last executing test programs: 28.939221951s ago: executing program 3 (id=2261): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="400d010000b918"], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x18, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x2404c040) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0xee01}}}}, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) dup3(r7, r1, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x6, 0x1000}], 0x1, 0x0) unshare(0x2c040000) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00006f7d70bd6f8d643df821d3ba9e905d16bb201c3219919a16198c03000000745f169a0f10945876", @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x800000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r10, 0x0, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000004300)={0x50, 0x0, r9, {0x7, 0x26, 0x0, 0x11100, 0x0, 0x0, 0x0, 0x77}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46250e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec15e7e8664d7bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45e4ff75c5d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a1031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f75", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0xfffffffffffffffe, {{0x6, 0x0, 0x0, 0x7, 0xe073, 0x3ff, {0x0, 0xab78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}}}, 0x0}) 28.080684976s ago: executing program 3 (id=2264): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ioprio_set$pid(0x3, r0, 0x2007) r1 = socket$inet(0x2, 0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40142, 0x0) mremap(&(0x7f000086c000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000051f000/0x3000)=nil) mmap$snddsp_control(&(0x7f000086d000/0x2000)=nil, 0x1000, 0x0, 0x100012, r2, 0x83000000) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6012000800183a0000000000000000000000ff0a80000001ff0200000000000000000000000000018300907800000000fe8000000000000000000000000000aa"], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xffffff3f, 0x7, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0xb, @void, @value, @void, @value}, 0x48) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/67], 0xfc}}, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @random="241c000012fc", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x65, 0x0, 0x4}]}}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e"], 0x3c}}, 0x0) 27.422985767s ago: executing program 3 (id=2271): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002440), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000438000900000000000000000001000000040000000800008004000000"], 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001400)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffff}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9bc, 0x1000001}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x37}]}}]}, 0x68}}, 0x4080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x1901000000000000) 4.667375194s ago: executing program 3 (id=2272): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'rose0\x00'}]}, 0x30}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000400)={0x0, 0x2, 0x4000001f, 0xfffffffffffffffd}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5434, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x118) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000007480)={'ip_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xc4, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x2, 0x1, 0x4, 0x10, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "65abfb"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x3, 0xe362, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xe2aa, 0x1000, 0x9, 0x5, 0x9, 0x10}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0xfffb}, @mdlm_detail={0x3e, 0x24, 0x13, 0x5, "e119629abd9b4c5c7d5e0805a42d67ff674cc6c8865590ce80a80e5fcb04ccb544f1b1b183f049c6c6f06ca7c77f0f634539c58799182fa94d4c"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x31, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfd, 0x9b, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x210, 0x40, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x80, 0x7, 0x40, 0xa8}, 0x3a, &(0x7f0000000880)={0x5, 0xf, 0x3a, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x0, 0x7, 0xb9b, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x9, 0xff4}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x8166, 0xf0f, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5688f527569d90e64335074ea1d4cc02"}]}, 0x9, [{0x28, &(0x7f0000000240)=@string={0x28, 0x3, "1308ef096ff7fb4be9e54f264f78e6cda2eb116054b1f45ea6a596ba6832e42ddaba06113f0a"}}, {0x98, &(0x7f0000000280)=@string={0x98, 0x3, "6f20e888b042ba97f39dde9f409cf646af943116292e9e3d138ed86dc926a517b28af0d08441def5933ca1a3abdd136649cf5875669c510baee0b3242299788e494495505d9af71ee6e40a5f6c8eef570b7d3d3430805596451c6f991ccfa89cce69d274ce2e1abe4f65ab7dd63fa2c54894b236ec3b3a51d7f6dfa3b53fe221e95aac735444371f464c17977bc2dcfa0f219bb07267"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x140a}}, {0xb4, &(0x7f00000007c0)=@string={0xb4, 0x3, "7116c95bb808bce3fe8858588398c50e49fde0542f98dcb6d35a21af1a62ee11a077fba8ed7a8b4a9e545c5a63402e33441176d821faa2f6edfe73ce1192ef52c38d26c9e6423306f5dc94c6a6adab844b7d0cfc95dcd1467398267b5896890693d817ca56ec6e6b13145d8d49e72839edcbeec2aef9f4c294bee1f2535ebedff155b79b8470f492accb33686b8209737624088108fdf5d10cdee02f14a1b040d9fdeadc53920e63cbf777ceae492eb30a1c"}}, {0x85, &(0x7f0000000440)=ANY=[@ANYBLOB="85033937421b47f0b46fc6dc78412acd9155fed9c3f00b000000f34215d5353c3dbd7d319a989189c8340f298ee79ba12080da456c42573184b9c2575f9f9021726347fe27cbb89f58954cb942358d70bafb4364c3d0079680f16117e3f574f09bda36571079dad940e172f614b446aeba8cdeda8407af891cb886b221b658900b54d18c6f"]}, {0x99, &(0x7f0000000500)=@string={0x99, 0x3, "6bdf39df819e04eaed555e416d59efcfc418ccc0a13c2c8cbeb37560c28867d33d15e25dc5f9aae721695ce8db64e20036114c6338ea020e6423143f7e0805eadce927d81065aebdecc0f4d706f5744ee5b6e5722ccb9d95d30244acaef61d3c07f312c97a8b33a397c083a241c489ad87a5089ea1edbd44a1b2b9a2f4ba124a452af9a5917d9f58de980555f57f2328821625cbcd8292"}}, {0x95, &(0x7f00000005c0)=@string={0x95, 0x3, "978d0d09179ea01116915660f77a131612d4892076875e3ad6f91ec2656b4ff2bdb6bc5887d10a0b8b1531b52819b1de081b18a34c07c0ee90086837c7589f13c942fd8eeacecd54f6694a2f2eb4cbee91cda81b3617626f77956b4e318d86917a9696163ab3062952809abb5820ad248a154a4106539f14ff86892d4bb1ed7cf7339efebd1d8dfcfa2a425efe6b0e07b342da"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x25, &(0x7f0000000680)=@string={0x25, 0x3, "8c66883f22f2fb8208a5ad1c9c66daf85c5244a35029629882e309da98b50e5ad8c81d"}}]}) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.154588733s ago: executing program 2 (id=2304): socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x249249249249083, 0x0, &(0x7f0000000300)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x18}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x18}}, './file0\x00'}) preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x800) (async) preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x800) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xa800, 0x0) fanotify_init(0x200, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRESHEX=r6, @ANYRESHEX, @ANYRESOCT=0x0], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_value, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r8, 0x2000, 0x0, 0x23a, 0x9, 0xfffffffe}, 0x14) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r8, 0x2000, 0x0, 0x23a, 0x9, 0xfffffffe}, 0x14) 2.941305132s ago: executing program 2 (id=2340): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getqdisc={0x24, 0x26, 0x22c, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0xfff2, 0xfff3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f00000000c0)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000000), 0x5}, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x5a, 0x0, 0x0) (async) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86", @ANYRESDEC=r0, @ANYRESOCT=r2], 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000240)='A', 0x1) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x20000880) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203010200000000000000000000009e"], 0x1c}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000080)={"a0453822", 0x0, 0x6, 0x1, 0x0, 0x2, "33793ed2edede2df2a87ba3158b8da", '\x00', "0600", "ff44eec1", ["d8e75781f3efa56a26ffbd57", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000220012800c0001006d6163766c616e00140002800800010008000000060002000000810008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n'], 0x54}}, 0x0) syz_usb_disconnect(r3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r10 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/212, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) 2.835334524s ago: executing program 4 (id=2341): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x9, 0x4) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000040)=@hat={'permhat '}, 0x1b) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$int_out(r7, 0x0, &(0x7f0000000280)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r11, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x84, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close(r0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="00c3ff", 0xd}, {&(0x7f0000000000)='G', 0x1}], 0x2) 2.795231523s ago: executing program 2 (id=2342): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{&(0x7f0000002980)={0xa, 0x4e21, 0xec5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002b80)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3b}}}], 0x18, 0xffe0}}], 0x1, 0x20044885) 2.621552s ago: executing program 2 (id=2343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.611535592s ago: executing program 3 (id=2344): recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000000)=""/63, 0x3f, 0x10061, 0x0, 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r0, &(0x7f0000000040)="f39ba6470b4972b4ef7b6f7f7a3019768120b07536489704f7417ac607cf0aa0b68a8db5294d014cf5f4fd0d42c0fbd62bedac747690c257f3322c52958d8a6dbd58e1855207ce5fde50affd95605a8c6c359c082ec33c58ed85eabfd3232967831cb1d9d99e36d9d7a1cdeddb97919bb9423a12d49ecb45928abf9d47868794dc038f38f840509b1df75319e242cb2c6d64e8f1adf1", 0x96, 0x40, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @private2}, 0x1c) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x480) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r2], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000340)="d5b2ffe8a31f0d07904563c8965bd6097579a326dd8d69abf326e452398da74e5e0d263d7d875eb237bc09adc003a2e7b84cf464004616be84b6d49b20a7f6e30df39eda7c1159c3de2e8f7a9b795746ba02f3650f3d68bb0e74afd767e17f0007cc80ee184d585acdfa7d803361e0075c22e90b1b03b93a2ad42cdb1021eaa9811879e04afb3933a2fa10adf7d5cd19015f564a7c16789c43d51563e853d778798030338320478c6024433aa26c69e9a9be77f91850ebe271b6aedd59a8c536a2f9b74ce674fa1f696431b224c1c21185c8919df1a6bc4409f49c36bf2ad3d8321f", 0xe2, 0x801, &(0x7f0000000440)={0xa, 0x4e20, 0xa2d2, @loopback}, 0x1c) (async) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000004c0)={0x9d0000, 0x0, 0x8, r3, 0x0, &(0x7f0000000480)={0x9a090b, 0x8, '\x00', @value64=0x200}}) (async, rerun: 32) prctl$PR_SVE_SET_VL(0x32, 0xee0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000500)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000580)={&(0x7f0000000540)=[r4], 0x1}) r5 = syz_usb_connect$uac1(0x2, 0xb1, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x9, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x306, 0x5, 0x2, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x3}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x83, 0x2, 0x4, 0xe, "9b02469276d0d97e"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x6, 0x1005}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x1, 0xff, "9ae214"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x8, 0x6, {0x7, 0x25, 0x1, 0x83, 0x6b, 0xfff5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x4, 0xd5, "8587268c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x19, 0x2, 0x2, {0x7, 0x25, 0x1, 0x1, 0x81, 0x8}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x4, 0x7, 0x4, 0x8, 0x3}, 0xaf, &(0x7f00000006c0)={0x5, 0xf, 0xaf, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7d, "0f2d04a1ac4e1a462f8fcb16783ed331"}, @generic={0x89, 0x10, 0xb, "97b01bb4ab5f94c597f2bd578724e55c88bad5f94e06c556fe6a5f7ca155de85af50bff6d24f02d0c06d4e93e3e38fa7b6ba0b7bebede7d879348dca921d699e184cab918cfb459141e388cc609d0b23b50c90771efb67cb2560bac3409f58352d92276cca7a1a4db7be3d580d640e88ae26534e8519a6b4ec67ea021d87e136f14b70d2df2c"}, @generic={0xd, 0x10, 0x1, "1c9ace9e067e3281dd04"}]}, 0x7, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2c2b}}, {0xdd, &(0x7f0000000840)=@string={0xdd, 0x3, "c896b42247f1e23e0b2a7669961cdd5c31e2b2d5f28ce9ae92ea804e9734375a4c7b0dcb846b4daa27c35b9387893d46e1053731dcab5ed664f876d8113e02bfc7d3bce444669f51e43b51fe9eb58fef141c547ad6651ae501bed1a600b87c791fb7c0a4762cf425e22e64da504b2bd561107b91913739e313b1c717adcc7882fb833ab292b0e64acc45535c18a0f299d06946c0d9ec331185251abce0edddbcd6207dd07abf6e4d70737f1b2ab64cb784c922749a7ce025ea9805827994923b119ff721ba5768c881d95b54f6855887a5d74cb4d463489ea91d89"}}, {0xb6, &(0x7f0000000940)=@string={0xb6, 0x3, "292fa6e1ce746b1c1338bc861636f77821fc3fd478dfab20e54825bd9a516e53dcfef550af69d2b21ad17682a60cb6c717a82a9882a3b15da195e803d9ce308dfb4b01dd3c1ce804c13f47a93aee2b21a3a7632bfb5729e67ced398bb3b68aa610c929998eb7a031e6fdf112a3be9059d3ed80838c9c53ae941122d0b488ab5b85719c0e7935b9ec68bd5b2ead7a65bc3f7b3549b0ab8062fc2fe3f8340caa4074bf81a1448e1e9c82d8f96bce9c786942bd87c6"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44d}}, {0x84, &(0x7f0000000a40)=@string={0x84, 0x3, "a34730beaf49a819f1e7db9ac5da76a310789ef9708180129512b12ca5f7976577b27022b0d3cfe7ca98e740a28ceee40829e55231e3effaf17bc4b65c64bceafbac3f640291c4338c4e97d6693b3af2e700ccb1babba22660b54ea4df99599239ec0308981a3a3c43040bdba888c416cf7e007a48c96f6bfc2091ef72deda912eba"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000cc0)={0x14, &(0x7f0000000b80)={0x40, 0x6, 0xdb, {0xdb, 0x30, "cd2b2e1d1d49351e5b9b2cc6d4bcca2721d9e508ff6bd728255c520415e5e9f51f5efac1ad7c523255bf9f27f1e12a2269a1a2cb7e7f91babe878b67d066078d68237201051e677f533da9c5e2b2c009bb8800ce1bf82b89c08a7680be4af1227af6b27ef0edf4017b4fd27d0c9f3831167a6c0be439f4c2263d773223323744da03c47e7f0ccddd589780775c8cf1bdb03126f73e8a37945a09d2e7b0a388d1322c64611f047cfaf16aa49bb080abe1d66c9682aad7c591fbafc1d58aed4510cd49529e20c0601cfb83f81be0c5bda2d1388c1de5ce03be17"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000fc0)={0x44, &(0x7f0000000d00)={0x20, 0x18, 0xd4, "ab62ba111a40ea29c264e812c9cd32d016874282f1b1e219a2802ec3652cfc586515e8aba5aefaa3883a5c6ddae1b263bd4cdec666f652c4b420501f4ee3f6a47268c1e8ea6f0e63945f9623a8d865acddb8f8d34c0224457cdc2027a2c26159985e61538f45608fea09e0a6c6fc7897f10355676ce68458f7027419c34c3e2d0b655bbb4b14856a1f21d4f1f28df3910d667325b19907095e93ce05e4f7f100dd7fb8a8e1e97cf9386b748a388745fbdd19cc6df3fae1d177a0876777533edf92f1184753d470f37fbc8754f45c39401319c369"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e80)={0x20, 0x81, 0x3, 'Yvb'}, &(0x7f0000000ec0)={0x20, 0x82, 0x3, "26f772"}, &(0x7f0000000f00)={0x20, 0x83, 0x1, "bf"}, &(0x7f0000000f40)={0x20, 0x84, 0x3, "222f97"}, &(0x7f0000000f80)={0x20, 0x85, 0x3, "c42c36"}}) (async, rerun: 64) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000001040)={0x3, r3}) (async, rerun: 64) r6 = syz_open_dev$vim2m(&(0x7f0000001080), 0x1, 0x2) (async) r7 = syz_io_uring_setup(0x16cd, &(0x7f00000010c0)={0x0, 0x7d20, 0x10, 0x0, 0x354}, &(0x7f0000001140), &(0x7f0000001180)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000001240)={'sit0\x00', &(0x7f00000011c0)={@multicast2, 0x0, 0x0, 0x60, 0x0, [{@broadcast}, {@broadcast}, {@empty}, {@local}, {@multicast2}, {@multicast1}]}}) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000001280)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000012c0)={r8}) (async) r9 = syz_open_dev$dri(&(0x7f0000001300), 0x8, 0x40000) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f0000001340)={0x17, 0x0, 0x1}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000001380)={0x7, 'pimreg1\x00', {0x2}, 0x3}) (async, rerun: 64) close_range(r9, r0, 0x0) (rerun: 64) io_setup(0x80, &(0x7f00000013c0)=0x0) io_getevents(r11, 0x4, 0x4, &(0x7f0000001400)=[{}, {}, {}, {}], &(0x7f0000001480)) (async) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000014c0)) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000001500)={r10, 0x7}) (async, rerun: 64) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0x0, 0xffffff9f, 0x1, 0x0, 0x1, 0x8, '\x00', 0x0, r3, 0x3, 0x1, 0x3, 0xf, @void, @value, @void, @value}, 0x50) (rerun: 64) io_submit(r11, 0x7, &(0x7f0000001c80)=[&(0x7f0000001640)={0x0, 0x0, 0x0, 0x6, 0x4, r12, &(0x7f00000015c0)="e7ac5371fc72ebdf0662381f2fdfdf82a0c050fce17075172d4ec4de103b0373c69e62f2306a401cc12833cea3a9f1692966e806ddaef2b3817ee53d8fb26f670f5b567dda2742bdb26d751b22a6119d78fdc8b8c02ff0", 0x57, 0x9, 0x0, 0x0, r9}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x8, 0x8, r9, &(0x7f0000001680)="b1af9f8d62d1d506ee517af453121d329b592a10b9c43e4da5284ab1d4bac39771943591e1a841efaa6433a029e0639e0c958c7732dc35a0df8e9ec5332c8fe18697806baba54d70c90e6721476e77866df002f75fe30c7ef6b859c9aabbf4b33489a6878dcefa567b46e25dfd0f8f2ad83103e3842ed3bdff59a47df656e2d6df1741447bca2035303950", 0x8b, 0x8}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x9, r3, &(0x7f0000001780)="64527ac0927dee93ad7a7b44e3005394f53ce8e1558cb5475ba62f61b0cf1127cbb85e09a4695334cdfd4eb1de24d2f92ed93eabc5adc896d5bcd8a34234adc2fc7e79b9d63dd5b7adfff4cb65c99829cb2673f461cb795acca767200795692c923ea2a5e8fbcf7e943cbf7cb7cff984da7384b751e61063da12e5801caf6cfe175a8e0d4fed4d539d8a15ddd5a98ce3d21b0db248dd1c5ab9ba9f2a2b2263a399c8fa5cccd3eac64e8a34d9f211052372d2105fc66e04e6e5cd80d331bab562f082b6527efd0827027de8e9daf901a1237da4569dbca64203b002e9824ce788d478d2e12e", 0xe5, 0x67e, 0x0, 0x1, r3}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x7, 0x2, r7, &(0x7f00000018c0)="a24d90d57460ebe73ee826091384cadfbf26f65221be0dea79ae387367f8c8ec43e45ef6d6f5ca2222aa40673c9fb4dda2bd194b170f08b52664c9dbd5b14a828e63c447d6a1ad6149b78573cd474cfcee6c61aaf90ec8c048fb51358fcc1e0ad0a63244bf221da7356d37dcc26de72fddb3a08b18009155dde90f9751378235a7afa34a892e4a7799ea2fa5c0cd3cdbafcd462323560e2b3a6f803243348af5cb8506", 0xa3, 0x5, 0x0, 0x3}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000001a40)="1bf9c0a310ad4054f7ea0bb21911377be0ac335d75ec138fffb706b20aba41ca96fddb133f5bd9d34d7485f5c4e80b4ba5c24d0554f4403d9bd77e7243ee8ac262b295a64bca563f7486b7a8636964f99fa33c3d18cfdcc8d1f06094baae39fd8cb8937ec6cafd96dac67c2080e40c56190b117af1048cd3897065d931b243d42c8ab8c416e6ac804de15b0ee92a5396810d6ac31359133f65b8db2637a173aebed82d843790cb026cddc51011e23310c179a87d5502", 0xb6, 0xfff, 0x0, 0x3}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0xd, 0x4, r6, &(0x7f0000001b40)="7e7c64fce9ec028f3e011415e5f79c406f63b9267bac051e83f9c333e94cfe773ea02cbc1e3e0ba95524d1656019e6bdc623be692be0d337e8a6acfb2be90b60be82bed97f8e3f9f0570aef163d95ff59aea8084381aae7b2d070184ef718a291aa7e50887f585f97b", 0x69, 0x5, 0x0, 0x3, r3}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000001c00)="cbf76eb0896da574a75ae6", 0xb, 0x4, 0x0, 0x1}]) 2.506797004s ago: executing program 1 (id=2345): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x1400, 0x0, 0x3) 2.418374306s ago: executing program 1 (id=2346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001a00)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x493, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000100)=[@enter_looper, @request_death={0x400c630e, 0x2}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) r5 = dup3(r3, r1, 0x80000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x98, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff8}], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @private=0xa010101}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2.229070514s ago: executing program 2 (id=2347): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x2848, &(0x7f0000000200)={0x0, 0x800002, 0x10, 0x0, 0x200000}, &(0x7f00000002c0), &(0x7f0000000080)) io_uring_enter(r1, 0xfffffffe, 0x0, 0xd, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000240), 0xae8f, 0x101400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001]}}]}]}]}, 0x44}}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xed81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)="9c", 0x1}, {&(0x7f00000006c0)="552768b9d527f7d3f3e71e", 0xb}, {&(0x7f00000001c0)="648623ce", 0x4}], 0x3, &(0x7f0000001180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r10, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/167, 0x20}], 0x1}}], 0x1, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) syz_usb_control_io$hid(r8, 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001a00)) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "5780eafb"}, @global=@item_4={0x3, 0x1, 0x4, '4-Bu'}]}}, 0x0}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x30, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x30}}, 0x0) 2.161483181s ago: executing program 1 (id=2348): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)={0x40, 0x16, 0x8, "ee7c9aa4d383592a"}, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x20003, 0x0, [0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.097447785s ago: executing program 4 (id=2349): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)={0x40, 0x16, 0x6, "ee7c9aa4d383"}, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x20003, 0x0, [0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.786049385s ago: executing program 0 (id=2318): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a001400ff009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0xb3}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000380)=""/115, 0x73}], 0x2}, 0x5}], 0x1, 0x101, 0x0) (rerun: 64) 1.592813371s ago: executing program 0 (id=2350): syz_emit_ethernet(0x86, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}, "a815a23da43974ff"}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sigaltstack(0x0, 0x0) fremovexattr(r0, &(0x7f0000000380)=@known='trusted.overlay.redirect\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000fdad00ff0000000005000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x800, 0x0) fdatasync(r2) 1.592322947s ago: executing program 3 (id=2351): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x9) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x5bfbe43f074f02f5, r2, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000280)="4b1f558d5ca164a2b25425fa59a6eea0c54f439391053ed0d020252860bc038acd31063acba8e04a160a4de90caf3e9a0e0454e2ba64", 0x36) write$dsp(r2, 0x0, 0x0) write$dsp(r2, &(0x7f0000000200)="254ed655d7672c1336eebfca44adfe2dad4d0000006aad18c641e0167c", 0x1d) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000002280)={0x8}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x100442, 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140), 0x248020, &(0x7f0000002480)=ANY=[@ANYRESHEX=r4, @ANYBLOB="36a58ac4741068bdfb3192e09e4f174cef38fa101501fc37fe51ca3c652509019476fe9d6639e0c780e1ff85a6188b48b157d1f90c29f8ff962edb8e0ec440b23cfa7c167c07b5f2542962ee39655f4db853fb035f6fde59c33f", @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="08bd150f9b8a0100000000000000882f01a29305fc9ddbd262b7642bb2ca7ddec9498c4bd5905dc1f6ebebca65f1aae0f66de61d6990aad7d2615fe1ee400f343228c23bcd11923bacebd61c5c1b"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0xa4202, 0x2c53d61f8fd58804) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0xffffffffffffffda, r5, {0x7, 0x9, 0x9, 0x200060, 0x8, 0x0, 0x7, 0x8000}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0x0, r6}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.554993825s ago: executing program 1 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) (fail_nth: 8) 1.4193727s ago: executing program 0 (id=2353): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="8978c511cd6814ec368cabd6f12006f22bb9a0492c7c7ef46b66f1d631121ca794ec2e2a9664c8be6bd0cdeb2c6e07916c5727a9f8f5b55827861b3ac6f5a09267ed51c4f73ad542794628c493efd6e60c78baeb4ad21abd6242d718b8466aa93ab5bc2867022d302b5c1599c20d6badcacaa0334e41fbfc4a456405a52a6ec737a2f25fe5f9873444bc77002e916b1ff5ed427792a1a7ebf829e08166d623686db62dc8b5ebec3d8a6578125c79f00fed96161b9554292ce7025329eee1cd4aafbf5a521bac4511dd", 0xc9}], 0x1}, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x10080004, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'pids'}, {0x0, 'cpuset'}, {0x0, 'pids'}, {0x0, 'rdma'}, {0x0, 'freezer'}]}, 0x23) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x2000000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.045623703s ago: executing program 1 (id=2354): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c80)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffeffffe, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x2b, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5db, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x30fb, 0x0, 0xfffffffc, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbec7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110b, 0x6, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x99]}) 1.019958794s ago: executing program 1 (id=2355): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406e50005240000000d240f0100000000000000000006241a"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "68efd53c9628a6f7a7f7eeb10808b03a41ee3143656447af7bac48f5722fd71ecab20c669457ba80ab827fd96c0afa5709cf9934358807c8787fefb23f9607cf", 0x23}, 0x48, 0xfffffffffffffffc) keyctl$revoke(0x3, r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040bd28031900000000000109022400010000000009044000020300000009210000000122"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_disconnect(r4) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x10480}, [@IFLA_AF_SPEC={0x74, 0xc, 0x0, 0x1, [@AF_INET={0x8, 0xc, 0x0, 0x1, {0x4, 0x5}}, @AF_INET6={0x68, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x10}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x94}}, 0x91) 974.448084ms ago: executing program 0 (id=2356): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5e1, 0x10000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) r7 = dup(r6) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x1]}, 0x45c) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r8, 0x20000) quotactl_fd$Q_SYNC(r8, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYBLOB="000000000000000004"], 0x24}}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000040)='#\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="2cae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecaff0f0000ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286c030000004ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa", 0x2dc}, {&(0x7f0000000800)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a178919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f628ad5de745fc858b1f6166753b33ed6006a824210fd9e0dd9f23b88e3dcb2388a7311364fac143895932d4768ccb3e05871b3d5a0ef70da8eeceb8668bf67d24174de5a416b91b561733fad1096feaab1ecc5c0176df9b40b8c9c3515d0f15e6ad486ca058414f82d009f015521587860d3c39e28695b152872be1d833518c3a43cfc8e29961d03496ee5299f0ee78be5334b9453d308019bd8503e24cc079ed5827babe13a5073c243dfcbe082e71d14f03163fabb684e6f141642dc77776a3e41", 0x2a4}], 0x2, 0x0, 0x0, 0x900}}], 0x2, 0x24000004) 972.939419ms ago: executing program 4 (id=2357): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffc9e, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003ef000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000380)="0f201766b9e309000066b83f46151e66ba1cc889580f302ef4ba6100ed0f0966b90602000066b80100000066ba000000000f300f20c06635000000400f22c066adbaa100ecf9", 0x25}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000001fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000007080)=ANY=[@ANYBLOB="400000001400b59500000000000000000a3f0000", @ANYRES32=r7, @ANYBLOB="14000100ff02000000000000000000000006000114000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x1, @desc2}) 709.613031ms ago: executing program 0 (id=2358): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7ff, 0xfffffffffffffffd}) fcntl$lock(r2, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x800000000000}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70) 614.780255ms ago: executing program 0 (id=2359): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304944) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb) truncate(&(0x7f0000000040)='./file0\x00', 0xcc89) close(r0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00R\x00\x00 ']) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x6e3754f8c93de59f, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) socket$can_bcm(0x1d, 0x2, 0x2) add_key(0x0, &(0x7f0000001900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008604"]) socket(0x11, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x4e020400) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, 0x0, 0x0) 526.17181ms ago: executing program 4 (id=2360): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x200000) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x4068aea3, &(0x7f0000000080)={[{0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}]}) 93.598517ms ago: executing program 4 (id=2361): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)=""/4105, 0x1009}, {&(0x7f0000000140)=""/37, 0x25}], 0x2}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYBLOB="00000100000000000000100000001800018014005502006e657464657673428c872ed31284b2000000193349356606d35eec8b300b0011030b3f6e21afa3107cd9cf0ed54c3f56080aaf9184796fe335be759a8a0868f19877bd582230f3f8721b4249eae6c86e24b31ec8f8c5a6e31084dd76a3ebae712a8c0f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000400", 0x33fe0}], 0x1}, 0x0) 92.483338ms ago: executing program 2 (id=2362): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)={0x40, 0x16, 0x8, "ee7c9aa4d383592a"}, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x20003, 0x0, [0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=2363): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d080006067c09e8fe55a1", 0x1c}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x3, 0x107, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x46a92b8e}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x2, 0x20, 0x10}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000800)={0x2, r3}) sendto$inet(r2, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x6f4, 0x1e23, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000300)={r4, 0x4}, &(0x7f0000000340)=0x8) kernel console output (not intermixed with test programs): oduct=ffff, bcdDevice= 0.00 [ 527.189945][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.227551][ T5295] usb 4-1: config 0 descriptor?? [ 527.372137][ T5288] usb 5-1: USB disconnect, device number 105 [ 527.380446][ T5288] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 527.566677][ T5294] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 527.651376][ T5295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 527.665663][ T5295] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 527.693762][ T5295] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 527.722827][ T5294] usb 3-1: device descriptor read/64, error -71 [ 527.967683][ T5294] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 528.106605][ T5294] usb 3-1: device descriptor read/64, error -71 [ 528.217547][ T5294] usb usb3-port1: attempt power cycle [ 528.469521][ T5286] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 528.527323][T14177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.554749][T14177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.562712][ T5294] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 528.597483][ T5294] usb 3-1: device descriptor read/8, error -71 [ 528.677012][ T5286] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 528.685700][ T5286] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 528.709653][ T5286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 528.727151][T14176] tap0: tun_chr_ioctl cmd 1074025677 [ 528.732865][T14176] tap0: linktype set to 0 [ 528.737702][ T5286] usb 5-1: config 0 has no interface number 0 [ 528.753436][ T5286] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 528.765279][ T5286] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 528.785298][ T5286] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.799190][ T5286] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.817033][ T5286] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 528.826818][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.839451][ T5294] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 528.849284][ T5286] usb 5-1: config 0 descriptor?? [ 528.875726][ T5286] gspca_main: spca561-2.14.0 probing abcd:cdee [ 528.917755][ T5294] usb 3-1: device descriptor read/8, error -71 [ 529.027187][ T5294] usb usb3-port1: unable to enumerate USB device [ 529.063104][ T5286] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 529.075635][ T5286] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.099719][ T5286] usb 5-1: MIDIStreaming interface descriptor not found [ 529.107011][ T5288] usb 4-1: reset high-speed USB device number 82 using dummy_hcd [ 529.276720][ T5286] usb 5-1: USB disconnect, device number 106 [ 529.365745][T14183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.373565][T14183] IPv6: NLM_F_CREATE should be set when creating new route [ 529.416828][T14183] netlink: 'syz.1.1967': attribute type 27 has an invalid length. [ 529.678670][T14183] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.686241][T14183] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.097063][T14183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.118826][T14183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.269452][T11414] usb 4-1: USB disconnect, device number 82 [ 530.378828][T14183] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.391014][T14183] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.402389][T14183] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.414150][T14183] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.446761][T11414] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 530.686615][T11414] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 530.703165][T11414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.711374][T11414] usb 4-1: Product: syz [ 530.715566][T11414] usb 4-1: Manufacturer: syz [ 530.720299][T11414] usb 4-1: SerialNumber: syz [ 530.735959][T11414] usb 4-1: config 0 descriptor?? [ 530.818103][T14212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1975'. [ 530.862234][T14215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1976'. [ 531.027732][ T5288] usb 4-1: USB disconnect, device number 83 [ 531.331364][ T5295] IPVS: starting estimator thread 0... [ 531.347300][T11414] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 531.427949][T14225] IPVS: using max 17 ests per chain, 40800 per kthread [ 531.509975][T11414] usb 3-1: Using ep0 maxpacket: 16 [ 531.520676][T11414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.541687][T11414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.555444][T11414] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.601630][T11414] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 531.613354][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'. [ 531.664294][T11414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.726271][T11414] usb 3-1: config 0 descriptor?? [ 531.770851][T14235] netlink: 'syz.3.1984': attribute type 23 has an invalid length. [ 531.806725][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'. [ 531.854965][T14235] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.864753][T14235] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.884115][T14235] bridge0: entered promiscuous mode [ 531.894051][ T5294] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 531.997940][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.037025][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.067901][ T5294] usb 2-1: Using ep0 maxpacket: 8 [ 532.077009][T14243] FAULT_INJECTION: forcing a failure. [ 532.077009][T14243] name failslab, interval 1, probability 0, space 0, times 0 [ 532.085733][ T5294] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 532.105393][T14243] CPU: 0 UID: 0 PID: 14243 Comm: syz.4.1987 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 532.113797][ T5294] usb 2-1: config 1 has no interface number 1 [ 532.116983][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 532.117004][T14243] Call Trace: [ 532.117016][T14243] [ 532.117028][T14243] dump_stack_lvl+0x241/0x360 [ 532.117072][T14243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.117108][T14243] ? __pfx__printk+0x10/0x10 [ 532.117141][T14243] ? __kmalloc_noprof+0xb0/0x400 [ 532.117174][T14243] ? __pfx___might_resched+0x10/0x10 [ 532.117208][T14243] should_fail_ex+0x3b0/0x4e0 [ 532.117243][T14243] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 532.175787][T14243] should_failslab+0xac/0x100 [ 532.180491][T14243] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 532.186819][T14243] __kmalloc_noprof+0xd8/0x400 [ 532.191621][T14243] ? apparmor_capable+0x13b/0x1b0 [ 532.196672][T14243] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 532.202758][T14243] genl_rcv_msg+0x802/0xec0 [ 532.207273][T14243] ? mark_lock+0x9a/0x360 [ 532.211621][T14243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.216686][T14243] ? __pfx_lock_acquire+0x10/0x10 [ 532.221722][T14243] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 532.227644][T14243] ? __pfx___might_resched+0x10/0x10 [ 532.232954][T14243] netlink_rcv_skb+0x1e3/0x430 [ 532.237739][T14243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.242776][T14243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.248102][T14243] ? __netlink_deliver_tap+0x77e/0x7c0 [ 532.253593][T14243] genl_rcv+0x28/0x40 [ 532.257590][T14243] netlink_unicast+0x7f6/0x990 [ 532.262379][T14243] ? __pfx_netlink_unicast+0x10/0x10 [ 532.267681][T14243] ? __virt_addr_valid+0x183/0x530 [ 532.272804][T14243] ? __check_object_size+0x48e/0x900 [ 532.278109][T14243] netlink_sendmsg+0x8e4/0xcb0 [ 532.282900][T14243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.288210][T14243] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 532.294642][T14243] ? __sock_sendmsg+0x54/0x270 [ 532.299428][T14243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.304732][T14243] __sock_sendmsg+0x221/0x270 [ 532.309430][T14243] ____sys_sendmsg+0x52a/0x7e0 [ 532.314214][T14243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.319521][T14243] __sys_sendmsg+0x292/0x380 [ 532.324121][T14243] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.329266][T14243] ? __pfx_vfs_write+0x10/0x10 [ 532.334107][T14243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 532.340487][T14243] ? do_syscall_64+0x100/0x230 [ 532.345293][T14243] ? do_syscall_64+0xb6/0x230 [ 