last executing test programs: 9.747189467s ago: executing program 3 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008508000000000000000900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x29, 0xb6, 0x45, 0x40, 0x8086, 0xb03, 0x3a45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xbe0}, [@dmm={0x7}, @network_terminal={0x7}]}]}}]}}]}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f0000000ec0)="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", 0x156}], 0x1, 0x6, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ac141400000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac14140000000000000000000000000000f100000000000000000200ff010000000000000000000000000001ff"], 0xec}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r7 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r7, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000e40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000e80)={0x4, 0x8, 0xfa00, {r8, 0x800}}, 0x10) syz_usb_connect(0x1, 0x7f6, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x16, 0x30, 0xed, 0x78, 0x5c6, 0x9062, 0xa21c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e4, 0x3, 0x2, 0x7, 0x0, 0xb, [{{0x9, 0x4, 0x5, 0x0, 0x6, 0xed, 0x6e, 0xfd, 0xf, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "7ed393"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x100}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0x841}]}, @uac_control={{0xa, 0x24, 0x1, 0x8, 0x4}}], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x81, 0x92, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}, @generic={0xa3, 0x1, "286b80207ed905beb73dac1248383c65cdd4ae1900d1f58fbe467076a8cb304f89e4b03fb1f7fc14e5d551932e1fcf886690d46fc716f7e018caced9cd6425115463f3087ae863f7abf3360c0ec6b56b7286741ad46d56c149ede3b7176a76e00aea8ed98e6bf599934f817224b7b890b0d9d9d066225219f94c248e74478b5cffd45d057773fe647caa1c7d761f4c1fdfcf7a173e31f05d4fd5af8a620a3cb970"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xba, 0x10, 0x7d, [@generic={0x7f, 0xc, "48f00ddb6580f4315d29bb9cf4cd95a08f68129d69d3cd86626c99b5e1439c18ab76d4350aaedf7022ca6734bb3dc354817deaa826a47daeab1b2e26f8e72bffb7aa46dd53998c3bda752597f141b39e6aa782456ec559f371fecd9b8eb8dc4c686bd0a0a687665d66e470bc1b9ccb65d813f4c556d3d9f17b544fe7dd"}, @generic={0x4b, 0x10, "a24374b79b8453882b72ecc41723485d74f159082dca74fd7a8357fe1ff4dd0e69639df7329da0a52eff9906ac819b0b532e73c0469315e7d0f27a688b5682d191a28de3cc4774a7e9"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x50, 0x22, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe4, 0x1000}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xe, 0x9, 0x9, [@generic={0x7e, 0x30, "a1092596f54f510050e10de2b9e77fc61006e89037e5f95fe3f6ac979ee8fe62c8ba8d8ef67e64f62a305090befc3c98cb7f4dcf35edd02264f391a0430ac6d78435fc53891532230a5ada225a3244eaf900c9504466f21aa34fef2fb1867a8092c7257b09029c289d3bd73e742eb29ecb47ccb067d63584ab08cb2f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x0, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7e, 0x5, 0x52}}]}}, {{0x9, 0x4, 0xfc, 0x8, 0x2, 0x15, 0xdc, 0xae, 0x2e, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '/'}, {0x5, 0x24, 0x0, 0x3a}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0xfffa, 0x7}, {0x6, 0x24, 0x1a, 0xfffc, 0xc}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x4, 0xe, 0x7, [@generic={0x7, 0x24, "9184be6441"}]}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x2, 0x8, 0x7f, [@generic={0x8b, 0xe, "92150a19a93c468d1fb86a9187e348cf0aa1c63efa60769ed47ab118c89d34500c0ccfc74bf45eb94b30685e5fff443b8fd41fa2b814a786f024c5ab564acfffc8f45e843ab99e0c8c7ae2374c29e598e3a83fb5ff52d6f4ead7f9486de3beed0d8dc6c7c79d818964354bc145ebf99d6a513167ed3dcd5facce8fd01c2a06654f0a9e29ed7df05b32"}]}}]}}, {{0x9, 0x4, 0xcb, 0x9, 0xd, 0xff, 0xff, 0x0, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x40}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x4, 0x2, [0x6, 0x4], 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x5, "c83af458259d"}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0x7, 0x7, [@generic={0x24, 0x22, "f4824abb571f51cb5966e67fe52d7d9ccde7d0297e4216bce09c5920d3e948543a99"}, @generic={0x34, 0x3, "e96a9ae38d6ad2abe8f02724c0459171483ff3ece5fb1fd663779e177f679e29e2304284ce4bac140268f8eb28eb304997fd"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0xee, 0x70, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}, @generic={0xda, 0x22, "6a8062e2bc2a29e3eccbc410a0f1d49ea56000cba401953cbdf5c55ae8861fea0093f817351a6e03468fe37e4e500d59be4b82fbb3a400aa9b0a8222c3aa203cfc365b24d65c4b3ff840f9eaa11548b8cf8e698929c176aeebb17c8265aededfc94ba7715890ee145aae5fa40e723a3f9d9460401dea4d654a754c1e6a0af0e3926fc7918489b5faf12a58b4f57854e8e3834374235ea78ffa7e517bb04a0b1550ef7899d17b603f4e6af35a8fd8b8248b4196e30f92236dfeec317eaa0183a5226f0f4fa99572b8d21e76d0a486b63e9ce6b1c8f6cab16e"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x2, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xa}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x1, 0x80, 0x4, [@generic={0x3f, 0x22, "4cd6f0835c422b1cdfde76e952e74bbd432a9719fbde54f7e748ecd56429c7b9e866846a8bacd2169c7251e76812a92c21808aadda2f06a0ff8975399a"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0xa6, 0x4, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xc}, @generic={0xc0, 0x7, "7be435e72a6ea1216b8cf0959712b92322683e2527cb9679c8f774bde1b3c86658a3f6edc97536297b9f366fec5da0ce05f85559c64d21169d9bb697320d698d8d79acd99d15ad91c60ca4219adf0966e9141281695f7ffe09d2c04186566328057d899ed2632dd84773e634b26909cf523ae4277f8ee6f5ae00dcb5f1f5e57bc18379d49bdb414a6c8b51e9a483118219173b2fc950ff601cd19ed09c679791c751f33c5a7b197c74b72749afbe3399db51c84fb82153f19dd532497a2c"}]}}, {{0x9, 0x5, 0x4, 0x13, 0x418, 0x3, 0x5, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x86, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x2, 0x3, 0x10, [@generic={0xa, 0x23, "98190713e25874a2"}, @uac_iso={0x7, 0x25, 0x1, 0xf4fca0242f82fcfb, 0xf, 0x8}]}}, {{0x9, 0x5, 0xe, 0x10, 0x640, 0x4, 0x5, 0xfe}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x80, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xffff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x40, 0x7, 0x81, [@generic={0xe1, 0x1, "dac54b620739258f8cc38340e817ee0b83fb8a26e9c4617dcae8627e5029a8b3f92dd22689092eec127f4a6c632000e3758ccc7ed5f4f6a7a73ad80e7cfa43fb74e4a2fdb08bfe38679deea01fbff5993a4370efd359d8c493921390fc9ac1ab0ea9344ddb2ac99a7d75fbf2ba9ae0c5a0a48897af8ac414b60e25a5743fc7887dbba424f4b96347e7e3118bf6331a892a5e9005513dc1ab571f994a6a702713dd83909faa51b6f5c53aea35f25ba1aaf1649bce9c2f2c66df3a306cdf1d1a9b972b10a14ea5f93264bd317335bdab3606c9e8f2650d3c9466ce81d5a967ed"}, @generic={0x8d, 0x31, "ebb4fb02337243edc0b7ed3028f15f778d072e4ff0fc7e36b31101b6df9faf23aaa1f88599c1983ecd5b0664f217490c774299d6c2a9c68d3e1446b1b0b2e9e2cece9a0edb7ee852ff1f075c77004c6a7d14db032f3fac68a5d54203deede866fe8812147e0df3495c74c14f69d158afaf127b6485037d67c11dc02eabdc1889b61d1691a3c6c3d511e6b4"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x7, 0x28, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x14d}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x7, 0xfa, 0xe, 0x8, 0x9}, 0x175, &(0x7f00000000c0)={0x5, 0xf, 0x175, 0x4, [@generic={0xc5, 0x10, 0x3, "170079dcdb283ab76dd38dd1a2f17f2a6e04d798b6316bfc50f91db28763ca3ea90eab281b07603848d23d2f3136d78a92d42321c02456a2f6e83c7296bc4d9df288eabca8e618703e95539f7f95e2cc6f77cf3eb8dab731de883ae84a2e8f00d2b17c2f6d6a3737d74244bc6c138a0b0ddc7d394f5c4225d9159d990371af99272887650dfc8a5d80f339773158ac42dd2cf568c454187df3b924d55631e72783bfba37f3b96b0c60d9d3d47a01a70fc4822c33441210891184ad7233650dfcf1b1"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x83a9, 0xf8537b86ae4ab2eb, 0x2, [0xff000f]}, @generic={0x91, 0x10, 0xb, "3efdfa24cb844bc8eddcf90f2692b4ff1477b3dcb9c310faf26b7acd38a380194d6edee88c2423dcf9598889d4d563c2182ebbc5c9de22ca73de014c02775f48755d1facdffba7105bf37335b4cbf76fc9602f2a86b33b9fae6e2bd5495865142b309c316e589801520d64eead5b13ca1e6e97d69b30da049b5b9c16eb796e3b697786bf324c57209dd5cb56d1ea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x77, 0x4}]}, 0x7, [{0x1e, &(0x7f0000000b40)=@string={0x1e, 0x3, "37114f09d51e6f18ee13aa97ec04b3a55db9e6003602b52e2560a799"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2409}}, {0x24, &(0x7f0000000bc0)=@string={0x24, 0x3, "17192e8cc6deededbf0d997f020c979c49144eec10f12c0c8fae01e515c2865d3d40"}}, {0x68, &(0x7f0000000c00)=@string={0x68, 0x3, "fbe504be0282cdc3d10149f1c21d15c7e42dbd74a7bd8f05a0c5b69de8409c32888e7cfed326ef69dcb410d4326866cb48c139ec993f1efd1dc3de4cf519791292d915af736d60eb407114271849aba9db37c26e9d14fc9bc2ac6e1802a901ef51a5ade991b4"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x444}}, {0xa7, &(0x7f0000000cc0)=@string={0xa7, 0x3, "b4ad25f9acfcb87c14a40c7859a91006d5dfde06df2c8581cff6074d08062d2bfeb90e2379b5b7174a14a0a1c79385a0f2da05fd8da874b352788b1163df5a258311fbbfd54b2667b5eba6ee2eac2916383ad691e4eba28de7e72dcc844e1de33ce04503159037d466aa54ce11d06c714aee9ed8ec6b97d86595537ee80803c6035da69cf1b2a6bfc4d17a5ce89a4ead00c926323ec104638a32a804e26940d4b40ad91533"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x3c01}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000000000b3242d7a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000002000"/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 8.079483115s ago: executing program 3 (id=1173): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 5.628511849s ago: executing program 2 (id=1186): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000140081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 5.427454908s ago: executing program 2 (id=1187): syz_io_uring_setup(0x222f, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x80000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/30}, {&(0x7f0000000380)=""/58}, {&(0x7f0000000440)=""/39}, {&(0x7f0000000540)=""/120}], 0x19, 0x0, 0x0) r2 = getpid() creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75825f69643d", @ANYRESDEC=0x0, @ANYRESOCT]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='mountinfo\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2, 0x4b6, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0xc0684608, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0}) r6 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r2, r6, 0x7, r1, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r7, &(0x7f0000004440)={0x2020}, 0x2020) 5.192518575s ago: executing program 2 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100000dd00000000000000000000000a68000000060a010400000000000000"], 0x90}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f0000000000), 0x10) dup3(r1, r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0xff, 0x2, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc04c5609, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "19893bbb"}, 0x0, 0x4, {0x0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x100, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYRES32=r6, @ANYRES32, @ANYBLOB="04008e00080057001b0a000004"], 0x398}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r7, &(0x7f0000000680)={0x0, 0x60, &(0x7f0000000600)=[{&(0x7f00000000c0)="d2", 0x70000}], 0x1}, 0x0) 4.669322522s ago: executing program 3 (id=1192): syz_open_dev$usbfs(&(0x7f0000000000), 0x9fb3, 0x4a4140) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) dup3(r0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x2, 0x3, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x4, @local}}]}, 0x28}, 0x1, 0x7}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04001220"], 0x7) 4.535480693s ago: executing program 1 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305000000000000000800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100", @ANYRES32], 0x68}}, 0x0) 4.366496294s ago: executing program 3 (id=1194): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x200000000000, &(0x7f0000000500), 0x106, 0x2}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xf01}], 0x3) 4.340434745s ago: executing program 1 (id=1196): r0 = io_uring_setup(0x30d3, &(0x7f0000000380)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x86c22, 0x0) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@cgroup, 0xffffffffffffffff, 0x1c, 0x28, 0x0, @void, @void, @void, @value}, 0x20) ioctl$KVM_NMI(r2, 0xae9a) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.199371032s ago: executing program 2 (id=1197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x7, 0x33, @deauth={{{}, {}, @device_b, @broadcast}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a4, 0x0, 0x2b8, 0x182, 0x0, 0x0, 0x1dc, 0x3a8, 0x3a8, 0x1dc, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x0, 0x1800}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macsec0\x00', 'netdevsim0\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x2000, 0x1fc}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 4.199217372s ago: executing program 1 (id=1198): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x3c, r0, 0x801, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x3c}}, 0x0) 3.949357852s ago: executing program 3 (id=1199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0xa00, &(0x7f00000006c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x0, 0x0, 0x0) 3.706645255s ago: executing program 1 (id=1201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc0000001000010400000000fbdbdf2500000000", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB='\b\x00.'], 0xdc}, 0x1, 0xf303000000000000}, 0x0) 3.70500023s ago: executing program 2 (id=1202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 3.437640116s ago: executing program 3 (id=1203): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) signalfd(0xffffffffffffffff, &(0x7f0000000700), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = socket$inet6(0xa, 