814334][ T120] usb 1-1: USB disconnect, device number 8 [ 131.991907][ T5885] usb 4-1: USB disconnect, device number 5 [ 132.045224][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.186046][ T5834] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.225712][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 132.246816][ T5890] usb 3-1: config 0 has no interfaces? [ 132.255717][ T5890] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 132.266509][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.278735][ T5890] usb 3-1: Product: syz [ 132.282936][ T5890] usb 3-1: Manufacturer: syz [ 132.288334][ T5890] usb 3-1: SerialNumber: syz [ 132.300735][ T5890] usb 3-1: config 0 descriptor?? [ 132.354589][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 132.361570][ T5834] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 132.375648][ T5834] usb 5-1: config 0 has no interface number 0 [ 132.381806][ T5834] usb 5-1: config 0 interface 108 has no altsetting 0 [ 132.407118][ T5834] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 132.424664][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.444612][ T5834] usb 5-1: Product: syz [ 132.448866][ T5834] usb 5-1: Manufacturer: syz [ 132.453509][ T5834] usb 5-1: SerialNumber: syz [ 132.468863][ T5834] usb 5-1: config 0 descriptor?? [ 132.479967][ T5834] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 132.513089][ T5890] usb 3-1: USB disconnect, device number 4 [ 132.557286][ T5840] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 132.565984][ T5840] Bluetooth: hci1: Injecting HCI hardware error event [ 132.573902][ T5840] Bluetooth: hci1: hardware error 0x00 [ 132.700444][ T6188] netlink: 188 bytes leftover after parsing attributes in process `syz.4.72'. [ 132.724611][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.804067][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.810901][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.894653][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 132.902464][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.914263][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.928042][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.945438][ T5834] usb 5-1: USB disconnect, device number 6 [ 132.961176][ T5888] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 132.975285][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.021931][ T5888] usb 2-1: config 0 descriptor?? [ 134.196458][ T5888] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0008/input/input17 [ 134.253121][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 134.311221][ T5888] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0008/input/input18 [ 134.511557][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.525352][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.545377][ T5888] kye 0003:0458:5011.0008: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 134.637365][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 134.908460][ T6227] deleting an unspecified loop device is not supported. [ 135.412525][ T6231] netlink: 'syz.0.83': attribute type 6 has an invalid length. [ 135.421473][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'. [ 135.434606][ T5834] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 135.454988][ T6233] FAULT_INJECTION: forcing a failure. [ 135.454988][ T6233] name failslab, interval 1, probability 0, space 0, times 1 [ 135.494624][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: syz.2.84 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 135.494650][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.494665][ T6233] Call Trace: [ 135.494673][ T6233] [ 135.494681][ T6233] dump_stack_lvl+0x241/0x360 [ 135.494728][ T6233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.494756][ T6233] ? __pfx__printk+0x10/0x10 [ 135.494778][ T6233] ? fib_table_lookup+0x1325/0x1880 [ 135.494819][ T6233] should_fail_ex+0x424/0x570 [ 135.494843][ T6233] should_failslab+0xac/0x100 [ 135.494872][ T6233] kmem_cache_alloc_noprof+0x78/0x390 [ 135.494918][ T6233] ? dst_alloc+0x12b/0x190 [ 135.494945][ T6233] dst_alloc+0x12b/0x190 [ 135.494973][ T6233] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 135.495010][ T6233] ip_route_output_key_hash+0x195/0x2b0 [ 135.495033][ T6233] ? ip_route_output_key_hash+0xe1/0x2b0 [ 135.495054][ T6233] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 135.495095][ T6233] ip_route_output_flow+0x29/0x140 [ 135.495130][ T6233] sctp_v4_get_dst+0xe34/0x1660 [ 135.495175][ T6233] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 135.495227][ T6233] ? dst_release+0x72/0x1b0 [ 135.495252][ T6233] sctp_transport_route+0x12c/0x2e0 [ 135.495286][ T6233] sctp_assoc_add_peer+0x611/0x1360 [ 135.495327][ T6233] sctp_connect_new_asoc+0x361/0x700 [ 135.495353][ T6233] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 135.495376][ T6233] ? __rcu_read_unlock+0xa1/0x110 [ 135.495398][ T6233] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 135.495416][ T6233] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 135.495433][ T6233] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 135.495460][ T6233] sctp_sendmsg+0x2009/0x3620 [ 135.495503][ T6233] ? __pfx_sctp_sendmsg+0x10/0x10 [ 135.495526][ T6233] ? aa_sk_perm+0x96f/0xac0 [ 135.495571][ T6233] ? inet_sendmsg+0x330/0x390 [ 135.495599][ T6233] __sock_sendmsg+0x1a6/0x270 [ 135.495634][ T6233] __sys_sendto+0x365/0x4c0 [ 135.495659][ T6233] ? __pfx___sys_sendto+0x10/0x10 [ 135.495693][ T6233] ? __fget_files+0x2a/0x420 [ 135.495737][ T6233] __ia32_sys_sendto+0xdd/0x100 [ 135.495762][ T6233] __do_fast_syscall_32+0xb4/0x110 [ 135.495787][ T6233] ? exc_page_fault+0x5f8/0x920 [ 135.495816][ T6233] do_fast_syscall_32+0x34/0x80 [ 135.495842][ T6233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.495871][ T6233] RIP: 0023:0xf70dd579 [ 135.495893][ T6233] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 135.495908][ T6233] RSP: 002b:00000000f50cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 135.495947][ T6233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 135.495960][ T6233] RDX: 0000000000000001 