532.349997][T14243] do_syscall_64+0xf3/0x230 [ 532.354530][T14243] ? clear_bhb_loop+0x35/0x90 [ 532.359222][T14243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.365137][T14243] RIP: 0033:0x7fa78cd7dff9 [ 532.369566][T14243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.389180][T14243] RSP: 002b:00007fa78dbaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.397697][T14243] RAX: ffffffffffffffda RBX: 00007fa78cf35f80 RCX: 00007fa78cd7dff9 [ 532.405693][T14243] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 532.413676][T14243] RBP: 00007fa78dbaa090 R08: 0000000000000000 R09: 0000000000000000 [ 532.421659][T14243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.429644][T14243] R13: 0000000000000000 R14: 00007fa78cf35f80 R15: 00007fa78d05fa28 [ 532.437676][T14243] [ 532.441843][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.456610][ T5294] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 532.508484][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.518128][ T5294] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.553802][T14250] netlink: 'syz.3.1989': attribute type 4 has an invalid length. [ 532.561055][ T5294] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.577037][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.585121][ T5294] usb 2-1: Product: syz [ 532.623326][ T5294] usb 2-1: Manufacturer: syz [ 532.643097][ T5294] usb 2-1: SerialNumber: syz [ 532.644411][T11414] usbhid 3-1:0.0: can't add hid device: -71 [ 532.655282][T11414] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 532.699585][T11414] usb 3-1: USB disconnect, device number 66 [ 532.859534][T14231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.931577][ T5294] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 532.958721][ T5294] usb 2-1: USB disconnect, device number 80 [ 533.038361][T14186] udevd[14186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.341886][T14270] fuse: Unknown parameter '0xffffffffffffffff' [ 533.626594][ T5294] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 533.626676][T11414] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 533.806592][ T5294] usb 3-1: Using ep0 maxpacket: 32 [ 533.806616][T11414] usb 4-1: Using ep0 maxpacket: 16 [ 533.825360][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.836691][T11414] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 533.845385][T11414] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 533.847738][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 533.874152][T11414] usb 4-1: config 0 has no interface number 0 [ 533.883924][T11414] usb 4-1: config 0 interface 214 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 533.885403][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 533.895035][T11414] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 533.924542][T11414] usb 4-1: config 0 interface 214 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 533.929398][ T5294] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 533.954753][T11414] usb 4-1: Dual-Role OTG device on HNP port [ 533.965444][T11414] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 533.965693][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.979316][T11414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.991602][T11414] usb 4-1: Product: syz [ 533.995815][T11414] usb 4-1: Manufacturer: syz [ 534.000534][T11414] usb 4-1: SerialNumber: syz [ 534.008128][T11414] usb 4-1: config 0 descriptor?? [ 534.033405][T14290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.034035][ T5294] usb 3-1: config 0 descriptor?? [ 534.047310][ T5289] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 534.063373][T14290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.063462][T14272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.114275][ T5294] hub 3-1:0.0: USB hub found [ 534.218322][ T5289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 534.227218][T11414] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32 [ 534.234508][T11414] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 534.237250][ T5289] usb 2-1: config 1 has no interface number 0 [ 534.264295][ T5289] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.296589][ T5289] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 534.321017][ T5289] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 534.321235][ T5294] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 534.347809][ T5289] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.360093][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.369298][ T5289] usb 2-1: Product: syz [ 534.370543][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.373590][ T5289] usb 2-1: Manufacturer: syz [ 534.395316][ T5289] usb 2-1: SerialNumber: syz [ 534.398744][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.731452][ T5294] hid-generic 0003:046D:C314.0015: item fetching failed at offset 0/1 [ 534.757366][ T5294] hid-generic 0003:046D:C314.0015: probe with driver hid-generic failed with error -22 [ 535.008427][T11414] usb 4-1: USB disconnect, device number 84 [ 535.111187][ T29] audit: type=1326 audit(1727527414.386:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.133575][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.192482][ T29] audit: type=1326 audit(1727527414.436:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.227109][ T5289] cdc_ncm 2-1:1.1: bind() failure [ 535.269895][ T29] audit: type=1326 audit(1727527414.436:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.304858][ T5286] usb 3-1: USB disconnect, device number 67 [ 535.310956][ T29] audit: type=1326 audit(1727527414.436:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.334183][ T29] audit: type=1326 audit(1727527414.436:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.416399][ T29] audit: type=1326 audit(1727527414.436:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.465233][ T5289] usb 2-1: USB disconnect, device number 81 [ 535.477868][ T29] audit: type=1326 audit(1727527414.436:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.500699][ T29] audit: type=1326 audit(1727527414.436:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.524518][ T29] audit: type=1326 audit(1727527414.436:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.550147][ T29] audit: type=1326 audit(1727527414.436:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.2.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7fc00000 [ 535.619458][T14321] libceph: resolve '0.0' (ret=-3): failed [ 536.096668][T11414] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 536.306670][T11414] usb 4-1: Using ep0 maxpacket: 32 [ 536.318311][T11414] usb 4-1: config index 0 descriptor too short (expected 62, got 60) [ 536.346662][T11414] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.378954][T11414] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.441393][T11414] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=30.ad [ 536.462878][T11414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.493923][T11414] usb 4-1: Product: syz [ 536.513811][T11414] usb 4-1: Manufacturer: syz [ 536.523950][T11414] usb 4-1: SerialNumber: syz [ 536.543428][T11414] usb 4-1: config 0 descriptor?? [ 536.731542][T14346] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.2024'. [ 536.828864][T14346] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.2024'. [ 537.014709][T11414] usb 4-1: Found UVC 0.00 device syz (046d:0821) [ 537.025646][T11414] usb 4-1: No valid video chain found. [ 537.057847][T11414] usb 4-1: USB disconnect, device number 85 [ 537.191225][T14358] netlink: 'syz.1.2029': attribute type 10 has an invalid length. [ 537.203168][T14358] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.212698][T14358] bond0: (slave team0): Enslaving as an active interface with an up link [ 537.463435][T14368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2032'. [ 537.473941][T14368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2032'. [ 537.486498][T14368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2032'. [ 537.495581][T14368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2032'. [ 537.746298][T14375] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 537.756871][T14375] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 537.763097][T14375] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 537.784014][T14375] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 537.800668][T14375] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 537.811522][T14375] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 537.823194][T14375] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 537.834299][T14375] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 537.842461][T14375] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 537.853356][T14375] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 537.863990][T14375] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 537.873575][T14375] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 537.882250][T14375] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 537.894444][T14375] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 537.903930][T14375] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 537.929509][T14375] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 538.186936][ T5286] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 538.321671][T14395] FAULT_INJECTION: forcing a failure. [ 538.321671][T14395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.346680][T14395] CPU: 1 UID: 0 PID: 14395 Comm: syz.2.2040 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 538.357153][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.367222][T14395] Call Trace: [ 538.370510][T14395] [ 538.373442][T14395] dump_stack_lvl+0x241/0x360 [ 538.378145][T14395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.383360][T14395] ? __pfx__printk+0x10/0x10 [ 538.387974][T14395] should_fail_ex+0x3b0/0x4e0 [ 538.392665][T14395] _copy_from_user+0x2f/0xe0 [ 538.397264][T14395] move_addr_to_kernel+0x82/0x150 [ 538.402303][T14395] copy_msghdr_from_user+0x43e/0x680 [ 538.407602][T14395] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 538.413442][T14395] __sys_sendmsg+0x22d/0x380 [ 538.418040][T14395] ? __pfx___sys_sendmsg+0x10/0x10 [ 538.423171][T14395] ? __pfx_vfs_write+0x10/0x10 [ 538.427976][T14395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 538.434340][T14395] ? do_syscall_64+0x100/0x230 [ 538.439124][T14395] ? do_syscall_64+0xb6/0x230 [ 538.443812][T14395] do_syscall_64+0xf3/0x230 [ 538.448332][T14395] ? clear_bhb_loop+0x35/0x90 [ 538.453015][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.458936][T14395] RIP: 0033:0x7f5202f7dff9 [ 538.463358][T14395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.483324][T14395] RSP: 002b:00007f5203e66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.491759][T14395] RAX: ffffffffffffffda RBX: 00007f5203135f80 RCX: 00007f5202f7dff9 [ 538.499740][T14395] RDX: 0000000000000097 RSI: 0000000020000140 RDI: 0000000000000003 [ 538.507722][T14395] RBP: 00007f5203e66090 R08: 0000000000000000 R09: 0000000000000000 [ 538.515697][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.523681][T14395] R13: 0000000000000000 R14: 00007f5203135f80 R15: 00007f520325fa28 [ 538.531673][T14395] [ 538.558130][ T5286] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.573798][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.599257][ T5286] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 538.636909][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.653638][ T5286] usb 2-1: config 0 descriptor?? [ 538.670063][ T5286] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 538.834248][T14400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.846075][ T5286] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 538.875191][T14400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.019328][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 539.049995][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 539.060108][T14407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.097069][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 539.126562][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.166719][ T5286] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.185674][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.215821][ T5286] usb 4-1: config 0 descriptor?? [ 539.476649][ T5289] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 539.647765][ T5286] usbhid 4-1:0.0: can't add hid device: -71 [ 539.663614][ T5286] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 539.679425][ T5286] usb 4-1: USB disconnect, device number 86 [ 539.695734][ T5289] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 539.706110][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout [ 539.727000][ T5289] usb 3-1: config 1 has an invalid descriptor of length 89, skipping remainder of the config [ 539.738060][ T5289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.747330][ T5289] usb 3-1: too many endpoints for config 1 interface 0 altsetting 4: 64, using maximum allowed: 30 [ 539.760990][ T5289] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 539.774681][ T5235] Bluetooth: hci1: command 0x0c1a tx timeout [ 539.796702][ T5289] usb 3-1: config 1 interface 0 has no altsetting 1 [ 539.807161][ T5289] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.816720][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.824864][ T5289] usb 3-1: Product: syz [ 539.829130][ T5289] usb 3-1: Manufacturer: syz [ 539.833863][ T5289] usb 3-1: SerialNumber: syz [ 539.856830][ T5235] Bluetooth: hci4: command 0x0c1a tx timeout [ 539.862940][T11374] Bluetooth: hci2: command 0x0c1a tx timeout [ 539.936774][ T5235] Bluetooth: hci3: command 0x0c1a tx timeout [ 539.943006][ T5235] Bluetooth: hci5: command 0x0c1a tx timeout [ 540.053016][ T5289] usb 3-1: 0:2 : does not exist [ 540.069763][ T5289] usb 3-1: USB disconnect, device number 68 [ 540.116367][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.575030][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2051'. [ 540.921244][ T5289] usb 2-1: USB disconnect, device number 82 [ 541.094755][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2056'. [ 541.246043][ T5295] IPVS: starting estimator thread 0... [ 541.366673][T14448] IPVS: using max 17 ests per chain, 40800 per kthread [ 541.416623][ T5289] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 541.556728][ T5289] usb 2-1: device descriptor read/64, error -71 [ 541.765336][T14462] gretap0: entered promiscuous mode [ 541.793036][T14462] vlan0: entered promiscuous mode [ 541.799515][ T5289] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 541.841744][T14451] team0: entered promiscuous mode [ 541.857466][T11374] Bluetooth: hci1: command 0x0c1a tx timeout [ 541.868527][T14451] team_slave_0: entered promiscuous mode [ 541.892755][T14451] team_slave_1: entered promiscuous mode [ 541.915250][T14451] team0: entered allmulticast mode [ 541.928472][ T5235] Bluetooth: hci2: command 0x0c1a tx timeout [ 541.936760][T11374] Bluetooth: hci4: command 0x0c1a tx timeout [ 541.954628][T14451] team_slave_0: entered allmulticast mode [ 541.960448][ T5289] usb 2-1: device descriptor read/64, error -71 [ 542.005004][T14451] team_slave_1: entered allmulticast mode [ 542.016832][ T5235] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.023162][T11374] Bluetooth: hci5: command 0x0c1a tx timeout [ 542.028378][ T5286] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 542.066831][ T5289] usb usb2-port1: attempt power cycle [ 542.196601][ T5286] usb 3-1: Using ep0 maxpacket: 16 [ 542.242780][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.263506][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.273602][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.344767][ T5286] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 542.368282][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.385218][ T5286] usb 3-1: config 0 descriptor?? [ 542.403394][ T5286] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 542.416657][ T5289] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 542.426642][ T4668] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 542.448261][ T5289] usb 2-1: device descriptor read/8, error -71 [ 542.513157][ T4668] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 542.527439][ T4668] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 542.555160][ T5245] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 542.565289][ T4668] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 542.607568][ T4668] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 542.629905][ T4668] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 542.687112][ T5289] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 542.716645][ T5295] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 542.726533][ T5289] usb 2-1: device descriptor read/8, error -71 [ 542.789268][T14465] IPVS: length: 121 != 24 [ 542.846811][ T5289] usb usb2-port1: unable to enumerate USB device [ 542.853510][T14484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.870150][T14484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.879255][ T5312] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 542.898508][ T5295] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 542.907343][ T5295] usb 4-1: config 5 has no interface number 0 [ 542.913808][ T5295] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 542.926221][ T5295] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 542.938358][ T5295] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 542.948666][ T5295] usb 4-1: config 5 interface 123 has no altsetting 0 [ 542.957526][ T5295] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 542.976308][ T5295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.985301][ T5295] usb 4-1: Product: syz [ 542.989571][ T5295] usb 4-1: Manufacturer: syz [ 542.994194][ T5295] usb 4-1: SerialNumber: syz [ 543.048265][ T5312] usb 5-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 543.064397][ T5312] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 543.091340][ T5312] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.104329][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.107787][ T5286] usb 3-1: USB disconnect, device number 69 [ 543.125253][ T5312] usb 5-1: Product: syz [ 543.135982][ T5312] usb 5-1: Manufacturer: syz [ 543.142564][ T5312] usb 5-1: SerialNumber: syz [ 543.224913][T14488] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2071'. [ 543.254395][ T5295] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 543.276248][ T5295] usb 4-1: USB disconnect, device number 87 [ 543.639938][ T5312] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 543.658799][ T5312] cdc_ncm 5-1:1.0: bind() failure [ 543.687339][ T5312] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 543.706720][ T5312] cdc_ncm 5-1:1.1: bind() failure [ 543.726804][ T5312] usb 5-1: USB disconnect, device number 107 [ 543.927065][T11374] Bluetooth: hci1: command 0x0c1a tx timeout [ 544.013116][T11374] Bluetooth: hci4: command 0x0c1a tx timeout [ 544.020357][ T5235] Bluetooth: hci2: command 0x0c1a tx timeout [ 544.085171][T14499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.097033][ T5235] Bluetooth: hci3: command 0x0c1a tx timeout [ 544.103163][T11374] Bluetooth: hci5: command 0x0c1a tx timeout [ 544.166661][ T5295] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 544.346588][ T5295] usb 3-1: Using ep0 maxpacket: 16 [ 544.362910][ T5295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.387508][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.413785][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.425302][ T5295] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.453737][ T5295] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 544.485501][ T5295] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 544.528768][ T5295] usb 3-1: Manufacturer: syz [ 544.547629][ T5295] usb 3-1: config 0 descriptor?? [ 544.578789][ T5295] usbhid 3-1:0.0: can't add hid device: -22 [ 544.595130][ T5295] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 544.787100][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 544.787122][ T29] audit: type=1326 audit(1727527424.066:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 544.818055][ T8] usb 3-1: USB disconnect, device number 70 [ 544.870738][ T29] audit: type=1326 audit(1727527424.066:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 544.943123][ T29] audit: type=1326 audit(1727527424.066:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 544.988924][ T29] audit: type=1326 audit(1727527424.066:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 545.067675][ T29] audit: type=1326 audit(1727527424.066:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 545.092454][ T29] audit: type=1326 audit(1727527424.066:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5202f7cadf code=0x7ffc0000 [ 545.116195][ T29] audit: type=1326 audit(1727527424.066:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 545.182586][ T29] audit: type=1326 audit(1727527424.066:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 545.234629][ T29] audit: type=1326 audit(1727527424.066:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 545.286756][ T29] audit: type=1326 audit(1727527424.066:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14490 comm="syz.2.