0x3, 0x103) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r3, 0x28, 0x0, 0x0, &(0x7f00000001c0)=0x700) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x40) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fd, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 3.412501839s ago: executing program 1 (id=1204): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(&(0x7f0000000340)={0x105480, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 2.987542712s ago: executing program 1 (id=1206): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 2.543912408s ago: executing program 4 (id=1208): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1) (fail_nth: 1) 2.412888129s ago: executing program 0 (id=1209): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x200000000000, &(0x7f0000000500), 0x106, 0x2}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0xff}, {&(0x7f0000001480)="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", 0xf01}], 0x3) 1.927579749s ago: executing program 0 (id=1210): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8a02) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0xb, 0x4) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1) 1.850214489s ago: executing program 4 (id=1211): r0 = eventfd2(0x0, 0x0) r1 = io_uring_setup(0xc91, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)=[@register_looper, @free_buffer, @release, @increfs_done={0x40106308, 0x3, 0x4000000000000000}], 0x3b, 0x100000000000000, 0x0}) dup3(r0, r1, 0x0) 1.711990696s ago: executing program 0 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) r3 = epoll_create(0x208000) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0) futex_waitv(&(0x7f0000002140)=[{0x40, 0x0, 0x82}, {0x6, 0x0, 0x8ab2f6c706f9ba89}, {0x5, 0x0}, {0x8, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x395, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x81, 0x0, 0x82}, {0x185, 0x0, 0x2}, {0xfe, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x40, 0x0, 0x82}, {0xc4, 0x0, 0x82}, {0x80000000, 0x0}, {0x36c90000, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x8638, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x80}, {0xd, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x16, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x101, 0x0}, {0x9, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x8000000000000000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x401, 0x0, 0x2}, {0x5d, 0x0, 0x82}, {0x100000001, 0x0}, {0x20000000000, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xfffffffffffff26c, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xfff, 0x0, 0x82}], 0x36, 0x0, 0x0, 0x1) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x10, &(0x7f0000000180)="80d68a83", 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7f}]}, 0x24}}, 0x0) 1.641606768s ago: executing program 4 (id=1213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0xb18, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0xb18, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0xc0300) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)) openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) (async) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc01000000003ed300000000000000000000000002001000"/49], 0xb8}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000800) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc01000000003ed300000000000000000000000002001000"/49], 0xb8}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000800) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) syz_clone3(&(0x7f0000000300)={0x4002200, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x3d}, &(0x7f0000000180)=""/12, 0xc, &(0x7f00000001c0)=""/251, &(0x7f00000002c0)=[0x0], 0x1, {r1}}, 0x58) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40106435, &(0x7f0000000700)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000740)=""/111, 0x6f}], 0x5, 0x7, 0x8) 1.379559838s ago: executing program 0 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc0000001000010400000000fbdbdf2500000000", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b', @ANYRES32, @ANYBLOB='\b\x00.'], 0xdc}, 0x1, 0xf303000000000000}, 0x0) 1.223708962s ago: executing program 0 (id=1215): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000}) io_setup(0xedf, &(0x7f0000001740)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x82) io_submit(r2, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = gettid() mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x12, r1, 0x0) tkill(r5, 0x10) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x8000) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, r5}) fcntl$lock(r1, 0x5, &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x6}) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card3/oss_mixer\x00', 0x426780, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[], 0x68) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f0000000040)={[0x4, 0xdfa]}) 1.008488789s ago: executing program 4 (id=1216): syz_io_uring_setup(0x222c, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xb00, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x14}}}}}, 0x0) 831.577587ms ago: executing program 4 (id=1217): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x60c00) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x604) 538.84946ms ago: executing program 4 (id=1218): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket(0x1e, 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 106.785016ms ago: executing program 0 (id=1219): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pwritev(r4, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x0, 0x31, 0xcd, "5a76d96481c8c8668b5fbd8a5963fb988d3fa2a227348fcc76c5caa6e09aaecf479af5abb31425967df2adada2f77080ab351588f448e792184758df9727b5d53dd3fb900ea3c77a8fbc9cf428a8881fb43731883caf2b3f6636a4d97b942e83c1ccef38e515c822f88ac8910d1f246af3f281572dd9416497fd358c88ad9808b105ff71e355a57c16591c0758573802259a5291c551242f4233ff370fede2ea79a34afaf926b1dec15a6ca85177b30072872acb24ecf3177bbe750a1258314fb5492b7ea2dbd4cdd073a7a9b0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x0, 0x53, {0x51, "b5b635c5735a7bd4b1b8c6fc02482bd6b23ed3bfb6055c91602f8037afc0e88d8ffbd5e154a765e22c2981e1fa5debac8c23fc444f79b3f39c937258d432c69b5509646187971508d5b6c9d831f7f6c650"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x7a}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x1}}) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002500)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmmsg$inet6(r1, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="92", 0x1}], 0x1}}], 0x1, 0x48874) sendmsg$key(r1, &(0x7f0000000640)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x80}}, 0x10) 0s ago: executing program 2 (id=1220): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) prctl$PR_GET_TSC(0x43, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0) r2 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x260842, 0x100, 0x24}, 0x18) prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000000, 0x0, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000180)=0x200, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382) pwritev(r4, &(0x7f0000000840)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x800000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00"], 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x334, 0x160, 0x2b8, 0x0, 0x160, 0x6000000, 0x26c, 0x3a8, 0x3a8, 0x26c, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg2\x00', 'bond0\x00', {}, {}, 0x5c}, 0x0, 0xf8, 0x160, 0x0, {0xd2030000}, [@common=@frag={{0x30}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x390) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000001c0)={0x10}) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000030c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 4-1: Manufacturer: syz [ 147.453539][ T8] usb 4-1: SerialNumber: syz [ 147.472237][ T7002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.479664][ T5282] usb 2-1: config 0 has no interface number 0 [ 147.524922][ T5282] usb 2-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 147.545862][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.579136][ T5282] usb 2-1: Product: syz [ 147.670761][ T5282] usb 2-1: Manufacturer: syz [ 147.709702][ T5282] usb 2-1: SerialNumber: syz [ 147.727695][ T5282] usb 2-1: config 0 descriptor?? [ 147.749695][ T5282] sierra 2-1:0.153: Sierra USB modem converter detected [ 147.913833][ T5239] Bluetooth: hci4: command tx timeout [ 147.915555][ T8] kobil_sct 4-1:81.159: KOBIL USB smart card terminal converter detected [ 147.958126][ T5282] usb 2-1: USB disconnect, device number 16 [ 147.973150][ T5282] sierra 2-1:0.153: device disconnected [ 148.036037][ T8] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 148.098392][ T8] usb 4-1: USB disconnect, device number 10 [ 148.146413][ T8] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 148.167207][ T6954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.191305][ T8] kobil_sct 4-1:81.159: device disconnected [ 148.209408][ T6954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.248932][ T6954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.271310][ T6954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.441240][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.465782][ T6954] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.486020][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.493210][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.520031][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.527174][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.707542][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.801191][ T6954] veth0_vlan: entered promiscuous mode [ 148.867109][ T6954] veth1_vlan: entered promiscuous mode [ 148.908380][ T6954] veth0_macvtap: entered promiscuous mode [ 148.958391][ T6954] veth1_macvtap: entered promiscuous mode [ 149.107089][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.128592][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.140047][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.159450][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.178942][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.238551][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.271326][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.303429][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.332921][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.351890][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.437388][ T6954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.465373][ T6954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.489554][ T6954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.508062][ T6954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.629775][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.644397][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.659434][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.668460][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.679519][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.688698][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.840546][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.849447][ T61] bridge_slave_1: left allmulticast mode [ 149.858093][ T61] bridge_slave_1: left promiscuous mode [ 149.864555][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.872331][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.882911][ T61] bridge_slave_0: left allmulticast mode [ 149.889362][ T61] bridge_slave_0: left promiscuous mode [ 149.895468][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.999303][ T5233] Bluetooth: hci4: command tx timeout [ 150.200017][ T61] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 150.603303][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.707636][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.740973][ T61] bond0 (unregistering): Released all slaves [ 150.817616][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.825967][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.250618][ T7120] netlink: 'syz.4.403': attribute type 4 has an invalid length. [ 151.360964][ T7123] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 151.497849][ T61] hsr_slave_0: left promiscuous mode [ 151.507309][ T61] hsr_slave_1: left promiscuous mode [ 151.517097][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.530127][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.752717][ T5233] Bluetooth: hci3: command tx timeout [ 152.082885][ T5233] Bluetooth: hci4: command tx timeout [ 152.302401][ T61] team0 (unregistering): Port device team_slave_1 removed [ 152.369342][ T61] team0 (unregistering): Port device team_slave_0 removed [ 152.710138][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 152.987539][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.036102][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.083960][ T7079] bridge_slave_0: entered allmulticast mode [ 153.140279][ T7079] bridge_slave_0: entered promiscuous mode [ 153.182616][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.200013][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.217646][ T7079] bridge_slave_1: entered allmulticast mode [ 153.231200][ T7079] bridge_slave_1: entered promiscuous mode [ 153.347099][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.361531][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.446156][ T7079] team0: Port device team_slave_0 added [ 153.459879][ T7079] team0: Port device team_slave_1 added [ 