RSI: 0000000020000050 RDI: 0000000080000100 [ 135.495971][ T6233] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 135.495981][ T6233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 135.495992][ T6233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.496038][ T6233] [ 135.800947][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.797898][ T5889] usb 2-1: USB disconnect, device number 7 [ 136.813513][ T5885] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 137.030650][ T5885] usb 4-1: not running at top speed; connect to a high speed hub [ 137.045778][ T5885] usb 4-1: config 1 interface 0 altsetting 93 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 137.065068][ T5885] usb 4-1: config 1 interface 0 has no altsetting 0 [ 137.083489][ T5885] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.40 [ 137.095417][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.118477][ T5885] usb 4-1: Product: 阋尓︉埊躴텞殾௎괇殛䝕垀藋꺛救፷둗஄忶טּ筰嵕♐좴㯡ࡌ겾離㩁푟阈‾蔢넻쭥ᖮᝢ䁳圽왍ピ㛻粰헎薚澧射櫯蛪㑔꛷ [ 137.165158][ T5888] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.172943][ T5885] usb 4-1: Manufacturer: а [ 137.178237][ T5885] usb 4-1: SerialNumber: ఇ [ 137.195375][ T6251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.324673][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 137.334336][ T5888] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 137.345703][ T5888] usb 3-1: config 0 has no interface number 0 [ 137.362043][ T5888] usb 3-1: config 0 interface 108 has no altsetting 0 [ 137.385489][ T5888] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 137.398209][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.406422][ T5888] usb 3-1: Product: syz [ 137.410610][ T5888] usb 3-1: Manufacturer: syz [ 137.432801][ T5888] usb 3-1: SerialNumber: syz [ 137.555639][ T5888] usb 3-1: config 0 descriptor?? [ 137.569684][ T5885] usbhid 4-1:1.0: can't add hid device: -71 [ 137.577485][ T5885] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 137.604100][ T5888] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 137.611026][ T5885] usb 4-1: USB disconnect, device number 6 [ 137.836302][ T6253] netlink: 188 bytes leftover after parsing attributes in process `syz.2.91'. [ 138.010722][ T5888] usb 3-1: USB disconnect, device number 5 [ 138.368599][ T6263] syzkaller0: entered promiscuous mode [ 138.374287][ T6263] syzkaller0: entered allmulticast mode [ 138.807320][ T6258] dccp_close: ABORT with 64 bytes unread [ 138.985275][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 139.234714][ T5888] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.389514][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.419821][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.451820][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.497501][ T5888] usb 3-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 139.523293][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.719189][ T5888] usb 3-1: config 0 descriptor?? [ 140.136539][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.151710][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.753106][ T6286] netlink: 'syz.2.97': attribute type 6 has an invalid length. [ 142.090627][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 142.120270][ T6291] netlink: 44 bytes leftover after parsing attributes in process `syz.3.101'. [ 142.129553][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 142.371092][ T6295] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 142.372385][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 142.423412][ T6298] FAULT_INJECTION: forcing a failure. [ 142.423412][ T6298] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.449798][ T6298] CPU: 0 UID: 0 PID: 6298 Comm: syz.1.102 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 142.449832][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.449843][ T6298] Call Trace: [ 142.449851][ T6298] [ 142.449858][ T6298] dump_stack_lvl+0x241/0x360 [ 142.449895][ T6298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.449923][ T6298] ? __pfx__printk+0x10/0x10 [ 142.449960][ T6298] should_fail_ex+0x424/0x570 [ 142.449985][ T6298] _copy_to_user+0x31/0xb0 [ 142.450014][ T6298] simple_read_from_buffer+0xc4/0x170 [ 142.450047][ T6298] proc_fail_nth_read+0x1ef/0x260 [ 142.450069][ T6298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.450092][ T6298] ? rw_verify_area+0x246/0x630 [ 142.450112][ T6298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.450133][ T6298] vfs_read+0x21f/0xb90 [ 142.450160][ T6298] ? __pfx___mutex_lock+0x10/0x10 [ 142.450186][ T6298] ? __pfx_vfs_read+0x10/0x10 [ 142.450210][ T6298] ? __fget_files+0x2a/0x420 [ 142.450229][ T6298] ? __fget_files+0x39d/0x420 [ 142.450244][ T6298] ? __fget_files+0x2a/0x420 [ 142.450274][ T6298] ksys_read+0x19d/0x2d0 [ 142.450298][ T6298] ? __pfx_ksys_read+0x10/0x10 [ 142.450323][ T6298] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 142.450345][ T6298] ? lockdep_hardirqs_on+0x9d/0x150 [ 142.450371][ T6298] __do_fast_syscall_32+0xb4/0x110 [ 142.450395][ T6298] ? exc_page_fault+0x5f8/0x920 [ 142.450421][ T6298] do_fast_syscall_32+0x34/0x80 [ 142.450446][ T6298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.450469][ T6298] RIP: 0023:0xf7f81579 [ 142.450485][ T6298] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 142.450517][ T6298] RSP: 002b:00000000f50a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 142.450539][ T6298] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50a6620 [ 142.450552][ T6298] RDX: 000000000000000f RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 142.450563][ T6298] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 142.450575][ T6298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.450586][ T6298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.450615][ T6298] [ 142.501290][ T6302] FAULT_INJECTION: forcing a failure. [ 142.501290][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 142.715805][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.4.105 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 142.715831][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.715840][ T6302] Call