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5202f7dff9 code=0x7ffc0000 [ 545.757885][ T5286] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 545.976618][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 545.990807][ T5286] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 546.000565][ T5286] usb 3-1: config 0 has no interface number 0 [ 546.035764][ T5286] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0310, bcdDevice=fd.14 [ 546.061140][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.176520][ T5286] usb 3-1: Product: syz [ 546.190441][ T5286] usb 3-1: Manufacturer: syz [ 546.225679][ T5286] usb 3-1: SerialNumber: syz [ 546.253128][ T5286] usb 3-1: config 0 descriptor?? [ 546.289322][ T5286] option 3-1:0.253: GSM modem (1-port) converter detected [ 546.491768][ T5286] usb 3-1: USB disconnect, device number 71 [ 546.500450][ T5286] option 3-1:0.253: device disconnected [ 546.649462][T14546] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 547.007273][ T5286] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 547.077693][ T5289] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 547.113660][T11414] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 547.136563][ T5286] usb 4-1: device descriptor read/64, error -71 [ 547.248665][ T5289] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 547.257229][ T5289] usb 2-1: config 0 has no interface number 0 [ 547.263482][ T5289] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 547.276421][ T5289] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 547.289856][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.301002][T11414] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 547.326721][T11414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.326896][ T5289] usb 2-1: Product: syz [ 547.339737][ T5289] usb 2-1: Manufacturer: syz [ 547.344392][ T5289] usb 2-1: SerialNumber: syz [ 547.355335][T11414] usb 5-1: Product: syz [ 547.362281][ T5289] usb 2-1: config 0 descriptor?? [ 547.376691][ T5286] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 547.404183][T11414] usb 5-1: Manufacturer: syz [ 547.422286][T11414] usb 5-1: SerialNumber: syz [ 547.448832][T11414] usb 5-1: config 0 descriptor?? [ 547.462101][T11414] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 547.501104][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.557656][ T5286] usb 4-1: device descriptor read/64, error -71 [ 547.593572][ T5289] usb 2-1: USB disconnect, device number 87 [ 547.697544][ T5286] usb usb4-port1: attempt power cycle [ 547.793256][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.914741][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 547.926753][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 547.951134][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 547.954379][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.977257][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 547.985381][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 547.993209][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.059571][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.076667][ T5286] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 548.110831][ T5286] usb 4-1: device descriptor read/8, error -71 [ 548.367677][ T5286] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 548.420393][ T5286] usb 4-1: device descriptor read/8, error -71 [ 548.428174][ T35] bridge_slave_1: left allmulticast mode [ 548.435384][ T35] bridge_slave_1: left promiscuous mode [ 548.480352][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.504429][ T35] bridge_slave_0: left allmulticast mode [ 548.521334][ T35] bridge_slave_0: left promiscuous mode [ 548.541440][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.588476][ T5286] usb usb4-port1: unable to enumerate USB device [ 549.515434][ T5312] usb 5-1: USB disconnect, device number 108 [ 549.570836][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.615802][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.637520][ T35] bond0 (unregistering): Released all slaves [ 549.683045][T14566] chnl_net:caif_netlink_parms(): no params data found [ 550.092947][T11374] Bluetooth: hci4: command tx timeout [ 550.108354][T14566] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.140770][T14566] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.173857][T14566] bridge_slave_0: entered allmulticast mode [ 550.202784][T14566] bridge_slave_0: entered promiscuous mode [ 550.242686][T14621] macvlan2: entered promiscuous mode [ 550.249633][ T5312] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 550.286236][T14621] team_slave_0: entered promiscuous mode [ 550.292629][T14621] team_slave_1: entered promiscuous mode [ 550.323980][T14621] team0: entered promiscuous mode [ 550.334932][T14621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 550.370874][T14621] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 550.400860][ T5312] usb 4-1: device descriptor read/64, error -71 [ 550.634201][T14636] fuse: Bad value for 'fd' [ 550.645721][ T29] audit: type=1326 audit(1727527429.916:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14635 comm="syz.0.2109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c3897dff9 code=0x0 [ 550.726762][ T5312] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 550.753898][T14566] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.771392][T14566] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.779340][T14566] bridge_slave_1: entered allmulticast mode [ 550.800428][T14566] bridge_slave_1: entered promiscuous mode [ 550.867321][ T5312] usb 4-1: device descriptor read/64, error -71 [ 550.873630][T14566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.890746][ T35] hsr_slave_0: left promiscuous mode [ 550.902941][ T35] hsr_slave_1: left promiscuous mode [ 550.919952][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.930356][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.939702][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.947756][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.973459][ T35] veth1_macvtap: left promiscuous mode [ 550.981109][ T35] veth0_macvtap: left promiscuous mode [ 550.988761][ T35] veth1_vlan: left promiscuous mode [ 550.994570][ T35] veth0_vlan: left promiscuous mode [ 551.000410][ T5295] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 551.009736][ T5312] usb usb4-port1: attempt power cycle [ 551.180423][ T5295] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 551.197413][ T5295] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 551.208273][ T5295] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 551.217379][ T5295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 551.230417][ T5295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 551.243119][ T5295] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 551.255206][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 551.265473][ T5295] usb 5-1: Product: syz [ 551.269882][ T5295] usb 5-1: Manufacturer: syz [ 551.296065][ T5295] cdc_wdm 5-1:1.0: skipping garbage [ 551.314162][ T5295] cdc_wdm 5-1:1.0: skipping garbage [ 551.330327][ T5295] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 551.342791][ T5295] cdc_wdm 5-1:1.0: Unknown control protocol [ 551.366845][ T5312] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 551.417274][ T5312] usb 4-1: device descriptor read/8, error -71 [ 551.525748][T14650] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 551.676824][ T5312] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 551.687691][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.716980][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.724948][ T5312] usb 4-1: device descriptor read/8, error -71 [ 551.814126][ T35] team0 (unregistering): Port device team_slave_1 removed [ 551.842382][ T5312] usb usb4-port1: unable to enumerate USB device [ 551.904515][ T35] team0 (unregistering): Port device team_slave_0 removed [ 552.168167][T11374] Bluetooth: hci4: command tx timeout [ 552.623901][T14657] atomic_op ffff88807cf64998 conn xmit_atomic 0000000000000000 [ 552.971961][T14661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.006749][T14661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.075162][T14566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.229982][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.307098][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.363405][T14566] team0: Port device team_slave_0 added [ 553.387403][T14566] team0: Port device team_slave_1 added [ 553.426690][ T5312] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 553.481670][T14566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.498514][T14566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.544774][T14566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.566927][T14566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.573968][T14566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.626535][T14566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.626646][ T5312] usb 2-1: Using ep0 maxpacket: 8 [ 553.652248][ T5312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.663257][ T5312] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 553.690140][ T5312] usb 2-1: config 1 has no interface number 1 [ 553.711700][ T5312] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 553.769432][ T5312] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.791461][ T5312] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.802392][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.810903][ T5312] usb 2-1: Product: syz [ 553.815499][ T5312] usb 2-1: Manufacturer: syz [ 553.835745][ T5312] usb 2-1: SerialNumber: syz [ 553.975715][T14566] hsr_slave_0: entered promiscuous mode [ 554.049900][ T8] usb 5-1: USB disconnect, device number 109 [ 554.066045][ T5312] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 554.081361][ T5312] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 554.093047][T14566] hsr_slave_1: entered promiscuous mode [ 554.095454][ T5312] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 554.120321][T14566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.142258][T14566] Cannot create hsr debugfs directory [ 554.183163][ T5312] usb 2-1: USB disconnect, device number 88 [ 554.253628][T11374] Bluetooth: hci4: command tx timeout [ 554.284544][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.602733][T14693] netlink: 'syz.4.2128': attribute type 2 has an invalid length. [ 554.780150][T14690] kernel profiling enabled (shift: 17) [ 554.886627][ T5312] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 555.056773][ T5312] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 555.079213][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.110999][ T5312] usb 5-1: config 0 descriptor?? [ 555.138777][ T5312] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 555.331931][T14717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2133'. [ 555.357191][ T8] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 555.477222][T14726] netlink: 'syz.0.2135': attribute type 3 has an invalid length. [ 555.509542][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 555.527602][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 555.540656][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.562293][ T8] usb 4-1: config 0 has no interfaces? [ 555.582905][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 555.601295][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.626556][ T8] usb 4-1: Product: syz [ 555.634432][ T8] usb 4-1: Manufacturer: syz [ 555.645212][ T8] usb 4-1: SerialNumber: syz [ 555.670119][ T8] usb 4-1: config 0 descriptor?? [ 555.705709][T14566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 555.717869][T14566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 555.728325][T14566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 555.739050][T14566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 555.929696][T14566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.944605][T14718] fuse: Bad value for 'fd' [ 555.952461][ T5312] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 555.970645][ T5312] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 555.999032][T14566] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.015881][ T5312] usb 5-1: USB disconnect, device number 110 [ 556.031370][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.038636][ T5539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.072920][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.080119][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.300642][T14566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.336107][T11374] Bluetooth: hci4: command tx timeout [ 556.453819][T14566] veth0_vlan: entered promiscuous mode [ 556.531730][T14566] veth1_vlan: entered promiscuous mode [ 556.565412][T14566] veth0_macvtap: entered promiscuous mode [ 556.575247][T14566] veth1_macvtap: entered promiscuous mode [ 556.593119][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.604161][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.614496][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.625111][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.635065][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.645605][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.655892][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.666624][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.679135][T14566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.689028][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.700089][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.710317][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.720835][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.730745][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.742115][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.752002][T14566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.762500][T14566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.773997][T14566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.785043][T14566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.793968][T14566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.803473][T14566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.816564][T14566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.120626][T14764] pim6reg1: entered promiscuous mode [ 557.129856][T14764] pim6reg1: entered allmulticast mode [ 557.171824][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.199763][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.428746][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.459411][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.501833][T14771] pim6reg1: entered promiscuous mode [ 557.527519][T14771] pim6reg1: entered allmulticast mode [ 558.275944][ T5295] usb 4-1: USB disconnect, device number 96 [ 560.077408][T14871] veth0_vlan: entered allmulticast mode [ 560.164371][T14876] : renamed from vlan1 [ 560.790561][T14903] pim6reg1: entered promiscuous mode [ 560.838890][T14903] pim6reg1: entered allmulticast mode [ 561.524694][T14922] syzkaller0: entered promiscuous mode [ 561.566913][T14922] syzkaller0: entered allmulticast mode [ 563.064512][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.071007][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.791096][T14977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.809556][T14977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.426590][ T8] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 565.577053][ T8] usb 3-1: device descriptor read/64, error -71 [ 565.816620][ T8] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 565.916670][ T5237] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 565.956663][ T8] usb 3-1: device descriptor read/64, error -71 [ 565.996581][ T5294] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 566.066897][ T8] usb usb3-port1: attempt power cycle [ 566.074155][ T5237] usb 4-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 566.094029][ T5237] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 566.116572][ T5237] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.136497][ T5237] usb 4-1: config 1 interface 0 has no altsetting 0 [ 566.148806][ T5237] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.158877][ T5237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.176897][ T5237] usb 4-1: Product: syz [ 566.180665][ T5294] usb 5-1: Using ep0 maxpacket: 8 [ 566.181112][ T5237] usb 4-1: Manufacturer: syz [ 566.190878][ T5237] usb 4-1: SerialNumber: syz [ 566.199043][T15002] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 566.207816][ T5294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.238884][ T5294] usb 5-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 566.255321][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.280076][ T5294] usb 5-1: config 0 descriptor?? [ 566.294946][ T5294] r8712u: register rtl8712_netdev_ops to netdev_ops [ 566.313811][ T5294] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 566.437685][ T8] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 566.451200][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'. [ 566.477397][ T8] usb 3-1: device descriptor read/8, error -71 [ 566.496319][ T5294] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 566.521871][ T5294] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 566.550006][ T5294] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 566.567471][T15002] batadv0: entered promiscuous mode [ 566.594727][ T5294] usb 5-1: USB disconnect, device number 111 [ 566.608487][T15002] batadv_slave_0: entered promiscuous mode [ 566.614732][T15002] batadv_slave_0: left promiscuous mode [ 566.635193][T15002] batadv0: left promiscuous mode [ 566.727545][ T8] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 566.757529][ T8] usb 3-1: device descriptor read/8, error -71 [ 566.759051][T15026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.814051][T15026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.868846][ T5237] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 566.883807][ T8] usb usb3-port1: unable to enumerate USB device [ 566.906412][ T5237] usb 4-1: USB disconnect, device number 97 [ 567.326990][ T8] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 567.498555][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 567.536601][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 567.579613][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 567.607243][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 567.652724][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 567.673807][ T8] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 567.711589][ T8] usb 5-1: Manufacturer: syz [ 567.728860][ T8] usb 5-1: config 0 descriptor?? [ 568.018376][T15048] fuse: Bad value for 'fd' [ 568.724243][T15045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.736795][T15045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 568.756892][T15045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 568.762957][T15045] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 568.772422][T15045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.789889][T15045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 568.807134][T15045] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 568.818968][T15045] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 568.917966][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 568.924787][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 568.964464][ T8] usb 5-1: USB disconnect, device number 112 [ 569.086916][ T5237] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 569.242570][T15066] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 569.252835][T15073] trusted_key: encrypted_key: master key parameter 'trusted' is invalid [ 569.266632][ T5237] usb 3-1: Using ep0 maxpacket: 8 [ 569.274101][ T5237] usb 3-1: config 253 has an invalid interface number: 3 but max is 0 [ 569.285529][ T5237] usb 3-1: config 253 has no interface number 0 [ 569.292671][ T5237] usb 3-1: config 253 interface 3 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 569.305779][ T5237] usb 3-1: config 253 interface 3 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 569.318276][ T5237] usb 3-1: config 253 interface 3 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 569.337909][ T5237] usb 3-1: config 253 interface 3 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 569.351209][ T5237] usb 3-1: config 253 interface 3 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 569.389314][ T5237] usb 3-1: config 253 interface 3 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 569.419716][ T5237] usb 3-1: config 253 interface 3 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 569.443117][ T5237] usb 3-1: config 253 interface 3 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.490606][ T5237] usb 3-1: config 253 interface 3 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 569.516808][ T5237] usb 3-1: config 253 interface 3 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 569.542724][ T5237] usb 3-1: New USB device found, idVendor=0499, idProduct=103d, bcdDevice=89.74 [ 569.559638][ T5237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.618703][ T5237] usb 3-1: Product: syz [ 569.643427][ T5237] usb 3-1: Manufacturer: syz [ 569.665808][ T5237] usb 3-1: SerialNumber: syz [ 569.897204][ T5289] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 569.905072][T15050] netlink: 'syz.2.2241': attribute type 4 has an invalid length. [ 569.964235][T15050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.989936][ T5237] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.006871][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout [ 570.056784][ T5289] usb 5-1: Using ep0 maxpacket: 16 [ 570.065354][ T5237] snd-usb-audio 3-1:253.3: probe with driver snd-usb-audio failed with error -2 [ 570.075301][ T5289] usb 5-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 570.088110][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.105092][ T5237] usb 3-1: USB disconnect, device number 76 [ 570.106598][ T5289] usb 5-1: Product: syz [ 570.142704][ T5289] usb 5-1: Manufacturer: syz [ 570.147530][ T5289] usb 5-1: SerialNumber: syz [ 570.179085][ T5289] usb 5-1: config 0 descriptor?? [ 570.195800][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:253.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.200317][ T5289] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 570.249452][T15085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.293355][T15085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.377108][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 570.402034][T15086] loop2: detected capacity change from 0 to 14 [ 570.409730][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 570.437571][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.446126][T15086] Dev loop2: unable to read RDB block 14 [ 570.457393][T15086] loop2: unable to read partition table [ 570.467611][T15086] loop2: partition table beyond EOD, truncated [ 570.484733][T15086] loop_reread_partitions: partition scan of loop2 (被) failed (rc=-5) [ 570.515229][ T5289] pwc: Failed to set LED on/off time (-71) [ 570.538041][ T5289] pwc: send_video_command error -71 [ 570.556544][ T5289] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 570.564353][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.623543][ T5289] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 570.684677][ T5289] usb 5-1: USB disconnect, device number 113 [ 570.696756][T10402] bridge_slave_1: left allmulticast mode [ 570.702462][T10402] bridge_slave_1: left promiscuous mode [ 570.741860][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.801269][T10402] bridge_slave_0: left allmulticast mode [ 570.807296][ T5235] Bluetooth: hci4: command 0x0c1a tx timeout [ 570.813403][ T5235] Bluetooth: hci3: command 0x0c1a tx timeout [ 570.820024][T11374] Bluetooth: hci5: command 0x0c1a tx timeout [ 570.820193][T11756] Bluetooth: hci2: command 0x0c1a tx timeout [ 570.826995][T10402] bridge_slave_0: left promiscuous mode [ 570.840652][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.892351][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.902099][ T5248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.914248][ T5248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.940692][ T5248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.950907][ T5248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 570.959016][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 571.267615][T15109] fuse: Unknown parameter '000000000000000000000000x0000000000000022' [ 571.349125][T15122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.379616][T15122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.171842][T10402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.216633][ T5289] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 572.216646][T10402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.235237][T10402] bond0 (unregistering): (slave team0): Releasing backup interface [ 572.262988][T10402] bond0 (unregistering): Released all slaves [ 572.408474][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 572.434417][ T5289] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 572.445334][ T5289] usb 3-1: can't read configurations, error -61 [ 572.632981][T15142] IPVS: Error connecting to the multicast addr [ 572.641194][ T5289] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 572.836560][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 572.848907][ T5289] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 572.895973][ T5289] usb 3-1: can't read configurations, error -61 [ 572.902684][T11756] Bluetooth: hci4: command 0x0c1a tx timeout [ 572.941381][ T5289] usb usb3-port1: attempt power cycle [ 572.943435][T10402] hsr_slave_0: left promiscuous mode [ 572.970509][T10402] hsr_slave_1: left promiscuous mode [ 573.033902][T10402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.046985][T11756] Bluetooth: hci1: command tx timeout [ 573.073846][T10402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.397790][ T5248] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.410005][ T5248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.420578][ T5248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.429039][ T5248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.436553][ T5289] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 573.436811][ T5248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 573.452067][ T5248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.467405][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 573.474463][ T5289] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 573.482338][ T5289] usb 3-1: can't read configurations, error -61 [ 573.637368][ T5289] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 573.643838][T15163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.674043][T15163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.687098][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 573.700433][ T5289] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 573.721635][ T5289] usb 3-1: can't read configurations, error -61 [ 573.734135][ T5289] usb usb3-port1: unable to enumerate USB device [ 573.841914][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.855138][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.200570][T10402] team0 (unregistering): Port device team_slave_1 removed [ 574.253853][T10402] team0 (unregistering): Port device team_slave_0 removed [ 574.966825][T11756] Bluetooth: hci4: command 0x0c1a tx timeout [ 575.106128][T15107] chnl_net:caif_netlink_parms(): no params data found [ 575.128696][T11756] Bluetooth: hci1: command tx timeout [ 575.346040][T15161] chnl_net:caif_netlink_parms(): no params data found [ 575.526676][T11756] Bluetooth: hci5: command tx timeout [ 575.672749][T15107] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.696585][T15107] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.704558][T15107] bridge_slave_0: entered allmulticast mode [ 575.712201][T15107] bridge_slave_0: entered promiscuous mode [ 575.763505][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.786971][T15107] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.794236][T15107] bridge_slave_1: entered allmulticast mode [ 575.861944][T15107] bridge_slave_1: entered promiscuous mode [ 576.038704][T15161] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.046408][T15161] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.054576][T15161] bridge_slave_0: entered allmulticast mode [ 576.082330][T15161] bridge_slave_0: entered promiscuous mode [ 576.130141][T15107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.156094][T15161] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.176930][T15161] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.184220][T15161] bridge_slave_1: entered allmulticast mode [ 576.198123][T15161] bridge_slave_1: entered promiscuous mode [ 576.273575][T10402] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.310133][T15107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.407829][T15107] team0: Port device team_slave_0 added [ 576.453408][T10402] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.502683][T15107] team0: Port device team_slave_1 added [ 576.514505][T15161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.567472][T10402] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.650245][T15161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.749303][T10402] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.822883][T15107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.846529][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.919189][T15107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.066908][T15161] team0: Port device team_slave_0 added [ 577.096747][T11414] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 577.098243][T15107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.139015][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.225011][T11756] Bluetooth: hci1: command tx timeout [ 577.232816][T15107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.267370][T11414] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 577.278128][T15235] kernel read not supported for file /#! [ 577.278128][T15235] #w۶m\3e (pid: 15235 comm: syz.0.2288) [ 577.305649][T15235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.316337][ T29] audit: type=1800 audit(1727527456.566:952): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2288" name=2321200AEB9523EA77DBB6D76DFC5CA7E83365A719F409 dev="mqueue" ino=78518 res=0 errno=0 [ 577.339831][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.350252][T15235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.354873][T11414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.369478][T15238] binder: BINDER_SET_CONTEXT_MGR already set [ 577.370591][T15235] binder: 15234:15235 ioctl c0306201 20000080 returned -14 [ 577.386400][T15238] binder: 15234:15238 ioctl 4018620d 20000140 returned -16 [ 577.389191][T11414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.411060][T11414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.424247][T11414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.436251][T15161] team0: Port device team_slave_1 added [ 577.454565][T11414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.476632][T11414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.497062][T11414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.506065][T11414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.518599][T11414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.537504][T11414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.555589][T11414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.576529][T11414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.582963][T15161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.597120][T11414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.606074][T11414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.621674][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.647713][T11756] Bluetooth: hci5: command tx timeout [ 577.679321][T15161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.690208][T11414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.707220][T11414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.732638][T11414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.762710][T15107] hsr_slave_0: entered promiscuous mode [ 577.778114][T15107] hsr_slave_1: entered promiscuous mode [ 577.803490][T15107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.813870][T15107] Cannot create hsr debugfs directory [ 577.853299][T11414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.868598][T15161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.888801][T11414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.899559][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.925817][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.936839][T11414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.957532][T11414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.964414][T15161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.987299][T11414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 578.003369][T11414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 578.025189][T11414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 578.044592][T11414] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 578.071194][T11414] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 578.088914][T11414] usb 3-1: Product: syz [ 578.114444][T11414] usb 3-1: Manufacturer: syz [ 578.134875][T11414] usb 3-1: SerialNumber: syz [ 578.161692][T11414] usb 3-1: config 0 descriptor?? [ 578.189631][T15161] hsr_slave_0: entered promiscuous mode [ 578.196353][T11414] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 578.225967][T15161] hsr_slave_1: entered promiscuous mode [ 578.244555][T15161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.255686][T15161] Cannot create hsr debugfs directory [ 578.371658][T10402] bridge_slave_1: left allmulticast mode [ 578.390995][ T5294] usb 3-1: USB disconnect, device number 81 [ 578.412850][ T5294] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 578.423260][T10402] bridge_slave_1: left promiscuous mode [ 578.448474][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.473089][T10402] bridge_slave_0: left allmulticast mode [ 578.492229][T10402] bridge_slave_0: left promiscuous mode [ 578.504063][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.933312][T15278] usb usb8: usbfs: process 15278 (syz.4.2298) did not claim interface 0 before use [ 578.951232][T15281] usb usb8: usbfs: process 15281 (syz.4.2298) did not claim interface 0 before use [ 579.156085][T10402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.180766][T10402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.190228][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2300'. [ 579.203790][T10402] bond0 (unregistering): Released all slaves [ 579.297882][T11756] Bluetooth: hci1: command tx timeout [ 579.411353][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 579.698472][T11756] Bluetooth: hci5: command tx timeout [ 580.069088][ T5248] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.080929][ T5248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.092221][ T5248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.118619][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.128784][ T5248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 580.136835][ T5248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.206806][T10402] hsr_slave_0: left promiscuous mode [ 580.229023][T10402] hsr_slave_1: left promiscuous mode [ 580.236067][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.265820][T10402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.288495][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.295946][T10402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.382088][T10402] veth1_macvtap: left promiscuous mode [ 580.399968][T10402] veth0_macvtap: left promiscuous mode [ 580.405818][T10402] veth1_vlan: left promiscuous mode [ 580.677694][T15328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.687961][T15328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.740688][T15328] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2310'. [ 580.751746][T15328] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 581.230975][T10402] team_slave_1 (unregistering): left promiscuous mode [ 581.238676][T10402] team_slave_1 (unregistering): left allmulticast mode [ 581.257334][T10402] team0 (unregistering): Port device team_slave_1 removed [ 581.312081][T10402] team_slave_0 (unregistering): left promiscuous mode [ 581.318969][T10402] team_slave_0 (unregistering): left allmulticast mode [ 581.328321][T10402] team0 (unregistering): Port device team_slave_0 removed [ 581.707020][T15335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.715781][T15335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.776611][ T5248] Bluetooth: hci5: command tx timeout [ 581.961114][T15317] bond0: entered promiscuous mode [ 581.966179][T15317] bond_slave_0: entered promiscuous mode [ 581.972694][T15317] bond_slave_1: entered promiscuous mode [ 582.258339][ T5248] Bluetooth: hci4: command tx timeout [ 582.463180][T15107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 582.491030][T15107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 582.536074][T15107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 582.571796][T15107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 582.581916][T15309] chnl_net:caif_netlink_parms(): no params data found [ 582.618469][T10402] IPVS: stop unused estimator thread 0... [ 582.749989][T15309] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.757346][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.764624][T15309] bridge_slave_0: entered allmulticast mode [ 582.772710][T15309] bridge_slave_0: entered promiscuous mode [ 582.776843][T11414] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 582.787523][T15309] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.795261][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.803341][T15309] bridge_slave_1: entered allmulticast mode [ 582.812828][T15309] bridge_slave_1: entered promiscuous mode [ 582.865066][T15309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.941608][T10402] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.947609][T11414] usb 5-1: Using ep0 maxpacket: 32 [ 582.969303][T11414] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.990683][T11414] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 583.000350][T11414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.008110][T15309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.016805][T11414] usb 5-1: Product: syz [ 583.027592][T11414] usb 5-1: Manufacturer: syz [ 583.039214][T11414] usb 5-1: SerialNumber: syz [ 583.062345][T11414] usb 5-1: config 0 descriptor?? [ 583.076352][T11414] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 583.090442][T10402] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.120766][T15309] team0: Port device team_slave_0 added [ 583.164759][T15309] team0: Port device team_slave_1 added [ 583.201530][T10402] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.216874][T15161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 583.229442][T15161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 583.255186][T15309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.262563][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.289704][T15309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.332422][T10402] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.346193][T15161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 583.359504][T15161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 583.373931][T15309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.382446][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.416070][T15309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.493504][T15309] hsr_slave_0: entered promiscuous mode [ 583.504884][T15309] hsr_slave_1: entered promiscuous mode [ 583.521675][T15309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.530902][T15309] Cannot create hsr debugfs directory [ 583.666914][T10402] bridge_slave_1: left allmulticast mode [ 583.672627][T10402] bridge_slave_1: left promiscuous mode [ 583.680869][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.692021][T10402] bridge_slave_0: left allmulticast mode [ 583.698354][T10402] bridge_slave_0: left promiscuous mode [ 583.704104][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.204043][T10402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.216213][T10402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.230342][T10402] bond0 (unregistering): Released all slaves [ 584.255789][T15107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.327740][ T5248] Bluetooth: hci4: command tx timeout [ 584.466882][T15107] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.604156][ T5286] usb 1-1: USB disconnect, device number 83 [ 584.629042][T15358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2315'. [ 584.800084][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.807292][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.889318][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.896569][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.988909][T10402] hsr_slave_0: left promiscuous mode [ 585.014819][T10402] hsr_slave_1: left promiscuous mode [ 585.037711][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.045241][T10402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.074538][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.082821][T10402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.168772][T10402] veth1_macvtap: left promiscuous mode [ 585.182084][T10402] veth0_macvtap: left promiscuous mode [ 585.193858][T11414] gspca_sunplus: reg_w_1 err -110 [ 585.201444][T11414] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 585.209930][T10402] veth1_vlan: left promiscuous mode [ 585.223738][T10402] veth0_vlan: left promiscuous mode [ 585.685676][T11756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.698327][T11756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.708392][T11756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.717862][T11756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.727479][T11756] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 585.736199][T11756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.992228][ T5295] usb 5-1: USB disconnect, device number 114 [ 586.097869][T15391] usb usb8: usbfs: process 15391 (syz.4.2319) did not claim interface 0 before use [ 586.123129][T15391] FAULT_INJECTION: forcing a failure. [ 586.123129][T15391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.156550][T15391] CPU: 0 UID: 0 PID: 15391 Comm: syz.4.2319 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 586.167035][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 586.177131][T15391] Call Trace: [ 586.180446][T15391] [ 586.183415][T15391] dump_stack_lvl+0x241/0x360 [ 586.188153][T15391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.193410][T15391] ? __pfx__printk+0x10/0x10 [ 586.198060][T15391] ? snprintf+0xda/0x120 [ 586.202356][T15391] should_fail_ex+0x3b0/0x4e0 [ 586.207092][T15391] _copy_to_user+0x2f/0xb0 [ 586.211553][T15391] simple_read_from_buffer+0xca/0x150 [ 586.216975][T15391] proc_fail_nth_read+0x1e9/0x250 [ 586.222051][T15391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.227623][T15391] ? rw_verify_area+0x55e/0x6f0 [ 586.232494][T15391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.238092][T15391] vfs_read+0x201/0xbc0 [ 586.242264][T15391] ? __pfx_lock_release+0x10/0x10 [ 586.247302][T15391] ? __pfx_vfs_read+0x10/0x10 [ 586.251990][T15391] ? __fget_files+0x3f3/0x470 [ 586.256679][T15391] ? fdget_pos+0x24e/0x320 [ 586.261102][T15391] ksys_read+0x183/0x2b0 [ 586.265362][T15391] ? __pfx_ksys_read+0x10/0x10 [ 586.270165][T15391] ? do_syscall_64+0x100/0x230 [ 586.274954][T15391] ? do_syscall_64+0xb6/0x230 [ 586.279648][T15391] do_syscall_64+0xf3/0x230 [ 586.284161][T15391] ? clear_bhb_loop+0x35/0x90 [ 586.288841][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.294742][T15391] RIP: 0033:0x7fa78cd7ca3c [ 586.299163][T15391] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 586.318776][T15391] RSP: 002b:00007fa78dbaa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.327200][T15391] RAX: ffffffffffffffda RBX: 00007fa78cf35f80 RCX: 00007fa78cd7ca3c [ 586.335179][T15391] RDX: 000000000000000f RSI: 00007fa78dbaa0a0 RDI: 0000000000000004 [ 586.343172][T15391] RBP: 00007fa78dbaa090 R08: 0000000000000000 R09: 0000000000000000 [ 586.351183][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.359347][T15391] R13: 0000000000000000 R14: 00007fa78cf35f80 R15: 00007fa78d05fa28 [ 586.367347][T15391] [ 586.416601][ T5248] Bluetooth: hci4: command tx timeout [ 586.743064][T10402] team0 (unregistering): Port device team_slave_1 removed [ 586.845349][T10402] team0 (unregistering): Port device team_slave_0 removed [ 587.818038][T15161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.857657][ T5248] Bluetooth: hci2: command tx timeout [ 587.899489][T15107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 587.909951][T15107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.028366][T15161] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.073593][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.080790][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.148064][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.155326][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.227818][T15309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 588.272316][T15107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.285520][T15309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 588.310300][T15309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 588.410258][T15309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 588.488006][ T5248] Bluetooth: hci4: command tx timeout [ 588.549855][T15384] chnl_net:caif_netlink_parms(): no params data found [ 588.624034][T15107] veth0_vlan: entered promiscuous mode [ 588.661503][T15107] veth1_vlan: entered promiscuous mode [ 588.726192][T15161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.864497][T10402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.970780][T10402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.994899][T15384] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.003818][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.017496][T15384] bridge_slave_0: entered allmulticast mode [ 589.035501][T15384] bridge_slave_0: entered promiscuous mode [ 589.116075][T10402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.130788][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.138429][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.145831][T15384] bridge_slave_1: entered allmulticast mode [ 589.155071][T15384] bridge_slave_1: entered promiscuous mode [ 589.184698][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 589.200164][T15485] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.249275][T10402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.301087][T15384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.320942][T15107] veth0_macvtap: entered promiscuous mode [ 589.333343][T15107] veth1_macvtap: entered promiscuous mode [ 589.350628][T15384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.414199][T15384] team0: Port device team_slave_0 added [ 589.430819][T15309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.462359][T15384] team0: Port device team_slave_1 added [ 589.538644][T15384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.556059][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.585137][T15384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.622041][T15309] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.671490][T15384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.687518][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.724663][T15384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.781091][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.803243][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.813846][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.825081][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.835114][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.845738][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.859289][T15107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.893009][T15161] veth0_vlan: entered promiscuous mode [ 589.933316][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.936911][ T5248] Bluetooth: hci2: command tx timeout [ 589.940532][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.984287][T10402] bridge_slave_1: left allmulticast mode [ 589.990853][T10402] bridge_slave_1: left promiscuous mode [ 589.997279][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.008129][T10402] bridge_slave_0: left allmulticast mode [ 590.013793][T10402] bridge_slave_0: left promiscuous mode [ 590.021262][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.473768][T10402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.488167][T10402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.500632][T10402] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 590.510305][T10402] team0: left promiscuous mode [ 590.515469][T10402] team_slave_0: left promiscuous mode [ 590.521342][T10402] team_slave_1: left promiscuous mode [ 590.530992][T10402] bond0 (unregistering): Released all slaves [ 590.544515][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.551695][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.569788][T15384] hsr_slave_0: entered promiscuous mode [ 590.577416][T15384] hsr_slave_1: entered promiscuous mode [ 590.584671][T15384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.592493][T15384] Cannot create hsr debugfs directory [ 590.599247][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.617088][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.627283][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.637898][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.649127][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.660272][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.685556][T15107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.705001][T15161] veth1_vlan: entered promiscuous mode [ 590.792762][T15107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.804905][T15107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.814817][T15107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.827900][T15107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.918839][T15505] usb usb7: usbfs: process 15505 (syz.4.2330) did not claim interface 32 before use [ 590.939313][T15161] veth0_macvtap: entered promiscuous mode [ 591.115240][T10402] hsr_slave_0: left promiscuous mode [ 591.121820][T10402] hsr_slave_1: left promiscuous mode [ 591.128781][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.136748][T10402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.159926][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.176521][T10402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.207627][T10402] veth1_macvtap: left promiscuous mode [ 591.213648][T10402] veth0_macvtap: left promiscuous mode [ 591.222212][T10402] veth1_vlan: left promiscuous mode [ 591.231090][T10402] veth0_vlan: left promiscuous mode [ 591.422569][ T5237] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 591.598101][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.637183][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.683315][ T5237] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 591.713528][ T5237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.765565][ T5237] usb 5-1: config 0 descriptor?? [ 592.007000][ T5248] Bluetooth: hci2: command tx timeout [ 592.068836][T10402] team0 (unregistering): Port device team_slave_1 removed [ 592.221090][T10402] team0 (unregistering): Port device team_slave_0 removed [ 592.418050][ T5237] hid-led 0003:1D34:000A.0016: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 592.503040][ T5237] hid-led 0003:1D34:000A.0016: Dream Cheeky Webmail Notifier initialized [ 593.233259][T15161] veth1_macvtap: entered promiscuous mode [ 593.439355][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.467988][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.667085][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.684293][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.712740][T15309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.798686][T15161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.812478][T15161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.824678][T15161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.837453][T15161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.848308][T15161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.863788][T15161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.890846][T15161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.992903][T15161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.015285][T15161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.042369][T15161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.059176][T15161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.073779][T15161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.096761][ T5248] Bluetooth: hci2: command tx timeout [ 594.109411][T15161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.124092][T15161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.135609][T15161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.144821][T15161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.164023][T15161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.184738][T15161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.244066][T10402] IPVS: stop unused estimator thread 0... [ 594.491739][T15527] FAULT_INJECTION: forcing a failure. [ 594.491739][T15527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.550841][T11414] usb 5-1: USB disconnect, device number 115 [ 594.560624][T15527] CPU: 0 UID: 0 PID: 15527 Comm: syz.1.2332 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 594.571091][T15527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 594.581156][T15527] Call Trace: [ 594.581195][T15527] [ 594.581208][T15527] dump_stack_lvl+0x241/0x360 [ 594.584612][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.587430][T15527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.587476][T15527] ? __pfx__printk+0x10/0x10 [ 594.587539][T15527] ? __pfx_lock_release+0x10/0x10 [ 594.587582][T15527] should_fail_ex+0x3b0/0x4e0 [ 594.587621][T15527] _copy_from_user+0x2f/0xe0 [ 594.587652][T15527] do_ipv6_setsockopt+0x2f1/0x3630 [ 594.587699][T15527] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 594.587745][T15527] ? __mutex_trylock_common+0x183/0x2e0 [ 594.596491][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.600189][T15527] ? __pfx___might_resched+0x10/0x10 [ 594.653151][T15527] ? __pfx___mutex_trylock_common+0x10/0x10 [ 594.659079][T15527] ? rcu_is_watching+0x15/0xb0 [ 594.663858][T15527] ? trace_contention_end+0x3c/0x120 [ 594.669167][T15527] ? __mutex_lock+0x2ef/0xd70 [ 594.673869][T15527] ? __pfx___might_resched+0x10/0x10 [ 594.679171][T15527] ? smc_setsockopt+0x1c3/0xe50 [ 594.684036][T15527] ? __pfx___mutex_lock+0x10/0x10 [ 594.689083][T15527] ipv6_setsockopt+0x5d/0x170 [ 594.693781][T15527] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 594.699702][T15527] smc_setsockopt+0x275/0xe50 [ 594.704431][T15527] ? __pfx_smc_setsockopt+0x10/0x10 [ 594.709652][T15527] ? aa_sock_opt_perm+0x79/0x120 [ 594.714610][T15527] ? __pfx_smc_setsockopt+0x10/0x10 [ 594.719818][T15527] do_sock_setsockopt+0x3af/0x720 [ 594.724858][T15527] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 594.730413][T15527] ? __fget_files+0x29/0x470 [ 594.735017][T15527] ? __fget_files+0x3f3/0x470 [ 594.739791][T15527] ? __fget_files+0x29/0x470 [ 594.744399][T15527] __sys_setsockopt+0x1a2/0x250 [ 594.749262][T15527] __x64_sys_setsockopt+0xb5/0xd0 [ 594.754297][T15527] do_syscall_64+0xf3/0x230 [ 594.758912][T15527] ? clear_bhb_loop+0x35/0x90 [ 594.763602][T15527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.769525][T15527] RIP: 0033:0x7f42b277dff9 [ 594.773955][T15527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.793582][T15527] RSP: 