153.502932][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.517163][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.579767][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.636569][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.651537][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.690042][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.761463][ T7079] hsr_slave_0: entered promiscuous mode [ 153.790294][ T7079] hsr_slave_1: entered promiscuous mode [ 153.810438][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.834296][ T5233] Bluetooth: hci3: command tx timeout [ 153.845901][ T7079] Cannot create hsr debugfs directory [ 154.546578][ T7079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.584821][ T7079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.621443][ T7079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.724738][ T7079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.961312][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.002322][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.020550][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.027688][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.063900][ T7199] netlink: 'syz.1.418': attribute type 4 has an invalid length. [ 155.079839][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.087000][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.166169][ T7079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.180506][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.257638][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.370676][ T7079] veth0_vlan: entered promiscuous mode [ 155.417100][ T7079] veth1_vlan: entered promiscuous mode [ 155.475859][ T7079] veth0_macvtap: entered promiscuous mode [ 155.501737][ T7079] veth1_macvtap: entered promiscuous mode [ 155.528679][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.541209][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.555210][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.566454][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.596508][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.610611][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.626924][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.655723][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.695465][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.774909][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.856048][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.912673][ T5233] Bluetooth: hci3: command tx timeout [ 155.942866][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.953863][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.965771][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.978568][ T7079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.987907][ T7079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.006000][ T7079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.016162][ T7079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.316554][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.397760][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.491406][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.511848][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.952636][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.002811][ T5233] Bluetooth: hci3: command tx timeout [ 158.117251][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.160626][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.184755][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.197366][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.212039][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.221618][ T25] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.230157][ T25] usb 4-1: Manufacturer: syz [ 158.252173][ T25] usb 4-1: config 0 descriptor?? [ 158.701031][ T25] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 158.719678][ T25] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 158.731050][ T25] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 160.087804][ T7311] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 160.104056][ T7313] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 160.135043][ T7311] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 160.160155][ T7313] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 160.180437][ T7311] netlink: 'syz.0.444': attribute type 29 has an invalid length. [ 160.864318][ T5279] usb 4-1: USB disconnect, device number 11 [ 163.302575][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.464715][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 163.477039][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.499406][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.520031][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 163.546155][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 163.566486][ T8] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 163.578502][ T8] usb 3-1: Manufacturer: syz [ 163.585242][ T8] usb 3-1: config 0 descriptor?? [ 164.011651][ T8] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 164.023581][ T8] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 164.036978][ T8] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 164.588467][ T5280] usb 3-1: USB disconnect, device number 9 [ 165.688615][ T7406] syzkaller0: entered promiscuous mode [ 165.694498][ T7406] syzkaller0: entered allmulticast mode [ 167.494900][ T7410] netlink: 'syz.3.478': attribute type 4 has an invalid length. [ 167.546378][ T7411] netlink: 'syz.3.478': attribute type 4 has an invalid length. [ 170.809757][ T7487] netlink: 'syz.3.501': attribute type 4 has an invalid length. [ 170.861204][ T7490] netlink: 164 bytes leftover after parsing attributes in process `syz.4.500'. [ 172.814456][ T7539] netlink: 'syz.4.514': attribute type 4 has an invalid length. [ 175.267310][ T7580] syzkaller0: entered promiscuous mode [ 175.277816][ T7580] syzkaller0: entered allmulticast mode [ 182.101556][ T7664] syzkaller0: entered promiscuous mode [ 182.109453][ T7664] syzkaller0: entered allmulticast mode [ 183.725067][ T7688] binder: BINDER_SET_CONTEXT_MGR already set [ 183.752602][ T7688] binder: 7687:7688 ioctl 4018620d 200002c0 returned -16 [ 183.802147][ T7688] binder: 7687:7688 ioctl c0306201 20000200 returned -11 [ 191.352565][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 192.481629][ T7787] syzkaller0: entered promiscuous mode [ 192.622606][ T7787] syzkaller0: entered allmulticast mode [ 194.394139][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400467][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.808905][ T7886] syzkaller0: entered promiscuous mode [ 203.814824][ T7886] syzkaller0: entered allmulticast mode [ 210.798009][ T7949] netlink: 188 bytes leftover after parsing attributes in process `syz.2.604'. [ 211.204441][ T7963] syzkaller0: entered promiscuous mode [ 211.221593][ T7963] syzkaller0: entered allmulticast mode [ 211.429127][ T7966] syzkaller0: entered promiscuous mode [ 211.434948][ T7966] syzkaller0: entered allmulticast mode [ 218.219564][ T8001] netlink: 188 bytes leftover after parsing attributes in process `syz.4.616'. [ 218.577013][ T8017] syzkaller0: entered promiscuous mode [ 218.587464][ T8017] syzkaller0: entered allmulticast mode [ 222.073424][ T5239] Bluetooth: hci0: command 0x0406 tx timeout [ 225.651852][ T5280] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 225.742642][ T5281] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.864288][ T5280] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 225.876283][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.887619][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.897721][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 225.912104][ T5280] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 225.921285][ T5280] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 225.932500][ T5280] usb 1-1: Manufacturer: syz [ 225.939568][ T5280] usb 1-1: config 0 descriptor?? [ 226.202812][ T5281] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 226.213750][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.223598][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 226.241429][ T5281] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 226.251200][ T5281] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 226.259561][ T5281] usb 3-1: Manufacturer: syz [ 226.271032][ T5281] usb 3-1: config 0 descriptor?? [ 226.297325][ T5281] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 226.356320][ T5280] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 226.363873][ T5280] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 226.396521][ T5280] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 226.951324][ T5348] usb 1-1: USB disconnect, device number 7 [ 228.519660][ T5279] usb 3-1: USB disconnect, device number 10 [ 230.962531][ T936] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 231.134650][ T936] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 231.145670][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.185745][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.202273][ T936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 231.244990][ T936] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 231.256550][ T936] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 231.269516][ T936] usb 3-1: Manufacturer: syz [ 231.282665][ T936] usb 3-1: config 0 descriptor?? [ 231.711329][ T936] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 231.723668][ T936] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 231.794956][ T936] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 232.333183][ T5279] usb 3-1: USB disconnect, device number 11 [ 233.352560][ T5348] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 233.558664][ T5348] usb 2-1: device descriptor read/64, error -71 [ 233.812529][ T5348] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 233.967383][ T5348] usb 2-1: device descriptor read/64, error -71 [ 234.190933][ T5348] usb usb2-port1: attempt power cycle [ 234.572834][ T5348] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 234.606008][ T5348] usb 2-1: device descriptor read/8, error -71 [ 234.886639][ T5348] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 234.992149][ T5348] usb 2-1: device descriptor read/8, error -71 [ 235.146887][ T5348] usb usb2-port1: unable to enumerate USB device [ 236.582558][ T5282] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 236.733304][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 236.754617][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.832144][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 236.900480][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 236.935584][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 236.960075][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 236.980384][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.026188][ T5282] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 237.039606][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.075587][ T5282] usb 4-1: Product: syz [ 237.085131][ T5282] usb 4-1: Manufacturer: syz [ 237.101861][ T5282] usb 4-1: SerialNumber: syz [ 237.126586][ T5282] usb 4-1: config 0 descriptor?? [ 237.170632][ T8231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.383548][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 238.202497][ T5280] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 238.382573][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 238.408069][ T5280] usb 1-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 238.417905][ T5280] usb 1-1: config 0 has an invalid interface number: 153 but max is 97 [ 238.426730][ T5280] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 238.436487][ T5280] usb 1-1: config 0 has no interface number 0 [ 238.445739][ T5280] usb 1-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 238.455410][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.466888][ T5280] usb 1-1: Product: syz [ 238.471350][ T5280] usb 1-1: Manufacturer: syz [ 238.477204][ T5280] usb 1-1: SerialNumber: syz [ 238.486929][ T5280] usb 1-1: config 0 descriptor?? [ 238.498099][ T5280] sierra 1-1:0.153: Sierra USB modem converter detected [ 239.101072][ T5280] usb 1-1: USB disconnect, device number 8 [ 239.123010][ T5280] sierra 1-1:0.153: device disconnected [ 239.362884][ T5282] rc_core: IR keymap rc-snapstream-firefly not found [ 239.378435][ T5282] Registered IR keymap rc-empty [ 239.394725][ T5282] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 239.419145][ T5282] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 239.439180][ T5282] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 239.497064][ T5282] usb 4-1: USB disconnect, device number 12 [ 239.503168][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 239.540814][ T8263] netlink: 'syz.2.675': attribute type 27 has an invalid length. [ 239.967909][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.982902][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.066585][ T8263] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.084239][ T8263] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.105057][ T8263] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.222558][ T8263] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.561684][ T8263] hsr1: left allmulticast mode [ 240.589002][ T8263] syz_tun: left allmulticast mode [ 240.645449][ T8263] batadv_slave_0: left allmulticast mode [ 241.608373][ T29] audit: type=1326 audit(1728380926.262:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 241.670910][ T29] audit: type=1326 audit(1728380926.282:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 241.715977][ T29] audit: type=1326 audit(1728380926.282:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 241.829200][ T29] audit: type=1326 