Trace: [ 142.715846][ T6302] [ 142.715852][ T6302] dump_stack_lvl+0x241/0x360 [ 142.715881][ T6302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.715902][ T6302] ? __pfx__printk+0x10/0x10 [ 142.715922][ T6302] ? stack_trace_save+0x11a/0x1d0 [ 142.715946][ T6302] ? __pfx___might_resched+0x10/0x10 [ 142.715968][ T6302] should_fail_ex+0x424/0x570 [ 142.715988][ T6302] should_failslab+0xac/0x100 [ 142.716023][ T6302] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 142.716044][ T6302] ? __alloc_skb+0x1c2/0x480 [ 142.716056][ T6302] ? genl_rcv_msg+0x8a4/0xf00 [ 142.716074][ T6302] __alloc_skb+0x1c2/0x480 [ 142.716086][ T6302] ? do_fast_syscall_32+0x34/0x80 [ 142.716103][ T6302] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.716125][ T6302] ? __pfx___alloc_skb+0x10/0x10 [ 142.716145][ T6302] netlink_dump+0x237/0xeb0 [ 142.716174][ T6302] ? __pfx_netlink_dump+0x10/0x10 [ 142.716204][ T6302] ? __asan_memset+0x23/0x50 [ 142.716218][ T6302] ? genl_start+0x4ae/0x6d0 [ 142.716239][ T6302] __netlink_dump_start+0x5a2/0x790 [ 142.716266][ T6302] genl_rcv_msg+0x8a4/0xf00 [ 142.716307][ T6302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.716322][ T6302] ? stack_trace_save+0x11a/0x1d0 [ 142.716358][ T6302] ? __pfx_stack_trace_save+0x10/0x10 [ 142.716379][ T6302] ? __pfx_genl_start+0x10/0x10 [ 142.716392][ T6302] ? __pfx_genl_dumpit+0x10/0x10 [ 142.716405][ T6302] ? __pfx_genl_done+0x10/0x10 [ 142.716431][ T6302] ? __lock_acquire+0xad5/0xd80 [ 142.716447][ T6302] ? __pfx_netdev_nl_qstats_get_dumpit+0x10/0x10 [ 142.716481][ T6302] netlink_rcv_skb+0x208/0x480 [ 142.716502][ T6302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.716518][ T6302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.716555][ T6302] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.716580][ T6302] genl_rcv+0x28/0x40 [ 142.716594][ T6302] netlink_unicast+0x7f8/0x9a0 [ 142.716619][ T6302] ? __pfx_netlink_unicast+0x10/0x10 [ 142.716639][ T6302] ? skb_put+0x114/0x1f0 [ 142.716656][ T6302] netlink_sendmsg+0x8c3/0xcd0 [ 142.716686][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.716709][ T6302] ? __import_iovec+0x585/0x830 [ 142.716728][ T6302] ? aa_sock_msg_perm+0x91/0x160 [ 142.716752][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.716771][ T6302] __sock_sendmsg+0x221/0x270 [ 142.716798][ T6302] ____sys_sendmsg+0x523/0x860 [ 142.716821][ T6302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.716848][ T6302] __sys_sendmsg+0x271/0x360 [ 142.716867][ T6302] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.716919][ T6302] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 142.716936][ T6302] ? lockdep_hardirqs_on+0x9d/0x150 [ 142.716955][ T6302] __do_fast_syscall_32+0xb4/0x110 [ 142.716974][ T6302] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.716988][ T6302] ? lockdep_hardirqs_on+0x9d/0x150 [ 142.717007][ T6302] do_fast_syscall_32+0x34/0x80 [ 142.717025][ T6302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.717041][ T6302] RIP: 0023:0xf7fb4579 [ 142.717053][ T6302] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 142.717064][ T6302] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 142.717079][ T6302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 142.717089][ T6302] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.717097][ T6302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.717105][ T6302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.717113][ T6302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.717133][ T6302] [ 143.098521][ T6030] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 143.131162][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 143.210609][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 143.231848][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 143.240976][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 143.270986][ T5888] usb 3-1: USB disconnect, device number 6 [ 143.307751][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 143.316055][ T6030] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 143.358299][ T6030] usb 4-1: config 0 has no interface number 0 [ 143.387422][ T6030] usb 4-1: config 0 interface 188 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 143.495171][ T6030] usb 4-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.552841][ T6314] IPv6: sit1: Disabled Multicast RS [ 143.562334][ T6030] usb 4-1: New USB device found, idVendor=7392, idProduct=c811, bcdDevice=d9.c8 [ 143.575300][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.619595][ T6030] usb 4-1: Product: syz [ 143.623820][ T6030] usb 4-1: Manufacturer: syz [ 143.695727][ T6030] usb 4-1: SerialNumber: syz [ 143.718350][ T6030] usb 4-1: config 0 descriptor?? [ 143.720129][ T6324] program syz.1.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.733128][ T6300] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 143.774669][ T5889] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.924767][ T5889] usb 5-1: device descriptor read/64, error -71 [ 143.934815][ T5888] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.960015][ T6030] usb 4-1: USB disconnect, device number 7 [ 144.084584][ T5888] usb 3-1: device descriptor read/64, error -71 [ 144.184671][ T5889] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.244801][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 144.334772][ T5889] usb 5-1: device descriptor read/64, error -71 [ 144.354707][ T5888] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.445105][ T5889] usb usb5-port1: attempt power cycle [ 144.529867][ T5888] usb 3-1: device descriptor read/64, error -71 [ 144.658949][ T5888] usb usb3-port1: attempt power cycle [ 144.809164][ T5889] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.845746][ T5889] usb 5-1: device descriptor read/8, error -71 [ 144.949721][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 144.961781][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 145.036374][ T5888] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.065303][ T5888] usb 3-1: device descriptor read/8, error -71 [ 145.116472][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.147468][ T5889] usb 5-1: device descriptor read/8, error -71 [ 145.255304][ T5889] usb usb5-port1: unable to enumerate USB device [ 145.307209][ T5888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.335499][ T5888] usb 3-1: device descriptor read/8, error -71 [ 145.454848][ T5888] usb usb3-port1: unable to enumerate USB device [ 145.562097][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 145.758837][ T6343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.119'. [ 145.919882][ T6345] FAULT_INJECTION: forcing a failure. [ 145.919882][ T6345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.951310][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.1.120 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 145.951349][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.951361][ T6345] Call Trace: [ 145.951370][ T6345] [ 145.951378][ T6345] dump_stack_lvl+0x241/0x360 [ 145.951416][ T6345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.951445][ T6345] ? __pfx__printk+0x10/0x10 [ 145.951489][ T6345] should_fail_ex+0x424/0x570 [ 145.951516][ T6345] _copy_to_user+0x31/0xb0 [ 145.951547][ T6345] video_usercopy+0xf30/0x1330 [ 145.951579][ T6345] ? __pfx___video_do_ioctl+0x10/0x10 [ 145.951599][ T6345] ? __pfx_video_usercopy+0x10/0x10 [ 145.951637][ T6345] ? __fget_files+0x2a/0x420 [ 145.951659][ T6345] v4l2_ioctl+0x189/0x1e0 [ 145.951694][ T6345] v4l2_compat_ioctl32+0x1d7/0x260 [ 145.951733][ T6345] __se_compat_sys_ioctl+0x50e/0xc30 [ 145.951779][ T6345] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 145.951806][ T6345] ? __fget_files+0x2a/0x420 [ 145.951839][ T6345] ? fput+0x9b/0xd0 [ 145.951857][ T6345] ? ksys_write+0x275/0x2d0 [ 145.951890][ T6345] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 145.951916][ T6345] ? lockdep_hardirqs_on+0x9d/0x150 [ 145.951944][ T6345] __do_fast_syscall_32+0xb4/0x110 [ 145.951970][ T6345] ? exc_page_fault+0x5f8/0x920 [ 145.952000][ T6345] do_fast_syscall_32+0x34/0x80 [ 145.952026][ T6345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.952051][ T6345] RIP: 0023:0xf7f81579 [ 145.952068][ T6345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 145.952085][ T6345] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 145.952106][ T6345] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c008561c [ 145.952121][ T6345] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.952133][ T6345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.952144][ T6345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 145.952156][ T6345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.952185][ T6345] [ 146.515163][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.715122][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 146.725022][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.761758][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 146.761772][ T30] audit: type=1326 audit(1744859146.228:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.3.124" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 146.872289][ T24] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 146.915075][ T24] usb 2-1: config 127 has no interface number 0 [ 146.921434][ T24] usb 2-1: config 127 interface 25 has no altsetting 0 [ 146.950442][ T24] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 146.969937][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.998774][ T24] usb 2-1: Product: syz [ 147.013280][ T24] usb 2-1: Manufacturer: syz [ 147.028265][ T24] usb 2-1: SerialNumber: syz [ 147.168289][ T6366] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.858553][ T6387] syz_tun: entered allmulticast mode [ 149.016896][ T6387] dvmrp1: entered allmulticast mode [ 150.273842][ T30] audit: type=1326 audit(1744859149.698:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 150.504563][ T5888] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 150.570964][ T24] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 150.592976][ T30] audit: type=1326 audit(1744859149.698:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 150.629719][ T6386] syz_tun: left allmulticast mode [ 150.747990][ T6386] dvmrp1: left allmulticast mode [ 150.764928][ T5889] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.820416][ T30] audit: type=1326 audit(1744859149.718:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 150.832339][ T5888] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.869281][ T6412] FAULT_INJECTION: forcing a failure. [ 150.869281][ T6412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.899741][ T5888] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.934256][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.951193][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: syz.1.138 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 150.951222][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.951234][ T6412] Call Trace: [ 150.951250][ T6412] [ 150.951258][ T6412] dump_stack_lvl+0x241/0x360 [ 150.951294][ T6412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.951323][ T6412] ? __pfx__printk+0x10/0x10 [ 150.951364][ T6412] should_fail_ex+0x424/0x570 [ 150.951390][ T6412] _copy_from_user+0x2d/0xb0 [ 150.951420][ T6412] get_compat_msghdr+0xb3/0x730 [ 150.951453][ T6412] ? __fget_files+0x2a/0x420 [ 150.951473][ T6412] ? __pfx_get_compat_msghdr+0x10/0x10 [ 150.951517][ T6412] __sys_sendmsg+0x23b/0x360 [ 150.951545][ T6412] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.951619][ T6412] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 150.951643][ T6412] ? lockdep_hardirqs_on+0x9d/0x150 [ 150.951670][ T6412] __do_fast_syscall_32+0xb4/0x110 [ 150.951695][ T6412] ? exc_page_fault+0x5f8/0x920 [ 150.951723][ T6412] do_fast_syscall_32+0x34/0x80 [ 150.951748][ T6412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.951790][ T6412] RIP: 0023:0xf7f81579 [ 150.951806][ T6412] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.951822][ T6412] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 150.951843][ T6412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 150.951857][ T6412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.951868][ T6412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.951879][ T6412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.951891][ T6412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.951920][ T6412] [ 151.149153][ T5889] usb 1-1: config index 0 descriptor too short (expected 51981, got 77) [ 151.157629][ T5889] usb 1-1: config 81 has too many interfaces: 211, using maximum allowed: 32 [ 151.167120][ T5889] usb 1-1: config 81 has an invalid descriptor of length 216, skipping remainder of the config [ 151.177660][ T5889] usb 1-1: config 81 has 0 interfaces, different from the descriptor's value: 211 [ 151.199678][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 151.209836][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.217942][ T5889] usb 1-1: Product: syz [ 151.222123][ T5889] usb 1-1: Manufacturer: syz [ 151.226756][ T5889] usb 1-1: SerialNumber: syz [ 151.343144][ T30] audit: type=1326 audit(1744859149.718:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 151.423351][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.536466][ T6408] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.579523][ T24] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 151.680750][ T120] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 151.703860][ T30] audit: type=1326 audit(1744859149.718:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 151.736780][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.748856][ T24] usb 2-1: USB disconnect, device number 8 [ 151.756749][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.832691][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.849310][ T120] usb 4-1: config 65 has an invalid interface number: 95 but max is 0 [ 151.864665][ T120] usb 4-1: config 65 has no interface number 0 [ 151.886623][ T120] usb 4-1: string descriptor 0 read error: -22 [ 151.893332][ T120] usb 4-1: New USB device found, idVendor=5353, idProduct=a4a0, bcdDevice=6f.b6 [ 151.896215][ T30] audit: type=1326 audit(1744859149.718:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 151.991550][ T6416] dns_resolver: Unsupported content type (8) [ 152.005296][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.054126][ T30] audit: type=1326 audit(1744859149.718:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.120509][ T30] audit: type=1326 audit(1744859149.718:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.228234][ T30] audit: type=1326 audit(1744859149.718:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.340820][ T6420] program syz.2.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.455054][ T5834] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.503555][ T30] audit: type=1326 audit(1744859149.718:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.535071][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.543942][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.559877][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.582073][ T30] audit: type=1326 audit(1744859149.718:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.608299][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.655376][ T5885] usb 4-1: USB disconnect, device number 8 [ 152.685311][ T5834] usb 2-1: device descriptor read/64, error -71 [ 152.706150][ T30] audit: type=1326 audit(1744859149.718:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.742102][ T30] audit: type=1326 audit(1744859149.718:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.810906][ T30] audit: type=1326 audit(1744859149.848:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.893864][ T30] audit: type=1326 audit(1744859149.918:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 152.993356][ T5834] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.144609][ T5834] usb 2-1: device descriptor read/64, error -71 [ 153.265782][ T5834] usb usb2-port1: attempt power cycle [ 153.614697][ T5834] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 153.690242][ T5834] usb 2-1: device descriptor read/8, error -71 [ 153.934559][ T5834] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 153.996166][ T5834] usb 2-1: device descriptor read/8, error -71 [ 154.127386][ T5834] usb usb2-port1: unable to enumerate USB device [ 154.142913][ T5888] usb 3-1: USB disconnect, device number 11 [ 154.334094][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 154.669528][ C1] sd 0:0:1:0: [sda] tag#903 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 154.680076][ C1] sd 0:0:1:0: [sda] tag#903 CDB: Write(6) 0a 00 4e 24 00 00 00 00 20 01 00 00 [ 155.184566][ T5885] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.375504][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 155.394283][ T5885] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 155.410173][ T5889] usb 1-1: USB disconnect, device number 9 [ 155.426404][ T5885] usb 3-1: config 0 has no interface number 0 [ 155.432545][ T5885] usb 3-1: config 0 interface 108 has no altsetting 0 [ 155.478341][ T5885] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 155.504932][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.533975][ T5885] usb 3-1: Product: syz [ 155.548252][ T5885] usb 3-1: Manufacturer: syz [ 155.552974][ T5885] usb 3-1: SerialNumber: syz [ 155.598923][ T5885] usb 3-1: config 0 descriptor?? [ 155.643160][ T5885] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 155.894911][ T5889] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.972737][ T5885] usb 3-1: USB disconnect, device number 12 [ 155.984994][ T5888] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 156.056566][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.081996][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 156.093265][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 156.094543][ T5890] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.105480][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 2304, setting to 64 [ 156.126831][ T5889] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 156.136286][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.144279][ T5889] usb 1-1: Product: syz [ 156.148922][ T5889] usb 