002b:00007f42b354a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 594.802042][T15527] RAX: ffffffffffffffda RBX: 00007f42b2935f80 RCX: 00007f42b277dff9 [ 594.810028][T15527] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 594.818010][T15527] RBP: 00007f42b354a090 R08: 0000000000000060 R09: 0000000000000000 [ 594.825989][T15527] R10: 0000000020000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 594.833992][T15527] R13: 0000000000000000 R14: 00007f42b2935f80 R15: 00007f42b2a5fa28 [ 594.841988][T15527] [ 594.889707][T15309] veth0_vlan: entered promiscuous mode [ 594.964263][T15309] veth1_vlan: entered promiscuous mode [ 595.050783][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.061794][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.114112][T15309] veth0_macvtap: entered promiscuous mode [ 595.140146][T15384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 595.174024][T15384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 595.202279][T15309] veth1_macvtap: entered promiscuous mode [ 595.252198][T15384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 595.353911][T15384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 595.373742][T15548] netlink: 'syz.3.2272': attribute type 4 has an invalid length. [ 595.424891][T15309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.444163][T15309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.459409][T15309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.477395][T15309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.493887][T15309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.506014][T15309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.526264][T15309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.546850][T15309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.565273][T15309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.576834][ T5295] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 595.584683][T15548] netlink: 'syz.3.2272': attribute type 4 has an invalid length. [ 595.620850][T15309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.649366][T15309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.664167][T15309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.676998][T15309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.688180][T15309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.699021][T15309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.709386][T15309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.720586][T15309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.733751][T15309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.748104][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.764196][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.775986][ T5295] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 595.786817][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.803902][T15309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.815036][ T5295] usb 5-1: config 0 descriptor?? [ 595.827066][T15309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.840344][T15309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.861573][T15309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.864806][ T29] audit: type=1326 audit(1727527475.136:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 595.897888][ T25] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 595.901419][ T29] audit: type=1326 audit(1727527475.176:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 595.976682][ T29] audit: type=1326 audit(1727527475.176:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 596.002985][ T29] audit: type=1326 audit(1727527475.176:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 596.042280][ T29] audit: type=1326 audit(1727527475.176:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 596.078383][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 596.100309][ T29] audit: type=1326 audit(1727527475.176:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 596.124299][T15384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.150733][ T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 528 [ 596.166701][ T8] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 596.174723][ T29] audit: type=1326 audit(1727527475.176:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 596.193938][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.209738][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.224200][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.236573][ T25] usb 4-1: Product: ᐊ [ 596.236916][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.241003][ T25] usb 4-1: Manufacturer: 裨䊰鞺鷳鿞鱀䛶钯ᘱ⸩㶞踓淘⛉ឥ課탰䆄㲓ꎡ易콉畘鱦୑⒳餢蹸䑉傕驝ỷ弊蹬埯紋㐽耰陕᱅饯켜鲨槎瓒⻎븚敏綫㿖얢鑈㚲㯬儺ꏟ㾵⇢嫩玬䑔ἷ䱆霗쉻﫜ℏ낛杲 [ 596.277060][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.294593][ T29] audit: type=1326 audit(1727527475.176:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 596.301517][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.342629][T15545] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2335'. [ 596.342844][T15384] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.352064][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 596.360306][ T29] audit: type=1326 audit(1727527475.176:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 596.381339][ T8] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 596.388215][ T25] usb 4-1: SerialNumber: ᙱ寉ࢸ裾塘颃໅﵉哠頯뛜嫓꼡戚ᇮ瞠ꣻ竭䪋咞婜䁣㌮ᅄ﨡ﻭ칳鈑勯跃줦䋦س요궦蒫絋ﰌ䛑顳符陘ډ쨗歮ᐓ赝㤨쯭싮瑩싴뺔幓嗱鮷炄鋴쮬栳艫猉⑶脈ﴈ퇵⿠ꄔ䂰﷙鉓挎칷䦮댮ᰊ [ 596.404610][ T8] usb 2-1: config 0 has no interface number 0 [ 596.422318][ T29] audit: type=1326 audit(1727527475.176:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15560 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b277dff9 code=0x7ffc0000 [ 596.469572][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 596.472356][ T5295] usbhid 5-1:0.0: can't add hid device: -71 [ 596.496170][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.501069][ T5295] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 596.503329][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.523086][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.531230][ T8] usb 2-1: Product: syz [ 596.539717][ T5295] usb 5-1: USB disconnect, device number 116 [ 596.543504][ T8] usb 2-1: Manufacturer: syz [ 596.575800][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.583012][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.593512][ T8] usb 2-1: SerialNumber: syz [ 596.610230][ T8] usb 2-1: config 0 descriptor?? [ 596.620742][ T8] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 596.624102][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.629156][ T8] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 596.662098][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.694126][ T25] cdc_ncm 4-1:1.0: bind() failure [ 596.710503][ T25] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 596.728931][ T25] cdc_ncm 4-1:1.1: bind() failure [ 596.747628][ T25] usb 4-1: USB disconnect, device number 98 [ 596.774233][T15384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.819174][ T8] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 596.851472][ T8] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 596.888548][ T8] usb 2-1: USB disconnect, device number 89 [ 596.911651][T15384] veth0_vlan: entered promiscuous mode [ 596.947995][T15384] veth1_vlan: entered promiscuous mode [ 597.020336][T15384] veth0_macvtap: entered promiscuous mode [ 597.063795][T15384] veth1_macvtap: entered promiscuous mode [ 597.107934][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.119321][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.146518][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.163017][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.173687][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.180707][T15575] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 597.186241][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.204938][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.235634][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.289551][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.328954][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.374538][T15384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.415203][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.443671][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.459798][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.479913][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.499482][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.514969][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.527419][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.544206][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.554166][T15384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.565763][T15384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.577396][T15384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.630817][T15384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.642337][ T5237] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 597.642714][T15384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.697402][T15384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.715325][T15384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.798548][ T5237] usb 4-1: not running at top speed; connect to a high speed hub [ 597.834952][ T5237] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 597.858836][ T5237] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.888751][ T5237] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.912002][ T5237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.917615][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.939131][ T5237] usb 4-1: Product: Ⱛ [ 597.943341][ T5237] usb 4-1: Manufacturer: ࠓ [ 597.951955][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.955069][ T5237] usb 4-1: SerialNumber: 雈⊴㻢⨋楶Ზ峝햲賲껩亀㒗娷筌쬍殄ꩍ쌧鍛覇䘽סㄷꯜ홞㸑뼂폇晄冟㯤﹑떞ᰔ穔旖븁ꛑ렀祼뜟꓀ⱶ◴⻢䭐픫ၡ酻㞑넓ះ청艸菻눺낒䫦䗌屓ꀘ駲槐쁆ᄳ▅밚볝⃖큽뽺䵮獰᭿똪띌즄琢粚◠飪舅鑹㮒鼑⇷垺졨呛藶蝘힥둌揔鹈ᶩ [ 597.960426][T15594] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 598.047449][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.056278][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.147484][ T5288] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 598.177521][T15607] netlink: 'syz.0.2318': attribute type 10 has an invalid length. [ 598.187009][T15607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2318'. [ 598.199805][T15607] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 598.292742][ T5237] usb 4-1: 0:2 : does not exist [ 598.309460][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.338680][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.351067][ T5237] usb 4-1: USB disconnect, device number 99 [ 598.374398][ T5288] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 598.407766][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.427609][ T5245] udevd[5245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.444627][ T5288] usb 3-1: config 0 descriptor?? [ 598.477330][T15621] FAULT_INJECTION: forcing a failure. [ 598.477330][T15621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.516589][T15621] CPU: 0 UID: 0 PID: 15621 Comm: syz.1.2352 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 598.527061][T15621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 598.537121][T15621] Call Trace: [ 598.540419][T15621] [ 598.543346][T15621] dump_stack_lvl+0x241/0x360 [ 598.548074][T15621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.553359][T15621] ? __pfx__printk+0x10/0x10 [ 598.557176][T15623] loop8: detected capacity change from 0 to 7 [ 598.557982][T15621] ? __pfx_lock_release+0x10/0x10 [ 598.564969][T15623] Dev loop8: unable to read RDB block 7 [ 598.569100][T15621] ? __lock_acquire+0x1384/0x2050 [ 598.569149][T15621] should_fail_ex+0x3b0/0x4e0 [ 598.569192][T15621] _copy_from_user+0x2f/0xe0 [ 598.569225][T15621] kstrtouint_from_user+0xc6/0x190 [ 598.569253][T15621] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 598.569280][T15621] ? __pfx_lock_acquire+0x10/0x10 [ 598.569325][T15621] proc_fail_nth_write+0xaa/0x2d0 [ 598.569361][T15621] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 598.569392][T15621] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 598.569431][T15621] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 598.569468][T15621] vfs_write+0x29c/0xc90 [ 598.569511][T15621] ? __pfx_vfs_write+0x10/0x10 [ 598.569552][T15621] ? __fget_files+0x3f3/0x470 [ 598.569587][T15621] ? fdget_pos+0x24e/0x320 [ 598.569615][T15621] ksys_write+0x183/0x2b0 [ 598.569653][T15621] ? __pfx_ksys_write+0x10/0x10 [ 598.569688][T15621] ? do_syscall_64+0x100/0x230 [ 598.569728][T15621] ? do_syscall_64+0xb6/0x230 [ 598.569766][T15621] do_syscall_64+0xf3/0x230 [ 598.569800][T15621] ? clear_bhb_loop+0x35/0x90 [ 598.569826][T15621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.683033][T15621] RIP: 0033:0x7f42b277cadf [ 598.687479][T15621] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 598.707103][T15621] RSP: 002b:00007f42b354a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 598.715580][T15621] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f42b277cadf [ 598.723596][T15621] RDX: 0000000000000001 RSI: 00007f42b354a0a0 RDI: 0000000000000004 [ 598.731596][T15621] RBP: 00007f42b354a090 R08: 0000000000000000 R09: 0000000000000000 [ 598.739670][T15621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 598.747663][T15621] R13: 0000000000000000 R14: 00007f42b2935f80 R15: 00007f42b2a5fa28 [ 598.755670][T15621] [ 598.766594][T15623] loop8: unable to read partition table [ 598.784009][T15623] loop8: partition table beyond EOD, truncated [ 598.796658][T15623] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 598.796658][T15623] ) failed (rc=-5) [ 598.979100][ T5288] cypress 0003:04B4:ED81.0017: item fetching failed at offset 5/7 [ 598.988483][ T5288] cypress 0003:04B4:ED81.0017: parse failed [ 598.995405][ T5288] cypress 0003:04B4:ED81.0017: probe with driver cypress failed with error -22 [ 599.084922][T15634] input: syz1 as /devices/virtual/input/input44 [ 599.096584][ T5237] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 599.198597][ T5296] usb 3-1: USB disconnect, device number 82 [ 599.236897][ T5295] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 599.266752][ T5237] usb 4-1: Using ep0 maxpacket: 32 [ 599.287025][ T5237] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.299598][ T5237] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.311819][ T5237] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 599.325462][ T5237] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 599.334474][ T5237] usb 4-1: Product: syz [ 599.340933][ T5237] usb 4-1: Manufacturer: syz [ 599.362906][T15639] program syz.0.2359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.366124][ T5237] hub 4-1:4.0: USB hub found [ 599.408974][ T5295] usb 2-1: Using ep0 maxpacket: 16 [ 599.423466][ T5295] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.464613][ T5295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 599.512476][ T5295] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.594510][ T5295] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.608185][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.620990][ T5295] usb 2-1: Product: syz [ 599.625186][ T5295] usb 2-1: Manufacturer: syz [ 599.639288][ T5295] usb 2-1: SerialNumber: syz [ 599.665668][ T5295] usb 2-1: selecting invalid altsetting 1 [ 599.710019][ T5237] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 599.801789][ T5237] usb 4-1: USB disconnect, device number 100 [ 599.814816][T15647] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2361'. [ 599.824596][T15647] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 599.885144][T15627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.976934][T15627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.107887][T15651] [ 600.110257][T15651] ===================================================== [ 600.117204][T15651] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 600.124673][T15651] 6.11.0-syzkaller-11728-gad46e8f95e93 #0 Not tainted [ 600.131448][T15651] ----------------------------------------------------- [ 600.138398][T15651] syz.4.2363/15651 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 600.146148][T15651] ffffffff8e60a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0x144/0x430 [ 600.154928][T15651] [ 600.154928][T15651] and this task is already holding: [ 600.162307][T15651] ffff888026da2420 (&f_owner->lock){....}-{2:2}, at: send_sigurg+0x58/0x430 [ 600.171069][T15651] which would create a new lock dependency: [ 600.176977][T15651] (&f_owner->lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 600.184612][T15651] [ 600.184612][T15651] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 600.194081][T15651] (&dev->event_lock#2){..-.}-{2:2} [ 600.194132][T15651] [ 600.194132][T15651] ... which became SOFTIRQ-irq-safe at: [ 600.207059][T15651] lock_acquire+0x1ed/0x550 [ 600.211694][T15651] _raw_spin_lock_irqsave+0xd5/0x120 [ 600.217118][T15651] input_inject_event+0xc5/0x340 [ 600.222185][T15651] kd_sound_helper+0x101/0x210 [ 600.227067][T15651] input_handler_for_each_handle+0x103/0x1d0 [ 600.233183][T15651] call_timer_fn+0x18e/0x650 [ 600.237908][T15651] __run_timer_base+0x66a/0x8e0 [ 600.242881][T15651] run_timer_softirq+0xb7/0x170 [ 600.247859][T15651] handle_softirqs+0x2c5/0x980 [ 600.252745][T15651] __irq_exit_rcu+0xf4/0x1c0 [ 600.257460][T15651] irq_exit_rcu+0x9/0x30 [ 600.261824][T15651] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 600.267620][T15651] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 600.273811][T15651] __kasan_init_slab_obj+0xd/0x20 [ 600.278937][T15651] setup_object+0x18/0x140 [ 600.283457][T15651] allocate_slab+0x16f/0x2f0 [ 600.288164][T15651] ___slab_alloc+0xcd1/0x14b0 [ 600.292960][T15651] __slab_alloc+0x58/0xa0 [ 600.297417][T15651] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 600.303244][T15651] __kernfs_new_node+0xd8/0x870 [ 600.308215][T15651] kernfs_new_node+0x137/0x240 [ 600.313140][T15651] kernfs_create_link+0xa5/0x1f0 [ 600.318226][T15651] sysfs_do_create_link_sd+0x85/0x110 [ 600.323725][T15651] bus_add_device+0x28c/0x460 [ 600.328518][T15651] device_add+0x599/0xbf0 [ 600.333156][T15651] usb_set_configuration+0x1976/0x1fb0 [ 600.338729][T15651] usb_generic_driver_probe+0x88/0x140 [ 600.344328][T15651] usb_probe_device+0x1b8/0x380 [ 600.349302][T15651] really_probe+0x2b8/0xad0 [ 600.353913][T15651] __driver_probe_device+0x1a2/0x390 [ 600.359322][T15651] driver_probe_device+0x50/0x430 [ 600.364548][T15651] __device_attach_driver+0x2d6/0x530 [ 600.370035][T15651] bus_for_each_drv+0x24e/0x2e0 [ 600.374996][T15651] __device_attach+0x333/0x520 [ 600.379882][T15651] bus_probe_device+0x189/0x260 [ 600.384839][T15651] device_add+0x856/0xbf0 [ 600.389280][T15651] usb_new_device+0x104a/0x19a0 [ 600.394252][T15651] hub_event+0x2d6d/0x5150 [ 600.398792][T15651] process_scheduled_works+0xa63/0x1850 [ 600.404499][T15651] worker_thread+0x870/0xd30 [ 600.409199][T15651] kthread+0x2f0/0x390 [ 600.413367][T15651] ret_from_fork+0x4b/0x80 [ 600.417898][T15651] ret_from_fork_asm+0x1a/0x30 [ 600.422770][T15651] [ 600.422770][T15651] to a SOFTIRQ-irq-unsafe lock: [ 600.429882][T15651] (tasklist_lock){.+.