audit(1728380926.282:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 241.930292][ T29] audit: type=1326 audit(1728380926.282:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 242.013339][ T29] audit: type=1326 audit(1728380926.282:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 242.160694][ T29] audit: type=1326 audit(1728380926.282:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 243.932516][ T5282] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 244.112671][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 244.135611][ T5282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.171997][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 244.229725][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 244.260505][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 244.288643][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.325999][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.372211][ T5282] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 244.385098][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.415173][ T5282] usb 1-1: Product: syz [ 244.430750][ T5282] usb 1-1: Manufacturer: syz [ 244.441386][ T5282] usb 1-1: SerialNumber: syz [ 244.503535][ T5282] usb 1-1: config 0 descriptor?? [ 244.511555][ T8325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.736831][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 245.415743][ T8331] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 245.427797][ T8331] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 245.478037][ T8331] netlink: 'syz.2.694': attribute type 29 has an invalid length. [ 245.517262][ T8331] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 245.590765][ T5348] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 245.752724][ T5348] usb 2-1: Using ep0 maxpacket: 8 [ 245.759475][ T5348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.781475][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 245.797174][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 245.810413][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 245.825789][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 245.855951][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.873200][ T5348] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 245.898985][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.908617][ T5348] usb 2-1: Product: syz [ 245.915730][ T5348] usb 2-1: Manufacturer: syz [ 245.920706][ T5348] usb 2-1: SerialNumber: syz [ 245.934000][ T5348] usb 2-1: config 0 descriptor?? [ 245.943567][ T8329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 246.082991][ T29] audit: type=1326 audit(1728380930.802:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 246.118795][ T29] audit: type=1326 audit(1728380930.822:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 246.159413][ T29] audit: type=1326 audit(1728380930.822:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 246.190121][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 246.356570][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.506565][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.732310][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.752685][ T5282] rc_core: IR keymap rc-snapstream-firefly not found [ 246.760744][ T5282] Registered IR keymap rc-empty [ 246.769348][ T5282] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 246.792281][ T5282] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 246.831512][ T5282] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 246.872721][ T5281] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 246.881343][ T5282] usb 1-1: USB disconnect, device number 9 [ 246.887417][ C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 246.942054][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.074481][ T5281] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 247.111485][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.140146][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.168416][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 247.215981][ T5281] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 247.240463][ T5281] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 247.264881][ T5281] usb 3-1: Manufacturer: syz [ 247.291408][ T5281] usb 3-1: config 0 descriptor?? [ 247.322276][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.335396][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.345019][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.353545][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.361293][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.371417][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.577907][ T61] bridge_slave_1: left allmulticast mode [ 247.586060][ T61] bridge_slave_1: left promiscuous mode [ 247.592290][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.612174][ T61] bridge_slave_0: left allmulticast mode [ 247.618194][ T61] bridge_slave_0: left promiscuous mode [ 247.632878][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.847305][ T5281] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 247.883049][ T5281] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 247.943343][ T5281] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 248.196077][ T5348] rc_core: IR keymap rc-snapstream-firefly not found [ 248.218503][ T5348] Registered IR keymap rc-empty [ 248.244091][ T5348] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 248.257196][ T5348] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 248.281515][ T5348] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 248.357074][ C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 248.403247][ T5348] usb 2-1: USB disconnect, device number 21 [ 248.736378][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.777720][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.846485][ T61] bond0 (unregistering): Released all slaves [ 248.916101][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 249.096324][ T8359] chnl_net:caif_netlink_parms(): no params data found [ 249.110087][ T8382] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 249.224335][ T8382] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 249.401282][ T8388] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 249.432549][ T5239] Bluetooth: hci3: command tx timeout [ 249.530774][ T8359] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.600280][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.648491][ T8359] bridge_slave_0: entered allmulticast mode [ 249.695681][ T8359] bridge_slave_0: entered promiscuous mode [ 249.753498][ T5279] usb 3-1: USB disconnect, device number 12 [ 249.892696][ T8359] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.906128][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.978680][ T8359] bridge_slave_1: entered allmulticast mode [ 250.007722][ T8359] bridge_slave_1: entered promiscuous mode [ 250.298424][ T61] hsr_slave_0: left promiscuous mode [ 250.357945][ T61] hsr_slave_1: left promiscuous mode [ 250.399434][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.437741][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.473412][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.502338][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.633455][ T61] veth1_macvtap: left promiscuous mode [ 250.641342][ T61] veth0_macvtap: left promiscuous mode [ 250.660655][ T61] veth1_vlan: left promiscuous mode [ 250.675062][ T61] veth0_vlan: left promiscuous mode [ 251.518251][ T5239] Bluetooth: hci3: command tx timeout [ 251.873374][ T61] team0 (unregistering): Port device team_slave_1 removed [ 252.063920][ T61] team0 (unregistering): Port device team_slave_0 removed [ 253.015682][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 253.015700][ T29] audit: type=1326 audit(1728380937.732:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.049098][ T29] audit: type=1326 audit(1728380937.732:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.090096][ T29] audit: type=1326 audit(1728380937.732:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.127279][ T29] audit: type=1326 audit(1728380937.732:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.153333][ T29] audit: type=1326 audit(1728380937.732:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.180943][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.201537][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.231200][ T29] audit: type=1326 audit(1728380937.732:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.234492][ T8425] syz_tun: entered promiscuous mode [ 253.260160][ T29] audit: type=1326 audit(1728380937.732:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.283173][ T8425] batadv_slave_0: entered promiscuous mode [ 253.289885][ T29] audit: type=1326 audit(1728380937.732:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.312150][ T8425] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 253.312926][ T29] audit: type=1326 audit(1728380937.732:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.329668][ T8425] Cannot create hsr debugfs directory [ 253.352941][ T8425] hsr1: entered allmulticast mode [ 253.364991][ T29] audit: type=1326 audit(1728380937.732:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 253.366128][ T8425] syz_tun: entered allmulticast mode [ 253.400639][ T8425] batadv_slave_0: entered allmulticast mode [ 253.539078][ T8437] syzkaller0: entered promiscuous mode [ 253.545671][ T8437] syzkaller0: entered allmulticast mode [ 253.588579][ T8359] team0: Port device team_slave_0 added [ 253.594536][ T5239] Bluetooth: hci3: command tx timeout [ 255.672972][ T5239] Bluetooth: hci3: command tx timeout [ 255.835151][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.841621][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.923055][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 258.502545][ T8359] team0: Port device team_slave_1 added [ 258.725908][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.765953][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.808723][ T8359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.821054][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.828107][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.857555][ T8359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.022300][ T8359] hsr_slave_0: entered promiscuous mode [ 259.109068][ T8359] hsr_slave_1: entered promiscuous mode [ 259.197765][ T8359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.227876][ T8359] Cannot create hsr debugfs directory [ 261.216389][ T8359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.275558][ T8359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.387609][ T8359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.543068][ T8359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.088663][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.243845][ T8359] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.307907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.315054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.410822][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.417938][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.673155][ T8359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.841914][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.881053][ T8359] veth0_vlan: entered promiscuous mode [ 262.891059][ T8359] veth1_vlan: entered promiscuous mode [ 262.913164][ T8359] veth0_macvtap: entered promiscuous mode [ 262.922017][ T8359] veth1_macvtap: entered promiscuous mode [ 262.963749][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.974478][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.992961][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.003629][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.039347][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.083743][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 263.249424][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.287291][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.311913][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.350989][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.410056][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.450469][ T8359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.476191][ T8359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.509244][ T8359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.538023][ T8359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.766667][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.798640][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.798764][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.815334][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.102886][ T8593] syzkaller0: entered promiscuous mode [ 264.109045][ T8593] syzkaller0: entered allmulticast mode [ 264.346169][ T8609] netlink: 'syz.1.742': attribute type 29 has an invalid length. [ 267.431575][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 268.155076][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 268.349507][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 268.421071][ T8602] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 268.430454][ T8607] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 268.438745][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.445931][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.514580][ T11] bond0: (slave bridge0): link status definitely down, disabling slave [ 268.563051][ T8609] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 268.597712][ T8673] vlan2: entered allmulticast mode [ 268.603768][ T8673] bond0: entered allmulticast mode [ 268.609087][ T8673] bond_slave_0: entered allmulticast