1-1: Manufacturer: syz [ 156.153540][ T5889] usb 1-1: SerialNumber: syz [ 156.169403][ T5889] usb 1-1: config 0 descriptor?? [ 156.169670][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 156.189543][ T5889] usb 1-1: ucan: probing device on interface #0 [ 156.196370][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.196403][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.196427][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.196468][ T5888] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 156.196493][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.199576][ T5888] usb 5-1: config 0 descriptor?? [ 156.208733][ T5889] usb 1-1: ucan: invalid endpoint configuration [ 156.218605][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 156.232522][ T5889] usb 1-1: ucan: probe failed; try to update the device firmware [ 156.277244][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.290104][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.306017][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.317554][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.331781][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.340992][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.352448][ T5890] usb 4-1: config 0 descriptor?? [ 156.394647][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 156.422525][ T5889] usb 1-1: USB disconnect, device number 10 [ 156.427215][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.455364][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.506071][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.523826][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 156.542408][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.567266][ T24] usb 2-1: config 0 descriptor?? [ 156.744092][ T5888] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0009/input/input19 [ 156.772431][ T5890] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 156.786392][ T5890] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 156.840188][ T5888] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0009/input/input20 [ 156.886520][ T5888] kye 0003:0458:5011.0009: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 156.905699][ T5889] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 157.070692][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.105701][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.131522][ T5889] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 157.144340][ T6460] FAULT_INJECTION: forcing a failure. [ 157.144340][ T6460] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 157.164248][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.165250][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000B/input/input22 [ 157.173737][ T5889] usb 3-1: Product: syz [ 157.192081][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.0.153 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 157.192110][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.192123][ T6460] Call Trace: [ 157.192131][ T6460] [ 157.192140][ T6460] dump_stack_lvl+0x241/0x360 [ 157.192180][ T6460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.192210][ T6460] ? __pfx__printk+0x10/0x10 [ 157.192254][ T6460] should_fail_ex+0x424/0x570 [ 157.192281][ T6460] prepare_alloc_pages+0x220/0x610 [ 157.192314][ T6460] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 157.192342][ T6460] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.192372][ T6460] ? stack_depot_save_flags+0x43f/0x940 [ 157.192406][ T6460] alloc_pages_mpol+0x339/0x690 [ 157.192442][ T6460] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 157.192481][ T6460] alloc_pages_noprof+0x121/0x190 [ 157.192513][ T6460] get_free_pages_noprof+0xc/0x30 [ 157.192534][ T6460] kasan_populate_vmalloc_pte+0x38/0xe0 [ 157.192569][ T6460] __apply_to_page_range+0x808/0xde0 [ 157.192606][ T6460] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 157.192636][ T6460] ? __pfx___apply_to_page_range+0x10/0x10 [ 157.192666][ T6460] ? do_raw_spin_unlock+0x13c/0x8b0 [ 157.192705][ T6460] alloc_vmap_area+0x1d48/0x2410 [ 157.192759][ T6460] ? __pfx_alloc_vmap_area+0x10/0x10 [ 157.192788][ T6460] ? __kasan_kmalloc+0x9d/0xb0 [ 157.192814][ T6460] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 157.192847][ T6460] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 157.192870][ T6460] __get_vm_area_node+0x1c8/0x2d0 [ 157.192908][ T6460] __vmalloc_node_range_noprof+0x349/0x1390 [ 157.192929][ T6460] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 157.192952][ T6460] ? __alloc_frozen_pages_noprof+0xbf/0x5b0 [ 157.192978][ T6460] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.193022][ T6460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 157.193042][ T6460] ? __kasan_kmalloc_large+0x1a/0xa0 [ 157.193073][ T6460] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 157.193098][ T6460] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 157.193129][ T6460] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 157.193152][ T6460] ? __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 157.193181][ T6460] __htab_map_lookup_and_delete_batch+0x5c1/0x1880 [ 157.193241][ T6460] ? __fget_files+0x2a/0x420 [ 157.193261][ T6460] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 157.193286][ T6460] ? __fget_files+0x39d/0x420 [ 157.193303][ T6460] ? __fget_files+0x2a/0x420 [ 157.193327][ T6460] ? __pfx_htab_map_lookup_batch+0x10/0x10 [ 157.193357][ T6460] bpf_map_do_batch+0x288/0x660 [ 157.193387][ T6460] __sys_bpf+0x6b4/0x8b0 [ 157.193411][ T6460] ? __pfx___sys_bpf+0x10/0x10 [ 157.193447][ T6460] ? ksys_write+0x275/0x2d0 [ 157.193483][ T6460] __ia32_sys_bpf+0x7c/0x90 [ 157.193516][ T6460] __do_fast_syscall_32+0xb4/0x110 [ 157.193553][ T6460] ? exc_page_fault+0x5f8/0x920 [ 157.193590][ T6460] do_fast_syscall_32+0x34/0x80 [ 157.193615][ T6460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.193639][ T6460] RIP: 0023:0xf7f24579 [ 157.193655][ T6460] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 157.193670][ T6460] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 157.193690][ T6460] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 0000000080000080 [ 157.193704][ T6460] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.193715][ T6460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.193726][ T6460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.193737][ T6460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.193764][ T6460] [ 157.240829][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.316645][ T5834] usb 4-1: USB disconnect, device number 9 [ 157.346518][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000B/input/input23 [ 157.353985][ T5889] usb 3-1: Manufacturer: syz [ 157.379732][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.381897][ T5889] usb 3-1: SerialNumber: syz [ 157.460552][ T24] kye 0003:0458:5011.000B: input,hiddev2,hidraw2: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 157.462721][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.722725][ T5889] usb 3-1: config 0 descriptor?? [ 157.730559][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.752403][ T5889] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 157.866603][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.904760][ T24] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 157.919949][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 157.925261][ T5889] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 157.975243][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.989487][ T6445] raw-gadget.2 gadget.4: fail, usb_ep_queue returned -108 [ 157.994172][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.005445][ T5889] usb 3-1: media controller created [ 158.054665][ T24] usb 5-1: device descriptor read/64, error -32 [ 158.110556][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.400768][ T5889] DVB: Unable to find symbol tda10046_attach() [ 158.411562][ T5889] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 158.421466][ T5889] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 158.425550][ T24] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 158.446325][ T5834] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.624641][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 158.637355][ T5834] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 158.648654][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.657746][ T5889] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 158.667198][ T5834] usb 4-1: Product: syz [ 158.671419][ T5834] usb 4-1: Manufacturer: syz [ 158.679176][ T5889] usb 3-1: USB disconnect, device number 13 [ 158.685776][ T5834] usb 4-1: SerialNumber: syz [ 158.712831][ T5834] usb 4-1: config 0 descriptor?? [ 158.732786][ T5834] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 158.784811][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.947893][ T5886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.967901][ T5886] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 158.984507][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.992573][ T5886] usb 1-1: Product: syz [ 159.005074][ T5886] usb 1-1: Manufacturer: syz [ 159.015845][ T5886] usb 1-1: SerialNumber: syz [ 159.040116][ T5886] usb 1-1: config 0 descriptor?? [ 159.075291][ T5890] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 159.234874][ C1] sd 0:0:1:0: [sda] tag#908 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 159.245271][ C1] sd 0:0:1:0: [sda] tag#908 CDB: Write(6) 0a 00 4e 24 00 00 00 00 20 01 00 00 [ 159.257638][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.273016][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.358715][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 159.486445][ T24] usb 5-1: device descriptor read/64, error -71 [ 159.734670][ T24] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 159.765232][ T24] usb 5-1: device reset changed ep0 maxpacket size! [ 159.785961][ T5888] usb 5-1: USB disconnect, device number 11 [ 159.906666][ T2154] usb 2-1: USB disconnect, device number 13 [ 159.995236][ T5834] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 160.188463][ T5834] usb 4-1: USB disconnect, device number 10 [ 160.208112][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.230329][ T5834] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 160.289051][ T5834] ssu100 4-1:0.0: device disconnected [ 160.391660][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.566703][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'. [ 160.576054][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 160.614547][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.637866][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.664497][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.701465][ T5888] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.719579][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.799779][ T5888] usb 5-1: config 0 descriptor?? [ 161.106697][ T5834] usb 1-1: USB disconnect, device number 11 [ 161.210467][ T5840] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 161.258346][ T5888] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 161.395551][ T5888] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 161.517375][ T6471] [ 161.519777][ T6471] ====================================================== [ 161.526830][ T6471] WARNING: possible circular locking dependency detected [ 161.533882][ T6471] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 161.541027][ T6471] ------------------------------------------------------ [ 161.548052][ T6471] syz.4.156/6471 is trying to acquire lock: [ 161.553943][ T6471] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 161.562937][ T6471] [ 161.562937][ T6471] but task is already holding lock: [ 161.570333][ T6471] ffff888028d421a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 161.580459][ T6471] [ 161.580459][ T6471] which lock already depends on the new lock. [ 161.580459][ T6471] [ 161.590881][ T6471] [ 161.590881][ T6471] the existing dependency chain (in reverse order) is: [ 161.599901][ T6471] [ 161.599901][ T6471] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 161.608523][ T6471] lock_acquire+0x116/0x2f0 [ 161.613572][ T6471] __mutex_lock+0x1a5/0x10c0 [ 161.618698][ T6471] smc_switch_to_fallback+0x35/0xda0 [ 161.624526][ T6471] smc_sendmsg+0x11f/0x530 [ 161.629492][ T6471] __sock_sendmsg+0x221/0x270 [ 161.634716][ T6471] __sys_sendto+0x365/0x4c0 [ 161.639755][ T6471] __ia32_sys_sendto+0xdd/0x100 [ 161.645132][ T6471] __do_fast_syscall_32+0xb4/0x110 [ 161.650774][ T6471] do_fast_syscall_32+0x34/0x80 [ 161.656160][ T6471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.663014][ T6471] [ 161.663014][ T6471] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 161.670845][ T6471] lock_acquire+0x116/0x2f0 [ 161.675875][ T6471] lock_sock_nested+0x48/0x100 [ 161.681173][ T6471] do_ipv6_setsockopt+0xccd/0x3680 [ 161.686816][ T6471] ipv6_setsockopt+0x5d/0x170 [ 161.692023][ T6471] do_sock_setsockopt+0x3b1/0x710 [ 161.697582][ T6471] __ia32_sys_setsockopt+0x1f2/0x280 [ 161.703395][ T6471] __do_fast_syscall_32+0xb4/0x110 [ 161.709034][ T6471] do_fast_syscall_32+0x34/0x80 [ 161.714507][ T6471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.721924][ T6471] [ 161.721924][ T6471] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 161.729159][ T6471] validate_chain+0xa69/0x24e0 [ 161.734500][ T6471] __lock_acquire+0xad5/0xd80 [ 161.739704][ T6471] lock_acquire+0x116/0x2f0 [ 161.744734][ T6471] __mutex_lock+0x1a5/0x10c0 [ 161.749859][ T6471] start_sync_thread+0xde/0x2d60 [ 161.755330][ T6471] do_ip_vs_set_ctl+0x48e/0xe50 [ 161.760716][ T6471] nf_setsockopt+0x295/0x2c0 [ 161.765843][ T6471] smc_setsockopt+0x25c/0xd50 [ 161.771057][ T6471] do_sock_setsockopt+0x3b1/0x710 [ 161.776610][ T6471] __ia32_sys_setsockopt+0x1f2/0x280 [ 161.782420][ T6471] __do_fast_syscall_32+0xb4/0x110 [ 161.788065][ T6471] do_fast_syscall_32+0x34/0x80 [ 161.793454][ T6471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.800316][ T6471] [ 161.800316][ T6471] other info that might help us debug this: [ 161.800316][ T6471] [ 161.810558][ T6471] Chain exists of: [ 161.810558][ T6471] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 161.810558][ T6471] [ 161.824228][ T6471] Possible unsafe locking scenario: [ 161.824228][ T6471] [ 161.831682][ T6471] CPU0 CPU1 [ 161.837047][ T6471] ---- ---- [ 161.842412][ T6471] lock(&smc->clcsock_release_lock); [ 161.847886][ T6471] lock(sk_lock-AF_INET6); [ 161.855094][ T6471] lock(&smc->clcsock_release_lock); [ 161.862990][ T6471] lock(rtnl_mutex); [ 161.866978][ T6471] [ 161.866978][ T6471] *** DEADLOCK *** [ 161.866978][ T6471] [ 161.875123][ T6471] 1 lock held by syz.4.156/6471: [ 161.880064][ T6471] #0: ffff888028d421a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 161.890626][ T6471] [ 161.890626][ T6471] stack backtrace: [ 161.896524][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.4.156 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 161.896546][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.896557][ T6471] Call Trace: [ 161.896566][ T6471] [ 161.896574][ T6471] dump_stack_lvl+0x241/0x360 [ 161.896604][ T6471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.896628][ T6471] ? __pfx__printk+0x10/0x10 [ 161.896652][ T6471] ? print_lock+0x171/0x1a0 [ 161.896674][ T6471] print_circular_bug+0x2e1/0x300 [ 161.896697][ T6471] check_noncircular+0x142/0x160 [ 161.896723][ T6471] validate_chain+0xa69/0x24e0 [ 161.896754][ T6471] __lock_acquire+0xad5/0xd80 [ 161.896773][ T6471] lock_acquire+0x116/0x2f0 [ 161.896791][ T6471] ? start_sync_thread+0xde/0x2d60 [ 161.896821][ T6471] __mutex_lock+0x1a5/0x10c0 [ 161.896842][ T6471] ? start_sync_thread+0xde/0x2d60 [ 161.896865][ T6471] ? __lock_acquire+0xad5/0xd80 [ 161.896885][ T6471] ? start_sync_thread+0xde/0x2d60 [ 161.896908][ T6471] ? __pfx___mutex_lock+0x10/0x10 [ 161.896931][ T6471] ? finish_task_switch+0x1e5/0x870 [ 161.896946][ T6471] ? lockdep_hardirqs_on+0x9d/0x150 [ 161.896967][ T6471] ? rcu_is_watching+0x15/0xb0 [ 161.896990][ T6471] start_sync_thread+0xde/0x2d60 [ 161.897017][ T6471] ? cgroup_rstat_updated+0xe0/0xc40 [ 161.897048][ T6471] ? __pfx_start_sync_thread+0x10/0x10 [ 161.897083][ T6471] do_ip_vs_set_ctl+0x48e/0xe50 [ 161.897101][ T6471] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 161.897123][ T6471] ? __mutex_unlock_slowpath+0x229/0x800 [ 161.897147][ T6471] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.897170][ T6471] ? __pfx___mutex_lock+0x10/0x10 [ 161.897191][ T6471] ? futex_wake+0x525/0x5d0 [ 161.897211][ T6471] nf_setsockopt+0x295/0x2c0 [ 161.897238][ T6471] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 161.897265][ T6471] smc_setsockopt+0x25c/0xd50 [ 161.897286][ T6471] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.897308][ T6471] ? __pfx_smc_setsockopt+0x10/0x10 [ 161.897326][ T6471] ? __lock_acquire+0xad5/0xd80 [ 161.897343][ T6471] ? aa_sock_opt_perm+0x79/0x120 [ 161.897368][ T6471] ? __pfx_smc_setsockopt+0x10/0x10 [ 161.897387][ T6471] do_sock_setsockopt+0x3b1/0x710 [ 161.897406][ T6471] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 161.897423][ T6471] ? __fget_files+0x2a/0x420 [ 161.897438][ T6471] ? __fget_files+0x39d/0x420 [ 161.897451][ T6471] ? __fget_files+0x2a/0x420 [ 161.897474][ T6471] __ia32_sys_setsockopt+0x1f2/0x280 [ 161.897494][ T6471] __do_fast_syscall_32+0xb4/0x110 [ 161.897516][ T6471] ? exc_page_fault+0x5f8/0x920 [ 161.897536][ T6471] do_fast_syscall_32+0x34/0x80 [ 161.897558][ T6471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.897579][ T6471] RIP: 0023:0xf7fb4579 [ 161.897596][ T6471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.897610][ T6471] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 161.897628][ T6471] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 161.897640][ T6471] RDX: 000000000000048b RSI: 0000000080000000 RDI: 0000000000000018 [ 161.897650][ T6471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.897660][ T6471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.897670][ T6471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.897685][ T6471] [ 162.801062][ T5890] usb 5-1: USB disconnect, device number 12 [ 163.274577][ T5150] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 163.284573][ T5150] Bluetooth: hci0: command 0x206a tx timeout