+}-{2:2} [ 600.429915][T15651] [ 600.429915][T15651] ... which became SOFTIRQ-irq-unsafe at: [ 600.442557][T15651] ... [ 600.442597][T15651] lock_acquire+0x1ed/0x550 [ 600.449784][T15651] _raw_read_lock+0x36/0x50 [ 600.454401][T15651] __do_wait+0x12d/0x850 [ 600.458749][T15651] do_wait+0x1e9/0x560 [ 600.463013][T15651] kernel_wait+0xe9/0x240 [ 600.467478][T15651] call_usermodehelper_exec_work+0xbd/0x230 [ 600.473573][T15651] process_scheduled_works+0xa63/0x1850 [ 600.479221][T15651] worker_thread+0x870/0xd30 [ 600.483934][T15651] kthread+0x2f0/0x390 [ 600.488203][T15651] ret_from_fork+0x4b/0x80 [ 600.492728][T15651] ret_from_fork_asm+0x1a/0x30 [ 600.497606][T15651] [ 600.497606][T15651] other info that might help us debug this: [ 600.497606][T15651] [ 600.507844][T15651] Chain exists of: [ 600.507844][T15651] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 600.507844][T15651] [ 600.520932][T15651] Possible interrupt unsafe locking scenario: [ 600.520932][T15651] [ 600.529261][T15651] CPU0 CPU1 [ 600.534644][T15651] ---- ---- [ 600.540020][T15651] lock(tasklist_lock); [ 600.544285][T15651] local_irq_disable(); [ 600.551059][T15651] lock(&dev->event_lock#2); [ 600.558282][T15651] lock(&f_owner->lock); [ 600.565166][T15651] [ 600.568646][T15651] lock(&dev->event_lock#2); [ 600.573543][T15651] [ 600.573543][T15651] *** DEADLOCK *** [ 600.573543][T15651] [ 600.581701][T15651] 2 locks held by syz.4.2363/15651: [ 600.586916][T15651] #0: ffff8880794a4ed8 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x22/0x50 [ 600.596208][T15651] #1: ffff888026da2420 (&f_owner->lock){....}-{2:2}, at: send_sigurg+0x58/0x430 [ 600.605397][T15651] [ 600.605397][T15651] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 600.615812][T15651] -> (&dev->event_lock#2){..-.}-{2:2} { [ 600.621670][T15651] IN-SOFTIRQ-W at: [ 600.625938][T15651] lock_acquire+0x1ed/0x550 [ 600.632742][T15651] _raw_spin_lock_irqsave+0xd5/0x120 [ 600.640235][T15651] input_inject_event+0xc5/0x340 [ 600.647368][T15651] kd_sound_helper+0x101/0x210 [ 600.654326][T15651] input_handler_for_each_handle+0x103/0x1d0 [ 600.662519][T15651] call_timer_fn+0x18e/0x650 [ 600.669321][T15651] __run_timer_base+0x66a/0x8e0 [ 600.676379][T15651] run_timer_softirq+0xb7/0x170 [ 600.683529][T15651] handle_softirqs+0x2c5/0x980 [ 600.690487][T15651] __irq_exit_rcu+0xf4/0x1c0 [ 600.697286][T15651] irq_exit_rcu+0x9/0x30 [ 600.703739][T15651] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 600.711592][T15651] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 600.719783][T15651] __kasan_init_slab_obj+0xd/0x20 [ 600.726994][T15651] setup_object+0x18/0x140 [ 600.733611][T15651] allocate_slab+0x16f/0x2f0 [ 600.740403][T15651] ___slab_alloc+0xcd1/0x14b0 [ 600.747289][T15651] __slab_alloc+0x58/0xa0 [ 600.753815][T15651] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 600.761468][T15651] __kernfs_new_node+0xd8/0x870 [ 600.768531][T15651] kernfs_new_node+0x137/0x240 [ 600.775494][T15651] kernfs_create_link+0xa5/0x1f0 [ 600.782624][T15651] sysfs_do_create_link_sd+0x85/0x110 [ 600.790188][T15651] bus_add_device+0x28c/0x460 [ 600.797059][T15651] device_add+0x599/0xbf0 [ 600.803756][T15651] usb_set_configuration+0x1976/0x1fb0 [ 600.811416][T15651] usb_generic_driver_probe+0x88/0x140 [ 600.819146][T15651] usb_probe_device+0x1b8/0x380 [ 600.826210][T15651] really_probe+0x2b8/0xad0 [ 600.832922][T15651] __driver_probe_device+0x1a2/0x390 [ 600.840423][T15651] driver_probe_device+0x50/0x430 [ 600.847639][T15651] __device_attach_driver+0x2d6/0x530 [ 600.855199][T15651] bus_for_each_drv+0x24e/0x2e0 [ 600.862224][T15651] __device_attach+0x333/0x520 [ 600.869193][T15651] bus_probe_device+0x189/0x260 [ 600.876270][T15651] device_add+0x856/0xbf0 [ 600.882813][T15651] usb_new_device+0x104a/0x19a0 [ 600.889874][T15651] hub_event+0x2d6d/0x5150 [ 600.896678][T15651] process_scheduled_works+0xa63/0x1850 [ 600.904427][T15651] worker_thread+0x870/0xd30 [ 600.911202][T15651] kthread+0x2f0/0x390 [ 600.917470][T15651] ret_from_fork+0x4b/0x80 [ 600.924091][T15651] ret_from_fork_asm+0x1a/0x30 [ 600.931048][T15651] INITIAL USE at: [ 600.935229][T15651] lock_acquire+0x1ed/0x550 [ 600.941865][T15651] _raw_spin_lock_irqsave+0xd5/0x120 [ 600.949290][T15651] input_inject_event+0xc5/0x340 [ 600.956340][T15651] kbd_led_trigger_activate+0xb8/0x100 [ 600.963906][T15651] led_trigger_set+0x582/0x9c0 [ 600.970779][T15651] led_trigger_set_default+0x229/0x260 [ 600.978345][T15651] led_classdev_register_ext+0x6e6/0x8a0 [ 600.986070][T15651] input_leds_connect+0x489/0x630 [ 600.993235][T15651] input_register_device+0xd3b/0x1110 [ 601.000720][T15651] atkbd_connect+0x752/0xa00 [ 601.007418][T15651] serio_driver_probe+0x7f/0xa0 [ 601.014383][T15651] really_probe+0x2b8/0xad0 [ 601.020983][T15651] __driver_probe_device+0x1a2/0x390 [ 601.028377][T15651] driver_probe_device+0x50/0x430 [ 601.035499][T15651] __driver_attach+0x45f/0x710 [ 601.042364][T15651] bus_for_each_dev+0x239/0x2b0 [ 601.049323][T15651] serio_handle_event+0x1c7/0x920 [ 601.056458][T15651] process_scheduled_works+0xa63/0x1850 [ 601.064098][T15651] worker_thread+0x870/0xd30 [ 601.070789][T15651] kthread+0x2f0/0x390 [ 601.077003][T15651] ret_from_fork+0x4b/0x80 [ 601.083519][T15651] ret_from_fork_asm+0x1a/0x30 [ 601.090395][T15651] } [ 601.093169][T15651] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 601.102489][T15651] -> (&client->buffer_lock){....}-{2:2} { [ 601.108454][T15651] INITIAL USE at: [ 601.112532][T15651] lock_acquire+0x1ed/0x550 [ 601.118976][T15651] _raw_spin_lock+0x2e/0x40 [ 601.125428][T15651] evdev_pass_values+0xf2/0xad0 [ 601.132212][T15651] evdev_events+0x1c2/0x300 [ 601.138649][T15651] input_pass_values+0x286/0x860 [ 601.145530][T15651] input_event_dispose+0x3a4/0x600 [ 601.152585][T15651] input_handle_event+0xa71/0xbe0 [ 601.159537][T15651] input_inject_event+0x22f/0x340 [ 601.166494][T15651] kd_sound_helper+0x101/0x210 [ 601.173196][T15651] input_handler_for_each_handle+0x103/0x1d0 [ 601.181114][T15651] kd_mksound+0xa9/0x1a0 [ 601.187294][T15651] do_con_write+0x2cf6/0x4c30 [ 601.193896][T15651] con_write+0x26/0x40 [ 601.199891][T15651] n_tty_write+0xd62/0x1230 [ 601.206328][T15651] file_tty_write+0x546/0x9b0 [ 601.213011][T15651] vfs_write+0xa6d/0xc90 [ 601.219192][T15651] ksys_write+0x183/0x2b0 [ 601.225458][T15651] do_syscall_64+0xf3/0x230 [ 601.231905][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.239740][T15651] } [ 601.242416][T15651] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 601.250754][T15651] ... acquired at: [ 601.254739][T15651] lock_acquire+0x1ed/0x550 [ 601.259443][T15651] _raw_spin_lock+0x2e/0x40 [ 601.264134][T15651] evdev_pass_values+0xf2/0xad0 [ 601.269193][T15651] evdev_events+0x1c2/0x300 [ 601.273897][T15651] input_pass_values+0x286/0x860 [ 601.279034][T15651] input_event_dispose+0x3a4/0x600 [ 601.284338][T15651] input_handle_event+0xa71/0xbe0 [ 601.289540][T15651] input_inject_event+0x22f/0x340 [ 601.294788][T15651] kd_sound_helper+0x101/0x210 [ 601.299733][T15651] input_handler_for_each_handle+0x103/0x1d0 [ 601.305915][T15651] kd_mksound+0xa9/0x1a0 [ 601.310353][T15651] do_con_write+0x2cf6/0x4c30 [ 601.315204][T15651] con_write+0x26/0x40 [ 601.319472][T15651] n_tty_write+0xd62/0x1230 [ 601.324201][T15651] file_tty_write+0x546/0x9b0 [ 601.329072][T15651] vfs_write+0xa6d/0xc90 [ 601.333518][T15651] ksys_write+0x183/0x2b0 [ 601.338035][T15651] do_syscall_64+0xf3/0x230 [ 601.342742][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.348841][T15651] [ 601.351178][T15651] -> (&new->fa_lock){...-}-{2:2} { [ 601.356597][T15651] IN-SOFTIRQ-R at: [ 601.360686][T15651] lock_acquire+0x1ed/0x550 [ 601.367035][T15651] _raw_read_lock_irqsave+0xdd/0x130 [ 601.374171][T15651] kill_fasync+0x199/0x4f0 [ 601.380517][T15651] sock_wake_async+0x147/0x170 [ 601.387147][T15651] sock_def_readable+0x3df/0x5b0 [ 601.393937][T15651] tcp_data_queue+0x20fd/0x76c0 [ 601.400669][T15651] tcp_rcv_established+0xfba/0x2020 [ 601.407724][T15651] tcp_v4_do_rcv+0x96d/0xc70 [ 601.414169][T15651] tcp_v4_rcv+0x2dc0/0x37f0 [ 601.420522][T15651] ip_protocol_deliver_rcu+0x22e/0x440 [ 601.427834][T15651] ip_local_deliver_finish+0x341/0x5f0 [ 601.435139][T15651] NF_HOOK+0x3a4/0x450 [ 601.441150][T15651] NF_HOOK+0x3a4/0x450 [ 601.447067][T15651] __netif_receive_skb+0x2bf/0x650 [ 601.454013][T15651] process_backlog+0x662/0x15b0 [ 601.460726][T15651] __napi_poll+0xcb/0x490 [ 601.466896][T15651] net_rx_action+0x89b/0x1240 [ 601.473444][T15651] handle_softirqs+0x2c5/0x980 [ 601.480572][T15651] do_softirq+0x11b/0x1e0 [ 601.486754][T15651] __local_bh_enable_ip+0x1bb/0x200 [ 601.493797][T15651] sk_stream_wait_memory+0x762/0xfa0 [ 601.500932][T15651] tcp_sendmsg_locked+0x14f3/0x50a0 [ 601.507997][T15651] tcp_sendmsg+0x30/0x50 [ 601.514085][T15651] __sock_sendmsg+0x1a6/0x270 [ 601.520607][T15651] __sys_sendto+0x39b/0x4f0 [ 601.526968][T15651] __x64_sys_sendto+0xde/0x100 [ 601.533600][T15651] do_syscall_64+0xf3/0x230 [ 601.539963][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.547712][T15651] INITIAL USE at: [ 601.551706][T15651] lock_acquire+0x1ed/0x550 [ 601.557977][T15651] _raw_write_lock_irq+0xd3/0x120 [ 601.564849][T15651] fasync_remove_entry+0xff/0x1d0 [ 601.571643][T15651] lease_modify+0x1bd/0x3a0 [ 601.577908][T15651] locks_remove_file+0x577/0x10c0 [ 601.584702][T15651] __fput+0x1a6/0x880 [ 601.590455][T15651] task_work_run+0x24f/0x310 [ 601.596810][T15651] syscall_exit_to_user_mode+0x168/0x370 [ 601.604223][T15651] do_syscall_64+0x100/0x230 [ 601.610577][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.618237][T15651] INITIAL READ USE at: [ 601.622677][T15651] lock_acquire+0x1ed/0x550 [ 601.629375][T15651] _raw_read_lock_irqsave+0xdd/0x130 [ 601.636851][T15651] kill_fasync+0x199/0x4f0 [ 601.643463][T15651] lease_break_callback+0x26/0x30 [ 601.650669][T15651] __break_lease+0x6d5/0x1820 [ 601.657554][T15651] do_dentry_open+0x8d4/0x1460 [ 601.664501][T15651] vfs_open+0x3e/0x330 [ 601.670756][T15651] path_openat+0x2c84/0x3590 [ 601.677539][T15651] do_filp_open+0x235/0x490 [ 601.684231][T15651] do_sys_openat2+0x13e/0x1d0 [ 601.691181][T15651] __x64_sys_open+0x225/0x270 [ 601.698057][T15651] do_syscall_64+0xf3/0x230 [ 601.704751][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.712858][T15651] } [ 601.715461][T15651] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 601.724264][T15651] ... acquired at: [ 601.728153][T15651] lock_acquire+0x1ed/0x550 [ 601.732861][T15651] _raw_read_lock_irqsave+0xdd/0x130 [ 601.738336][T15651] kill_fasync+0x199/0x4f0 [ 601.742939][T15651] evdev_pass_values+0x58a/0xad0 [ 601.748068][T15651] evdev_events+0x1c2/0x300 [ 601.752779][T15651] input_pass_values+0x286/0x860 [ 601.757921][T15651] input_event_dispose+0x30f/0x600 [ 601.763226][T15651] input_handle_event+0xa71/0xbe0 [ 601.768457][T15651] input_inject_event+0x22f/0x340 [ 601.773674][T15651] evdev_write+0x5fd/0x790 [ 601.778293][T15651] vfs_write+0x29c/0xc90 [ 601.782726][T15651] ksys_write+0x183/0x2b0 [ 601.787336][T15651] do_syscall_64+0xf3/0x230 [ 601.792027][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.798122][T15651] [ 601.800443][T15651] -> (&f_owner->lock){....}-{2:2} { [ 601.805680][T15651] INITIAL USE at: [ 601.809721][T15651] lock_acquire+0x1ed/0x550 [ 601.815809][T15651] _raw_write_lock_irq+0xd3/0x120 [ 601.822422][T15651] __f_setown+0x6b/0x380 [ 601.828252][T15651] generic_setlease+0xc74/0x1550 [ 601.834776][T15651] fcntl_setlease+0x404/0x540 [ 601.841041][T15651] do_fcntl+0x69d/0x1a60 [ 601.846872][T15651] __se_sys_fcntl+0xd2/0x1e0 [ 601.853157][T15651] do_syscall_64+0xf3/0x230 [ 601.859372][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.866875][T15651] INITIAL READ USE at: [ 601.871236][T15651] lock_acquire+0x1ed/0x550 [ 601.877766][T15651] _raw_read_lock_irqsave+0xdd/0x130 [ 601.885088][T15651] send_sigio+0x37/0x390 [ 601.891346][T15651] kill_fasync+0x256/0x4f0 [ 601.897766][T15651] lease_break_callback+0x26/0x30 [ 601.904805][T15651] __break_lease+0x6d5/0x1820 [ 601.911517][T15651] do_dentry_open+0x8d4/0x1460 [ 601.918317][T15651] vfs_open+0x3e/0x330 [ 601.924661][T15651] path_openat+0x2c84/0x3590 [ 601.931275][T15651] do_filp_open+0x235/0x490 [ 601.937900][T15651] do_sys_openat2+0x13e/0x1d0 [ 601.944589][T15651] __x64_sys_open+0x225/0x270 [ 601.951299][T15651] do_syscall_64+0xf3/0x230 [ 601.957822][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.965730][T15651] } [ 601.968242][T15651] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 601.977126][T15651] ... acquired at: [ 601.980938][T15651] lock_acquire+0x1ed/0x550 [ 601.985635][T15651] _raw_read_lock_irqsave+0xdd/0x130 [ 601.991109][T15651] send_sigio+0x37/0x390 [ 601.995533][T15651] kill_fasync+0x256/0x4f0 [ 602.000141][T15651] lease_break_callback+0x26/0x30 [ 602.005347][T15651] __break_lease+0x6d5/0x1820 [ 602.010206][T15651] do_dentry_open+0x8d4/0x1460 [ 602.015141][T15651] vfs_open+0x3e/0x330 [ 602.019382][T15651] path_openat+0x2c84/0x3590 [ 602.024152][T15651] do_filp_open+0x235/0x490 [ 602.028843][T15651] do_sys_openat2+0x13e/0x1d0 [ 602.033706][T15651] __x64_sys_open+0x225/0x270 [ 602.038571][T15651] do_syscall_64+0xf3/0x230 [ 602.043267][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.049355][T15651] [ 602.051683][T15651] [ 602.051683][T15651] the dependencies between the lock to be acquired [ 602.051692][T15651] and SOFTIRQ-irq-unsafe lock: [ 602.065287][T15651] -> (tasklist_lock){.+.+}-{2:2} { [ 602.070428][T15651] HARDIRQ-ON-R at: [ 602.074422][T15651] lock_acquire+0x1ed/0x550 [ 602.080592][T15651] _raw_read_lock+0x36/0x50 [ 602.086758][T15651] __do_wait+0x12d/0x850 [ 602.092662][T15651] do_wait+0x1e9/0x560 [ 602.098385][T15651] kernel_wait+0xe9/0x240 [ 602.104404][T15651] call_usermodehelper_exec_work+0xbd/0x230 [ 602.111992][T15651] process_scheduled_works+0xa63/0x1850 [ 602.119214][T15651] worker_thread+0x870/0xd30 [ 602.125468][T15651] kthread+0x2f0/0x390 [ 602.131185][T15651] ret_from_fork+0x4b/0x80 [ 602.137271][T15651] ret_from_fork_asm+0x1a/0x30 [ 602.143705][T15651] SOFTIRQ-ON-R at: [ 602.147709][T15651] lock_acquire+0x1ed/0x550 [ 602.153889][T15651] _raw_read_lock+0x36/0x50 [ 602.160153][T15651] __do_wait+0x12d/0x850 [ 602.166069][T15651] do_wait+0x1e9/0x560 [ 602.171795][T15651] kernel_wait+0xe9/0x240 [ 602.177887][T15651] call_usermodehelper_exec_work+0xbd/0x230 [ 602.185456][T15651] process_scheduled_works+0xa63/0x1850 [ 602.192672][T15651] worker_thread+0x870/0xd30 [ 602.198943][T15651] kthread+0x2f0/0x390 [ 602.204684][T15651] ret_from_fork+0x4b/0x80 [ 602.210769][T15651] ret_from_fork_asm+0x1a/0x30 [ 602.217207][T15651] INITIAL USE at: [ 602.221121][T15651] lock_acquire+0x1ed/0x550 [ 602.227221][T15651] _raw_write_lock_irq+0xd3/0x120 [ 602.233842][T15651] copy_process+0x2267/0x3d50 [ 602.240114][T15651] kernel_clone+0x226/0x8f0 [ 602.246207][T15651] user_mode_thread+0x132/0x1a0 [ 602.252652][T15651] rest_init+0x23/0x300 [ 602.258379][T15651] start_kernel+0x47f/0x500 [ 602.264468][T15651] x86_64_start_reservations+0x2a/0x30 [ 602.271614][T15651] x86_64_start_kernel+0x9f/0xa0 [ 602.278231][T15651] common_startup_64+0x13e/0x147 [ 602.284785][T15651] INITIAL READ USE at: [ 602.289148][T15651] lock_acquire+0x1ed/0x550 [ 602.295766][T15651] _raw_read_lock+0x36/0x50 [ 602.302310][T15651] __do_wait+0x12d/0x850 [ 602.308602][T15651] do_wait+0x1e9/0x560 [ 602.314780][T15651] kernel_wait+0xe9/0x240 [ 602.321204][T15651] call_usermodehelper_exec_work+0xbd/0x230 [ 602.329134][T15651] process_scheduled_works+0xa63/0x1850 [ 602.336695][T15651] worker_thread+0x870/0xd30 [ 602.343305][T15651] kthread+0x2f0/0x390 [ 602.349374][T15651] ret_from_fork+0x4b/0x80 [ 602.355802][T15651] ret_from_fork_asm+0x1a/0x30 [ 602.362605][T15651] } [ 602.365108][T15651] ... key at: [] tasklist_lock+0x18/0x40 [ 602.372862][T15651] ... acquired at: [ 602.376669][T15651] lock_acquire+0x1ed/0x550 [ 602.381363][T15651] _raw_read_lock+0x36/0x50 [ 602.386076][T15651] send_sigurg+0x144/0x430 [ 602.390712][T15651] sk_send_sigurg+0x6e/0x2f0 [ 602.395517][T15651] tcp_check_urg+0x207/0x740 [ 602.400312][T15651] tcp_urg+0x15c/0x450 [ 602.404574][T15651] tcp_rcv_established+0xfaf/0x2020 [ 602.410002][T15651] tcp_v4_do_rcv+0x96d/0xc70 [ 602.414795][T15651] __release_sock+0x214/0x350 [ 602.419662][T15651] release_sock+0x61/0x1f0 [ 602.424289][T15651] tcp_sendmsg+0x3a/0x50 [ 602.428711][T15651] __sock_sendmsg+0x1a6/0x270 [ 602.433581][T15651] __sys_sendto+0x39b/0x4f0 [ 602.438288][T15651] __x64_sys_sendto+0xde/0x100 [ 602.443253][T15651] do_syscall_64+0xf3/0x230 [ 602.447979][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.454076][T15651] [ 602.456408][T15651] [ 602.456408][T15651] stack backtrace: [ 602.462310][T15651] CPU: 0 UID: 0 PID: 15651 Comm: syz.4.2363 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 602.472742][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 602.482822][T15651] Call Trace: [ 602.486111][T15651] [ 602.489060][T15651] dump_stack_lvl+0x241/0x360 [ 602.493832][T15651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.499067][T15651] ? __pfx__printk+0x10/0x10 [ 602.503673][T15651] ? print_shortest_lock_dependencies+0xf2/0x160 [ 602.510025][T15651] validate_chain+0x4ebd/0x5920 [ 602.514903][T15651] ? __pfx_validate_chain+0x10/0x10 [ 602.520113][T15651] ? rcu_is_watching+0x15/0xb0 [ 602.524891][T15651] ? __lock_acquire+0x1384/0x2050 [ 602.529976][T15651] ? mark_lock+0x9a/0x360 [ 602.534331][T15651] __lock_acquire+0x1384/0x2050 [ 602.539217][T15651] lock_acquire+0x1ed/0x550 [ 602.543766][T15651] ? send_sigurg+0x144/0x430 [ 602.548422][T15651] ? __pfx_lock_acquire+0x10/0x10 [ 602.553488][T15651] ? do_raw_read_lock+0x3c/0x90 [ 602.558370][T15651] ? _raw_read_lock_irqsave+0xe9/0x130 [ 602.563862][T15651] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 602.569790][T15651] _raw_read_lock+0x36/0x50 [ 602.574310][T15651] ? send_sigurg+0x144/0x430 [ 602.578946][T15651] send_sigurg+0x144/0x430 [ 602.583391][T15651] sk_send_sigurg+0x6e/0x2f0 [ 602.588014][T15651] tcp_check_urg+0x207/0x740 [ 602.592631][T15651] tcp_urg+0x15c/0x450 [ 602.596728][T15651] ? __pfx_tcp_urg+0x10/0x10 [ 602.601348][T15651] ? ktime_get+0x9b/0xb0 [ 602.605611][T15651] tcp_rcv_established+0xfaf/0x2020 [ 602.610852][T15651] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 602.617219][T15651] ? __pfx_tcp_rcv_established+0x10/0x10 [ 602.622882][T15651] tcp_v4_do_rcv+0x96d/0xc70 [ 602.627483][T15651] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 602.632636][T15651] __release_sock+0x214/0x350 [ 602.637330][T15651] release_sock+0x61/0x1f0 [ 602.641778][T15651] tcp_sendmsg+0x3a/0x50 [ 602.646036][T15651] __sock_sendmsg+0x1a6/0x270 [ 602.650747][T15651] __sys_sendto+0x39b/0x4f0 [ 602.655307][T15651] ? __pfx___sys_sendto+0x10/0x10 [ 602.660359][T15651] ? do_futex+0x33b/0x560 [ 602.664726][T15651] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 602.670726][T15651] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 602.677099][T15651] __x64_sys_sendto+0xde/0x100 [ 602.681906][T15651] do_syscall_64+0xf3/0x230 [ 602.686433][T15651] ? clear_bhb_loop+0x35/0x90 [ 602.691231][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.697148][T15651] RIP: 0033:0x7fa78cd7dff9 [ 602.701671][T15651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.721334][T15651] RSP: 002b:00007fa78dbaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 602.729776][T15651] RAX: ffffffffffffffda RBX: 00007fa78cf35f80 RCX: 00007fa78cd7dff9 [ 602.737861][T15651] RDX: 0000000000000001 RSI: 00000000200012c0 RDI: 0000000000000005 [ 602.745857][T15651] RBP: 00007fa78cdf0296 R08: 0000000000000000 R09: 0000000000000000 [ 602.753843][T15651] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 602.761916][T15651] R13: 0000000000000000 R14: 00007fa78cf35f80 R15: 00007fa78d05fa28 [ 602.769912][T15651] [ 602.832236][ T5295] cdc_ncm 2-1:1.0: bind() failure [ 602.845540][ T5295] usb 2-1: USB disconnect, device number 90