mode [ 268.615185][ T8673] bond_slave_1: entered allmulticast mode [ 268.640531][ T8673] bond0: left allmulticast mode [ 268.645800][ T8673] bond_slave_0: left allmulticast mode [ 268.651998][ T8673] bond_slave_1: left allmulticast mode [ 268.904566][ T8682] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 268.932650][ T8682] netlink: 'syz.2.752': attribute type 10 has an invalid length. [ 268.968412][ T8682] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 268.968477][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 272.596295][ T8723] syzkaller0: entered promiscuous mode [ 272.617984][ T8723] syzkaller0: entered allmulticast mode [ 277.185292][ T8763] syzkaller0: entered promiscuous mode [ 277.224793][ T8763] syzkaller0: entered allmulticast mode [ 280.994350][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 281.321974][ T8795] syzkaller0: entered promiscuous mode [ 281.340829][ T8795] syzkaller0: entered allmulticast mode [ 292.913889][ T8908] syzkaller0: entered promiscuous mode [ 292.938978][ T8908] syzkaller0: entered allmulticast mode [ 304.645214][ T9024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.834'. [ 307.070856][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.845'. [ 312.565321][ T9114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.857'. [ 314.830742][ T9151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.870'. [ 317.292830][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.301241][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.638725][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.3.882'. [ 318.890468][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.893'. [ 319.154910][ T9225] FAULT_INJECTION: forcing a failure. [ 319.154910][ T9225] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 319.206922][ T9225] CPU: 0 UID: 0 PID: 9225 Comm: syz.2.896 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 319.217576][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.227644][ T9225] Call Trace: [ 319.230915][ T9225] [ 319.233842][ T9225] dump_stack_lvl+0x241/0x360 [ 319.238534][ T9225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.243726][ T9225] ? __pfx__printk+0x10/0x10 [ 319.248318][ T9225] ? __pfx_lock_release+0x10/0x10 [ 319.253350][ T9225] should_fail_ex+0x3b0/0x4e0 [ 319.258031][ T9225] _copy_from_user+0x2f/0xe0 [ 319.262626][ T9225] do_mcast_group_source+0x251/0x8e0 [ 319.267910][ T9225] ? __pfx_do_mcast_group_source+0x10/0x10 [ 319.273753][ T9225] ? __local_bh_enable_ip+0x168/0x200 [ 319.279124][ T9225] ? do_ip_setsockopt+0x1a2d/0x3cd0 [ 319.284349][ T9225] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 319.290071][ T9225] do_ip_setsockopt+0x1f36/0x3cd0 [ 319.295093][ T9225] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 319.300459][ T9225] ? aa_sk_perm+0x96d/0xab0 [ 319.304962][ T9225] ? __pfx_aa_sk_perm+0x10/0x10 [ 319.309808][ T9225] ? __pfx_lock_acquire+0x10/0x10 [ 319.314835][ T9225] ip_setsockopt+0x63/0x100 [ 319.319332][ T9225] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.325222][ T9225] do_sock_setsockopt+0x3af/0x720 [ 319.330243][ T9225] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 319.335781][ T9225] ? __fget_files+0x3f3/0x470 [ 319.340455][ T9225] ? __fget_files+0x29/0x470 [ 319.345042][ T9225] __sys_setsockopt+0x1a2/0x250 [ 319.349890][ T9225] __ia32_sys_setsockopt+0xb5/0xd0 [ 319.354994][ T9225] __do_fast_syscall_32+0xb4/0x110 [ 319.360098][ T9225] ? exc_page_fault+0x590/0x8c0 [ 319.364950][ T9225] do_fast_syscall_32+0x34/0x80 [ 319.369794][ T9225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.376122][ T9225] RIP: 0023:0xf7ff6579 [ 319.380187][ T9225] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 319.399796][ T9225] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 319.408214][ T9225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 319.416176][ T9225] RDX: 000000000000002e RSI: 00000000200000c0 RDI: 0000000000000104 [ 319.424138][ T9225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.432099][ T9225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 319.440146][ T9225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.448119][ T9225] [ 320.023789][ T5280] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 320.203230][ T5280] usb 3-1: too many configurations: 100, using maximum allowed: 8 [ 320.243771][ T5280] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 320.255211][ T5280] usb 3-1: can't read configurations, error -61 [ 320.382551][ T936] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 320.402586][ T5280] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 320.542637][ T936] usb 1-1: Using ep0 maxpacket: 32 [ 320.560380][ T936] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.572315][ T5280] usb 3-1: too many configurations: 100, using maximum allowed: 8 [ 320.607362][ T936] usb 1-1: config 0 has no interface number 0 [ 320.620075][ T5280] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 320.638340][ T5280] usb 3-1: can't read configurations, error -61 [ 320.650010][ T936] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.666409][ T5280] usb usb3-port1: attempt power cycle [ 320.675884][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.695511][ T936] usb 1-1: Product: syz [ 320.702286][ T936] usb 1-1: Manufacturer: syz [ 320.707054][ T936] usb 1-1: SerialNumber: syz [ 320.724132][ T936] usb 1-1: config 0 descriptor?? [ 320.755216][ T936] smsc95xx v2.0.0 [ 321.142550][ T5280] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 321.169552][ T936] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 321.181010][ T936] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 321.191412][ T5280] usb 3-1: too many configurations: 100, using maximum allowed: 8 [ 321.207048][ T5280] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 321.218028][ T5280] usb 3-1: can't read configurations, error -61 [ 321.362563][ T5280] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 321.389088][ T5280] usb 3-1: too many configurations: 100, using maximum allowed: 8 [ 321.407485][ T5280] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 321.418117][ T5280] usb 3-1: can't read configurations, error -61 [ 321.429888][ T5280] usb usb3-port1: unable to enumerate USB device [ 322.616008][ T936] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 322.639178][ T9265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.907'. [ 322.641335][ T936] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 322.670399][ T936] usb 1-1: USB disconnect, device number 10 [ 323.861907][ T9308] netlink: 32 bytes leftover after parsing attributes in process `syz.0.919'. [ 327.352500][ T5279] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 327.504779][ T5279] usb 2-1: config 252 has an invalid interface number: 254 but max is 0 [ 327.527625][ T5279] usb 2-1: config 252 has no interface number 0 [ 327.556742][ T5279] usb 2-1: config 252 interface 254 has no altsetting 0 [ 327.585464][ T5279] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 327.597035][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.646467][ T5279] usb 2-1: Product: syz [ 327.654732][ T5279] usb 2-1: Manufacturer: syz [ 327.660528][ T5279] usb 2-1: SerialNumber: syz [ 327.696227][ T5279] bfusb 2-1:252.254: probe with driver bfusb failed with error -5 [ 327.907936][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.995743][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.025023][ T5279] usb 2-1: USB disconnect, device number 22 [ 328.363989][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.930'. [ 328.544611][ T5280] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 328.579944][ T5280] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 328.810123][ T9350] syzkaller0: entered promiscuous mode [ 328.823092][ T9350] syzkaller0: entered allmulticast mode [ 330.802713][ T5279] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 330.966444][ T5279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.994404][ T5279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.011012][ T5279] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.020291][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.028371][ T5279] usb 4-1: SerialNumber: syz [ 331.323409][ T5279] usb 4-1: 0:2 : does not exist [ 331.460599][ T5279] usb 4-1: USB disconnect, device number 13 [ 331.507441][ T9333] udevd[9333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.142463][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 332.296767][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 332.305794][ T25] usb 4-1: config 107 has an invalid interface number: 29 but max is 0 [ 332.316117][ T25] usb 4-1: config 107 has no interface number 0 [ 332.322872][ T25] usb 4-1: config 107 interface 29 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 332.345679][ T25] usb 4-1: config 107 interface 29 has no altsetting 0 [ 332.367398][ T25] usb 4-1: New USB device found, idVendor=07ca, idProduct=a807, bcdDevice=87.10 [ 332.376646][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.388124][ T25] usb 4-1: Product: syz [ 332.393167][ T25] usb 4-1: Manufacturer: syz [ 332.409183][ T25] usb 4-1: SerialNumber: syz [ 332.626764][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.656850][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.173997][ T25] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in warm state. [ 333.226100][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 333.252308][ T25] dvbdev: DVB: registering new adapter (AVerMedia AVerTV DVB-T Volar) [ 333.277254][ T25] usb 4-1: media controller created [ 333.374383][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.432465][ T5279] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 333.461369][ T25] DVB: Unable to find symbol dib7000p_attach() [ 333.491435][ T25] dvb-usb: no frontend was attached by 'AVerMedia AVerTV DVB-T Volar' [ 333.582459][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 333.592818][ T25] Registered IR keymap rc-empty [ 333.614870][ T25] dvb-usb: could not initialize remote control. [ 333.621299][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.638894][ T5279] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 333.648122][ T25] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully initialized and connected. [ 333.669117][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.684627][ T25] dib0700: There's no endpoint for remote controller [ 333.724275][ T5279] usb 2-1: config 0 descriptor?? [ 333.775517][ T5279] pwc: Askey VC010 type 2 USB webcam detected. [ 333.899030][ T25] usb 4-1: USB disconnect, device number 14 [ 333.954199][ T9401] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 333.970364][ T5279] pwc: send_video_command error -71 [ 333.992253][ T5279] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 334.045581][ T5279] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 334.055705][ T25] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully deinitialized and disconnected. [ 334.125496][ T5279] usb 2-1: USB disconnect, device number 23 [ 334.502470][ T5279] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 334.674312][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.716724][ T5279] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 334.741213][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.832861][ T5279] usb 2-1: config 0 descriptor?? [ 334.863723][ T5279] pwc: Askey VC010 type 2 USB webcam detected. [ 335.263623][ T5279] pwc: recv_control_msg error -32 req 02 val 2b00 [ 336.862239][ T9427] syzkaller0: entered promiscuous mode [ 336.868798][ T9427] syzkaller0: entered allmulticast mode [ 337.061812][ T5279] pwc: recv_control_msg error -71 req 02 val 2700 [ 337.105394][ T5279] pwc: recv_control_msg error -71 req 02 val 2c00 [ 337.120253][ T5279] pwc: recv_control_msg error -71 req 04 val 1000 [ 337.137026][ T5279] pwc: recv_control_msg error -71 req 04 val 1300 [ 337.157539][ T5279] pwc: recv_control_msg error -71 req 04 val 1400 [ 337.238338][ T5279] pwc: recv_control_msg error -71 req 02 val 2000 [ 337.275944][ T5279] pwc: recv_control_msg error -71 req 02 val 2100 [ 337.295730][ T5279] pwc: recv_control_msg error -71 req 04 val 1500 [ 337.316225][ T5279] pwc: recv_control_msg error -71 req 02 val 2500 [ 337.318037][ T9434] FAULT_INJECTION: forcing a failure. [ 337.318037][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 337.338848][ T5279] pwc: recv_control_msg error -71 req 02 val 2400 [ 337.358714][ T5279] pwc: recv_control_msg error -71 req 02 val 2600 [ 337.372623][ T9434] CPU: 1 UID: 0 PID: 9434 Comm: syz.4.960 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 337.383263][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.393335][ T9434] Call Trace: [ 337.396612][ T9434] [ 337.399531][ T9434] dump_stack_lvl+0x241/0x360 [ 337.404205][ T9434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.409394][ T9434] ? __pfx__printk+0x10/0x10 [ 337.414150][ T9434] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 337.419698][ T9434] ? __pfx___might_resched+0x10/0x10 [ 337.425070][ T9434] should_fail_ex+0x3b0/0x4e0 [ 337.429745][ T9434] ? getname_flags+0xb7/0x540 [ 337.434412][ T9434] should_failslab+0xac/0x100 [ 337.439079][ T9434] ? getname_flags+0xb7/0x540 [ 337.443746][ T9434] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 337.449110][ T9434] getname_flags+0xb7/0x540 [ 337.453603][ T9434] user_path_at+0x24/0x60 [ 337.457923][ T9434] path_setxattr+0x224/0x4d0 [ 337.462526][ T9434] ? vfs_write+0x7bf/0xc90 [ 337.466934][ T9434] ? __pfx_path_setxattr+0x10/0x10 [ 337.472041][ T9434] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.478014][ T9434] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.484338][ T9434] __ia32_sys_lsetxattr+0xb8/0xd0 [ 337.489358][ T9434] __do_fast_syscall_32+0xb4/0x110 [ 337.494459][ T9434] ? exc_page_fault+0x590/0x8c0 [ 337.499303][ T9434] do_fast_syscall_32+0x34/0x80 [ 337.504138][ T9434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.510452][ T9434] RIP: 0023:0xf741d579 [ 337.514505][ T9434] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 337.534123][ T9434] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 00000000000000e3 [ 337.542527][ T9434] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000040 [ 337.550487][ T9434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.558448][ T9434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.566432][ T9434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 337.574416][ T9434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.582393][ T9434] [ 337.608025][ T5279] pwc: recv_control_msg error -71 req 02 val 2900 [ 337.635334][ T5279] pwc: recv_control_msg error -71 req 02 val 2800 [ 337.723466][ T5279] pwc: recv_control_msg error -71 req 04 val 1100 [ 337.737130][ T5279] pwc: recv_control_msg error -71 req 04 val 1200 [ 337.760773][ T5279] pwc: Registered as video71. [ 337.766908][ T5279] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 337.875001][ T5279] usb 2-1: USB disconnect, device number 24 [ 338.732571][ T936] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 338.872552][ T936] usb 4-1: device descriptor read/64, error -71 [ 339.152552][ T936] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 339.312576][ T936] usb 4-1: device descriptor read/64, error -71 [ 339.442708][ T936] usb usb4-port1: attempt power cycle [ 339.812557][ T936] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 339.866355][ T9463] netlink: 'syz.0.972': attribute type 21 has an invalid length. [ 339.873154][ T936] usb 4-1: device descriptor read/8, error -71 [ 339.874455][ T9463] netlink: 'syz.0.972': attribute type 1 has an invalid length. [ 339.888740][ T9463] netlink: 144 bytes leftover after parsing attributes in process `syz.0.972'. [ 340.143434][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 340.302527][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 340.329643][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 340.361941][ T25] usb 1-1: can't read configurations, error -61 [ 340.402450][ T936] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 340.512448][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 340.522427][ T936] usb 4-1: device descriptor read/8, error -71 [ 340.752445][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 340.768043][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 340.775888][ T25] usb 1-1: can't read configurations, error -61 [ 340.801498][ T25] usb usb1-port1: attempt power cycle [ 340.862808][ T936] usb usb4-port1: unable to enumerate USB device [ 341.152735][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 341.184698][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 341.196441][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 341.212733][ T25] usb 1-1: can't read configurations, error -61 [ 341.372501][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 341.423115][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 341.431297][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 341.450434][ T25] usb 1-1: can't read configurations, error -61 [ 341.479057][ T25] usb usb1-port1: unable to enumerate USB device [ 343.073768][ T9499] syzkaller0: entered promiscuous mode [ 343.086738][ T9499] syzkaller0: entered allmulticast mode [ 343.149901][ T9494] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 343.289729][ T9506] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.252501][ T9546] program syz.3.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.502787][ T5348] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 347.535730][ T5281] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 347.616254][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 347.616273][ T29] audit: type=1800 audit(1728381032.332:48): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.995" name="/" dev="fuse" ino=1 res=0 errno=0 [ 347.653859][ T5348] usb 2-1: Using ep0 maxpacket: 16 [ 347.662127][ T5348] usb 2-1: config index 0 descriptor too short (expected 6162, got 18) [ 347.681655][ T5348] usb 2-1: config 37 has too many interfaces: 216, using maximum allowed: 32 [ 347.692692][ T5348] usb 2-1: config 37 has an invalid descriptor of length 162, skipping remainder of the config [ 347.706335][ T5348] usb 2-1: config 37 has 0 interfaces, different from the descriptor's value: 216 [ 347.716494][ T5281] usb 3-1: config 0 has an invalid interface number: 170 but max is 0 [ 347.732587][ T5281] usb 3-1: config 0 has no interface number 0 [ 347.740239][ T5348] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 347.749574][ T5281] usb 3-1: config 0 interface 170 altsetting 68 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.749757][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.762543][ T5281] usb 3-1: config 0 interface 170 altsetting 68 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.778347][ T5348] usb 2-1: Product: syz [ 347.783575][ T5348] usb 2-1: Manufacturer: syz [ 347.788339][ T5348] usb 2-1: SerialNumber: syz [ 347.793433][ T5281] usb 3-1: config 0 interface 170 has no altsetting 0 [ 347.801076][ T5281] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 347.810282][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.820708][ T5281] usb 3-1: config 0 descriptor?? [ 347.834957][ T5348] r8152-cfgselector 2-1: Unknown version 0x0000 [ 348.236169][ T5281] uclogic 0003:5543:004D.0014: interface is invalid, ignoring [ 348.456003][ T5281] usb 3-1: USB disconnect, device number 17 [ 348.913135][ T5281] r8152-cfgselector 2-1: USB disconnect, device number 25 [ 349.238642][ T5233] Bluetooth: hci4: unexpected event for opcode 0x080d [ 349.761506][ T9594] usb usb8: usbfs: process 9594 (syz.1.1003) did not claim interface 0 before use [ 350.207335][ T9597] syzkaller0: entered promiscuous mode [ 350.213768][ T9597] syzkaller0: entered allmulticast mode [ 352.624595][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 352.818786][ T25] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.827384][ T25] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 352.860563][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.884055][ T25] usb 1-1: config 0 has no interface number 0 [ 352.890206][ T25] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.923982][ T25] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 352.933251][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.941237][ T25] usb 1-1: Product: syz [ 352.945953][ T25] usb 1-1: Manufacturer: syz [ 352.956634][ T25] usb 1-1: SerialNumber: syz [ 352.987699][ T25] usb 1-1: config 0 descriptor?? [ 353.023151][ T25] usb-storage 1-1:0.2: USB Mass Storage device detected [ 353.075952][ T25] usb-storage 1-1:0.2: Quirks match for vid 1908 pid 1315: 20000 [ 353.270593][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.274793][ T5233] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 353.287564][ T5233] Bluetooth: hci4: Injecting HCI hardware error event [ 353.295551][ T5233] Bluetooth: hci4: hardware error 0x00 [ 353.308147][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.330914][ T936] usb 1-1: USB disconnect, device number 15 [ 353.726999][ T9625] netlink: 'syz.4.1013': attribute type 3 has an invalid length. [ 353.773007][ T936] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 353.804694][ T9625] xt_CT: No such helper "snmp" [ 353.953720][ T936] usb 1-1: Using ep0 maxpacket: 8 [ 353.966666][ T936] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 353.981754][ T936] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.987232][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.001635][ T936] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.022965][ T936] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.038742][ T936] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.052131][ T9636] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1018'. [ 354.062241][ T936] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.077953][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.127795][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.233540][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 354.254416][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.299877][ T936] usb 1-1: GET_CAPABILITIES returned 0 [ 354.319763][ T936] usbtmc 1-1:16.0: can't read capabilities [ 354.376774][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.412804][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 354.429978][ T8] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 354.444635][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.456890][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.462566][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.465877][ T8] usb 5-1: Product: syz [ 354.483315][ T8] usb 5-1: Manufacturer: syz [ 354.487356][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.488194][ T8] usb 5-1: SerialNumber: syz [ 354.515641][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.524543][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 354.531771][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.536083][ T936] usb 1-1: USB disconnect, device number 16 [ 354.584972][ T8] usb 5-1: config 0 descriptor?? [ 354.632582][ T8] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 354.858788][ T5348] usb 5-1: USB disconnect, device number 9 [ 354.921221][ T52] bridge_slave_1: left allmulticast mode [ 354.947919][ T52] bridge_slave_1: left promiscuous mode [ 354.964509][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.999675][ T52] bridge_slave_0: left allmulticast mode [ 355.014136][ T52] bridge_slave_0: left promiscuous mode [ 355.030299][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.364025][ T5233] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 355.890046][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.904165][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.917276][ T52] bond0 (unregistering): Released all slaves [ 355.944107][ T5348] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 355.979524][ T9662] syzkaller0: entered promiscuous mode [ 355.998425][ T9662] syzkaller0: entered allmulticast mode [ 356.105877][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.152635][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.189512][ T5348] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 356.209130][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.229827][ T5348] usb 5-1: config 0 descriptor?? [ 356.635680][ T5233] Bluetooth: hci3: command tx timeout [ 357.532886][ T9688] netlink: 'syz.2.1029': attribute type 3 has an invalid length. [ 357.548441][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 358.176163][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 358.188802][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1030'. [ 358.473747][ T9653] chnl_net:caif_netlink_parms(): no params data found [ 358.576889][ T52] hsr_slave_0: left promiscuous mode [ 358.608554][ T5348] usbhid 5-1:0.0: can't add hid device: -71 [ 358.615424][ T5348] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 358.633722][ T52] hsr_slave_1: left promiscuous mode [ 358.640647][ T5348] usb 5-1: USB disconnect, device number 10 [ 358.666335][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.678745][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.712477][ T5233] Bluetooth: hci3: command tx timeout [ 358.719719][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.763553][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.918957][ T52] veth1_macvtap: left promiscuous mode [ 358.948260][ T52] veth0_macvtap: left promiscuous mode [ 358.976584][ T52] veth1_vlan: left promiscuous mode [ 359.006729][ T52] veth0_vlan: left promiscuous mode [ 359.201141][ T29] audit: type=1326 audit(1728381043.912:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 359.296672][ T29] audit: type=1326 audit(1728381043.912:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 359.767510][ T9745] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 360.158748][ T52] team0 (unregistering): Port device team_slave_1 removed [ 360.256840][ T52] team0 (unregistering): Port device team_slave_0 removed [ 360.795872][ T5233] Bluetooth: hci3: command tx timeout [ 360.891330][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 361.304318][ T9653] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.320341][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.346888][ T9653] bridge_slave_0: entered allmulticast mode [ 361.366824][ T9653] bridge_slave_0: entered promiscuous mode [ 361.384922][ T9653] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.422544][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.429755][ T9653] bridge_slave_1: entered allmulticast mode [ 361.464169][ T9653] bridge_slave_1: entered promiscuous mode [ 361.594694][ T9653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.635888][ T9653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.745438][ T9653] team0: Port device team_slave_0 added [ 361.776327][ T9784] pim6reg: entered allmulticast mode [ 361.794138][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 361.817015][ T9653] team0: Port device team_slave_1 added [ 361.825001][ T9792] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1051'. [ 361.834282][ T1863] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 361.855485][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 361.926452][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.942400][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.992893][ T9653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.012469][ T1863] usb 5-1: Using ep0 maxpacket: 32 [ 362.027493][ T1863] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 362.046264][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.066262][ T1863] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 362.076135][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.103258][ T9653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.121770][ T1863] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 362.131014][ T1863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.158422][ T1863] usb 5-1: Product: syz [ 362.170712][ T1863] usb 5-1: Manufacturer: syz [ 362.191742][ T1863] usb 5-1: SerialNumber: syz [ 362.219916][ T1863] usb 5-1: config 0 descriptor?? [ 362.232534][ T5348] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 362.249132][ T1863] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 362.256713][ T9799] syzkaller0: entered promiscuous mode [ 362.262292][ T9799] syzkaller0: entered allmulticast mode [ 362.308361][ T9653] hsr_slave_0: entered promiscuous mode [ 362.356555][ T9653] hsr_slave_1: entered promiscuous mode [ 362.369139][ T9653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.386628][ T5348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.397880][ T9653] Cannot create hsr debugfs directory [ 362.407379][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 362.440752][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 362.473432][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 362.500836][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.553497][ T5348] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 362.583518][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 362.652443][ T5348] usb 2-1: Product: syz [ 362.673452][ T5348] usb 2-1: Manufacturer: syz [ 362.678154][ T5348] usb 2-1: SerialNumber: syz [ 362.693207][ T5348] usb 2-1: config 0 descriptor?? [ 362.844633][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.869989][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.878983][ T5233] Bluetooth: hci3: command tx timeout [ 362.909298][ T5348] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 362.918433][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.935262][ T5348] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 362.958336][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.981169][ T1863] gspca_stk1135: reg_w 0x0 err -110 [ 362.993970][ T5348] usb 2-1: USB disconnect, device number 26 [ 363.006262][ T1863] gspca_stk1135: serial bus timeout: status=0x00 [ 363.045886][ T1863] gspca_stk1135: Sensor write failed [ 363.057587][ T1863] gspca_stk1135: serial bus timeout: status=0x00 [ 363.066837][ T1863] gspca_stk1135: Sensor write failed [ 363.076436][ T1863] gspca_stk1135: serial bus timeout: status=0x00 [ 363.116998][ T1863] gspca_stk1135: Sensor read failed [ 363.154984][ T1863] gspca_stk1135: serial bus timeout: status=0x00 [ 363.178484][ T1863] gspca_stk1135: Sensor read failed [ 363.214373][ T1863] gspca_stk1135: Detected sensor type unknown (0x0) [ 363.239572][ T1863] gspca_stk1135: serial bus timeout: status=0x00 [ 363.260187][ T1863] gspca_stk1135: Sensor read failed [ 363.268483][ T1863] gspca_stk1135: serial bus timeout: status=0x00 [ 363.282511][ T1863] gspca_stk1135: Sensor read failed [ 363.288025][ T1863] gspca_stk1135: serial bus timeout: status=0x00 [ 363.294818][ T1863] gspca_stk1135: Sensor write failed [ 363.304943][ T1863] gspca_stk1135: serial bus timeout: status=0x00 [ 363.314501][ T1863] gspca_stk1135: Sensor write failed [ 363.319975][ T1863] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 364.238763][ T936] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 364.408090][ T936] usb 2-1: Using ep0 maxpacket: 16 [ 364.414578][ T936] usb 2-1: no configurations [ 364.419415][ T936] usb 2-1: can't read configurations, error -22 [ 364.552763][ T936] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 364.707013][ T936] usb 2-1: Using ep0 maxpacket: 16 [ 364.713436][ T936] usb 2-1: no configurations [ 364.718089][ T936] usb 2-1: can't read configurations, error -22 [ 364.737284][ T936] usb usb2-port1: attempt power cycle [ 365.082653][ T936] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 365.110316][ T936] usb 2-1: Using ep0 maxpacket: 16 [ 365.121566][ T8] usb 5-1: USB disconnect, device number 11 [ 365.147753][ T936] usb 2-1: no configurations [ 365.152718][ T936] usb 2-1: can't read configurations, error -22 [ 365.283397][ T936] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 365.324766][ T936] usb 2-1: Using ep0 maxpacket: 16 [ 365.330964][ T936] usb 2-1: no configurations [ 365.339959][ T936] usb 2-1: can't read configurations, error -22 [ 365.362306][ T936] usb usb2-port1: unable to enumerate USB device [ 365.458963][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 365.973546][ T936] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 366.106236][ T9653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.142080][ T9653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.154435][ T936] usb 1-1: unable to get BOS descriptor or descriptor too short [ 366.172114][ T936] usb 1-1: not running at top speed; connect to a high speed hub [ 366.179939][ T9858] capability: warning: `syz.2.1066' uses deprecated v2 capabilities in a way that may be insecure [ 366.230097][ T936] usb 1-1: config 11 has an invalid interface number: 244 but max is 0 [ 366.230118][ T936] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 366.230130][ T936] usb 1-1: config 11 has no interface number 0 [ 366.230148][ T936] usb 1-1: config 11 interface 244 altsetting 133 endpoint 0x3 has invalid wMaxPacketSize 0 [ 366.230164][ T936] usb 1-1: config 11 interface 244 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.230180][ T936] usb 1-1: config 11 interface 244 has no altsetting 0 [ 366.231310][ T936] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 366.231328][ T936] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 366.231341][ T936] usb 1-1: Manufacturer: syz [ 366.231350][ T936] usb 1-1: SerialNumber: syz [ 366.277546][ T9653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.286586][ T9653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.447581][ T9653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.457281][ T9653] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.465377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.465458][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.477122][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.477202][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.543641][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 366.666359][ T9653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.677693][ T9653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.695152][ T936] peak_usb 1-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 366.707414][ T936] peak_usb 1-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 366.777855][ T9653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.794177][ T936] peak_usb 1-1:11.244: probe with driver peak_usb failed with error -71 [ 366.809105][ T9653] veth0_vlan: entered promiscuous mode [ 366.812068][ T936] usb 1-1: USB disconnect, device number 17 [ 366.820355][ T9653] veth1_vlan: entered promiscuous mode [ 366.849558][ T9653] veth0_macvtap: entered promiscuous mode [ 366.859140][ T9653] veth1_macvtap: entered promiscuous mode [ 366.864702][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 366.874159][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.885002][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.892410][ T9] usb 3-1: can't read configurations, error -61 [ 366.895062][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.911530][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.923830][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.016118][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.027518][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.036507][ T9865] FAULT_INJECTION: forcing a failure. [ 367.036507][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.037524][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.061336][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.072140][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.081571][ T9653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.090414][ T9653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.093406][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 367.099235][ T9653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.115647][ T9653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.178387][ T9865] CPU: 0 UID: 0 PID: 9865 Comm: syz.1.1067 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 367.189152][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.199237][ T9865] Call Trace: [ 367.202524][ T9865] [ 367.205468][ T9865] dump_stack_lvl+0x241/0x360 [ 367.210134][ T9865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.215339][ T9865] ? __pfx__printk+0x10/0x10 [ 367.219956][ T9865] ? snprintf+0xda/0x120 [ 367.224213][ T9865] should_fail_ex+0x3b0/0x4e0 [ 367.228883][ T9865] _copy_to_user+0x2f/0xb0 [ 367.233290][ T9865] simple_read_from_buffer+0xca/0x150 [ 367.238654][ T9865] proc_fail_nth_read+0x1e9/0x250 [ 367.243697][ T9865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.249234][ T9865] ? rw_verify_area+0x55e/0x6f0 [ 367.254072][ T9865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.259605][ T9865] vfs_read+0x201/0xbc0 [ 367.263750][ T9865] ? __pfx_lock_release+0x10/0x10 [ 367.268787][ T9865] ? __pfx_vfs_read+0x10/0x10 [ 367.273479][ T9865] ? __fget_files+0x3f3/0x470 [ 367.278148][ T9865] ? fdget_pos+0x24e/0x320 [ 367.282554][ T9865] ksys_read+0x183/0x2b0 [ 367.286783][ T9865] ? __pfx_ksys_read+0x10/0x10 [ 367.291531][ T9865] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 367.298128][ T9865] ? lockdep_hardirqs_on+0x99/0x150 [ 367.303316][ T9865] __do_fast_syscall_32+0xb4/0x110 [ 367.308413][ T9865] ? exc_page_fault+0x590/0x8c0 [ 367.313252][ T9865] do_fast_syscall_32+0x34/0x80 [ 367.318087][ T9865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.324401][ T9865] RIP: 0023:0xf747d579 [ 367.328453][ T9865] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 367.348046][ T9865] RSP: 002b:00000000f57665a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 367.356445][ T9865] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000f5766620 [ 367.364402][ T9865] RDX: 000000000000000f RSI: 00000000f746bff4 RDI: 0000000000000000 [ 367.372368][ T9865] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 367.380334][ T9865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 367.388289][ T9865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.396254][ T9865] [ 367.595323][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 367.604355][ T9] usb 3-1: can't read configurations, error -61 [ 367.624130][ T9] usb usb3-port1: attempt power cycle [ 367.650223][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.664779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.745240][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.755949][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.941125][ T9883] syzkaller0: entered promiscuous mode [ 367.956003][ T9883] syzkaller0: entered allmulticast mode [ 368.112493][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 368.149727][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 368.158014][ T9] usb 3-1: can't read configurations, error -61 [ 368.315123][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 368.407458][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 368.441960][ T9] usb 3-1: can't read configurations, error -61 [ 368.486377][ T9] usb usb3-port1: unable to enumerate USB device [ 369.332601][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 369.482493][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 369.505419][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.534948][ T5279] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 369.546503][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.586489][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 369.600667][ T5348] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 369.608557][ T25] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 369.619620][ T25] usb 1-1: Product: syz [ 369.630340][ T25] usb 1-1: Manufacturer: syz [ 369.664173][ T25] usb 1-1: config 0 descriptor?? [ 369.728047][ T5279] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.746001][ T5279] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.776546][ T5348] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 369.791229][ T5279] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.822479][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.830544][ T5279] usb 5-1: SerialNumber: syz [ 369.837377][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 369.857601][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 369.960945][ T5348] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 369.972560][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.980621][ T5348] usb 3-1: Product: syz [ 369.990743][ T5348] usb 3-1: Manufacturer: syz [ 369.995683][ T5348] usb 3-1: SerialNumber: syz [ 370.003019][ T5348] usb 3-1: config 0 descriptor?? [ 370.087640][ T25] kovaplus 0003:1E7D:2D50.0015: item fetching failed at offset 5/7 [ 370.097420][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.110286][ T25] kovaplus 0003:1E7D:2D50.0015: parse failed [ 370.117543][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.140453][ T25] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -22 [ 370.230080][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.339979][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.393860][ T8] usb 1-1: USB disconnect, device number 18 [ 370.603397][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.629701][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.729067][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.778234][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.949040][ T5348] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 370.965037][ T5348] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 371.001515][ T5348] usb 3-1: USB disconnect, device number 22 [ 371.391472][ T5233] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 373.457572][ T5279] usb 5-1: 0:2 : does not exist [ 373.490356][ T5279] usb 5-1: USB disconnect, device number 12 [ 373.611620][ T9399] udevd[9399]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.652864][ T1863] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 373.846611][ T1863] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 373.863855][ T1863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.872204][ T1863] usb 4-1: Product: syz [ 373.880220][ T1863] usb 4-1: Manufacturer: syz [ 373.894718][ T1863] usb 4-1: SerialNumber: syz [ 373.914100][ T1863] usb 4-1: config 0 descriptor?? [ 374.129761][ T1863] usb 4-1: ignoring: probably an ADSL modem [ 374.910391][ T1863] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 374.958270][ T1863] usb 4-1: USB disconnect, device number 19 [ 375.077710][T10049] netlink: 'syz.1.1087': attribute type 4 has an invalid length. [ 375.510204][ T5233] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 375.519126][ T5233] Bluetooth: hci1: Injecting HCI hardware error event [ 375.527721][ T5233] Bluetooth: hci1: hardware error 0x00 [ 375.816431][T10057] mmap: syz.3.1090 (10057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 376.558282][T10063] FAULT_INJECTION: forcing a failure. [ 376.558282][T10063] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 376.607594][T10063] CPU: 1 UID: 0 PID: 10063 Comm: syz.3.1091 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 376.618421][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.628513][T10063] Call Trace: [ 376.631824][T10063] [ 376.634779][T10063] dump_stack_lvl+0x241/0x360 [ 376.639491][T10063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.644830][T10063] ? __pfx__printk+0x10/0x10 [ 376.649463][T10063] should_fail_ex+0x3b0/0x4e0 [ 376.654177][T10063] prepare_alloc_pages+0x1da/0x5d0 [ 376.659321][T10063] __alloc_pages_noprof+0x166/0x6c0 [ 376.664542][T10063] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 376.670275][T10063] alloc_pages_mpol_noprof+0x3e8/0x680 [ 376.675828][T10063] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 376.681811][T10063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 376.687121][T10063] folio_alloc_mpol_noprof+0x36/0x50 [ 376.692419][T10063] __read_swap_cache_async+0x250/0x8e0 [ 376.697898][T10063] ? __pfx___read_swap_cache_async+0x10/0x10 [ 376.703886][T10063] ? blk_start_plug+0x53/0x1b0 [ 376.708654][T10063] swap_cluster_readahead+0x392/0x7f0 [ 376.714026][T10063] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 376.719916][T10063] ? xas_load+0x59b/0x5c0 [ 376.724247][T10063] swapin_readahead+0x1bb/0xdf0 [ 376.729089][T10063] ? filemap_get_entry+0x123/0x3b0 [ 376.734202][T10063] ? __pfx_swapin_readahead+0x10/0x10 [ 376.739571][T10063] ? __filemap_get_folio+0x949/0xbd0 [ 376.744871][T10063] ? swap_cache_get_folio+0xa6/0x570 [ 376.750185][T10063] do_swap_page+0x584/0x7b30 [ 376.754788][T10063] ? mt_find+0x6c8/0x920 [ 376.759040][T10063] ? mt_find+0x2a9/0x920 [ 376.763294][T10063] ? do_swap_page+0x15e/0x7b30 [ 376.768062][T10063] ? __pfx_do_swap_page+0x10/0x10 [ 376.773089][T10063] ? __pfx___pte_offset_map+0x10/0x10 [ 376.778474][T10063] ? __thp_vma_allowable_orders+0x8ed/0x9f0 [ 376.784370][T10063] ? pte_offset_map_nolock+0x137/0x1f0 [ 376.789830][T10063] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 376.795637][T10063] ? hugepage_vma_revalidate+0x4df/0x530 [ 376.801268][T10063] hpage_collapse_scan_pmd+0x21de/0x4dc0 [ 376.806975][T10063] ? hpage_collapse_scan_pmd+0x5f1/0x4dc0 [ 376.812705][T10063] ? hpage_collapse_scan_pmd+0x15f7/0x4dc0 [ 376.818536][T10063] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 376.824521][T10063] ? debug_object_free+0x3a6/0x460 [ 376.829631][T10063] ? __pfx_debug_object_free+0x10/0x10 [ 376.835088][T10063] ? __pfx_wait_for_completion+0x10/0x10 [ 376.840730][T10063] ? __pfx_lock_release+0x10/0x10 [ 376.845761][T10063] ? __pfx_wq_barrier_func+0x10/0x10 [ 376.851043][T10063] ? __mutex_unlock_slowpath+0x21d/0x750 [ 376.856670][T10063] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 376.862653][T10063] madvise_collapse+0x523/0xd30 [ 376.867508][T10063] ? __pfx_madvise_collapse+0x10/0x10 [ 376.872882][T10063] do_madvise+0xcb1/0x4720 [ 376.877294][T10063] ? mark_lock+0x9a/0x360 [ 376.881634][T10063] ? __pfx_do_madvise+0x10/0x10 [ 376.886478][T10063] ? __pfx_lock_acquire+0x10/0x10 [ 376.891496][T10063] ? get_pid_task+0x23/0x1f0 [ 376.896079][T10063] ? __pfx_lock_release+0x10/0x10 [ 376.901098][T10063] ? kstrtouint_from_user+0x128/0x190 [ 376.906480][T10063] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 376.912374][T10063] ? ksys_write+0x229/0x2b0 [ 376.916879][T10063] ? __pfx_lock_release+0x10/0x10 [ 376.921906][T10063] ? vfs_write+0x7bf/0xc90 [ 376.926319][T10063] ? __mutex_unlock_slowpath+0x21d/0x750 [ 376.931944][T10063] ? __pfx_vfs_write+0x10/0x10 [ 376.936700][T10063] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 376.942671][T10063] ? __fget_files+0x3f3/0x470 [ 376.947350][T10063] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.953679][T10063] __ia32_sys_madvise+0xa6/0xc0 [ 376.958526][T10063] __do_fast_syscall_32+0xb4/0x110 [ 376.963635][T10063] ? exc_page_fault+0x590/0x8c0 [ 376.968489][T10063] do_fast_syscall_32+0x34/0x80 [ 376.973333][T10063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.979654][T10063] RIP: 0023:0xf73bd579 [ 376.983802][T10063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 377.003401][T10063] RSP: 002b:00000000f568556c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 377.011811][T10063] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000600000 [ 377.019775][T10063] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 377.027743][T10063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.035706][T10063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 377.043670][T10063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.051645][T10063] [ 377.344879][T10075] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 377.363362][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 377.593491][ T5233] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 377.630177][T10081] fuse: Invalid uid '00000000000000000003' [ 377.666040][T10083] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 377.676366][T10083] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 377.756416][ T29] audit: type=1326 audit(1728381062.472:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 377.942452][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 378.032463][ T1863] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 378.055899][T10092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'. [ 378.068362][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'. [ 378.102804][ T8] usb 2-1: device descriptor read/64, error -71 [ 378.192488][ T1863] usb 1-1: Using ep0 maxpacket: 32 [ 378.205296][ T1863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.220582][ T1863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.238058][ T1863] usb 1-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19 [ 378.248791][ T1863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.259238][ T1863] usb 1-1: Product: syz [ 378.265486][ T1863] usb 1-1: Manufacturer: syz [ 378.270239][ T1863] usb 1-1: SerialNumber: syz [ 378.280044][ T1863] usb 1-1: config 0 descriptor?? [ 378.288029][ T1863] rndis_host 1-1:0.0: skipping garbage [ 378.295726][ T1863] usb 1-1: bad CDC descriptors [ 378.300740][ T1863] cdc_acm 1-1:0.0: skipping garbage [ 378.382763][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 378.491130][T10087] fuse: Invalid uid '00000000000000000003' [ 378.509713][ T29] audit: type=1326 audit(1728381063.222:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 378.542878][ T1863] usb 1-1: USB disconnect, device number 19 [ 378.558252][ T8] usb 2-1: device descriptor read/64, error -71 [ 378.627952][T10096] x_tables: duplicate underflow at hook 4 [ 378.693417][ T8] usb usb2-port1: attempt power cycle [ 378.714156][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.720567][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.744781][T10097] binder_alloc: 10091: binder_alloc_buf size 8 failed, no address space [ 378.754074][T10097] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 378.960977][T10104] FAULT_INJECTION: forcing a failure. [ 378.960977][T10104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.232431][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 379.332562][T10104] CPU: 1 UID: 0 PID: 10104 Comm: syz.3.1105 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 379.332613][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 379.332627][T10104] Call Trace: [ 379.332636][T10104] [ 379.332645][T10104] dump_stack_lvl+0x241/0x360 [ 379.332663][T10104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.332675][T10104] ? __pfx__printk+0x10/0x10 [ 379.332693][T10104] ? __pfx_lock_release+0x10/0x10 [ 379.332709][T10104] ? __lock_acquire+0x1384/0x2050 [ 379.332728][T10104] should_fail_ex+0x3b0/0x4e0 [ 379.332746][T10104] _copy_from_user+0x2f/0xe0 [ 379.332761][T10104] kstrtouint_from_user+0xc6/0x190 [ 379.332775][T10104] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 379.332789][T10104] ? __pfx_lock_acquire+0x10/0x10 [ 379.332810][T10104] proc_fail_nth_write+0xaa/0x2d0 [ 379.332827][T10104] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 379.332841][T10104] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 379.332860][T10104] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 379.332877][T10104] vfs_write+0x29c/0xc90 [ 379.332892][T10104] ? __pfx_vfs_write+0x10/0x10 [ 379.332906][T10104] ? __fget_files+0x3f3/0x470 [ 379.332924][T10104] ? fdget_pos+0x24e/0x320 [ 379.332938][T10104] ksys_write+0x183/0x2b0 [ 379.332950][T10104] ? __pfx_ksys_write+0x10/0x10 [ 379.332962][T10104] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 379.332978][T10104] ? lockdep_hardirqs_on+0x99/0x150 [ 379.332995][T10104] __do_fast_syscall_32+0xb4/0x110 [ 379.333006][T10104] ? exc_page_fault+0x590/0x8c0 [ 379.333023][T10104] do_fast_syscall_32+0x34/0x80 [ 379.333034][T10104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.333047][T10104] RIP: 0023:0xf73bd579 [ 379.333059][T10104] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 379.333068][T10104] RSP: 002b:00000000f56a65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 379.333083][T10104] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56a6620 [ 379.333092][T10104] RDX: 0000000000000001 RSI: 00000000f73abff4 RDI: 0000000000000000 [ 379.333099][T10104] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 379.333107][T10104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.333114][T10104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.333129][T10104] [ 379.343924][ T8] usb 2-1: device descriptor read/8, error -71 [ 379.527944][ T29] audit: type=1326 audit(1728381064.192:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 379.527990][ T29] audit: type=1326 audit(1728381064.192:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 379.528023][ T29] audit: type=1326 audit(1728381064.192:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 379.528044][ T29] audit: type=1326 audit(1728381064.192:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 379.528063][ T29] audit: type=1326 audit(1728381064.192:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 379.528103][ T29] audit: type=1326 audit(1728381064.192:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 379.528122][ T29] audit: type=1326 audit(1728381064.192:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 379.528140][ T29] audit: type=1326 audit(1728381064.192:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 379.592547][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 379.615632][ T8] usb 2-1: device descriptor read/8, error -71 [ 379.723236][ T8] usb usb2-port1: unable to enumerate USB device [ 382.092424][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 382.258277][ T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 382.267238][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.290129][ T9] usb 3-1: config 0 has no interface number 0 [ 382.310126][ T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 382.367916][ T9] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.446684][ T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 382.456861][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.467125][ T9] usb 3-1: Product: syz [ 382.489398][ T9] usb 3-1: Manufacturer: syz [ 382.506857][ T9] usb 3-1: SerialNumber: syz [ 382.568469][ T9] usb 3-1: config 0 descriptor?? [ 384.950248][ T1863] usb 3-1: USB disconnect, device number 23 [ 385.902485][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 386.087103][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 386.114879][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.151154][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.233129][ T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 386.246997][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.259639][ T9] usb 3-1: config 0 descriptor?? [ 386.475315][T10198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.499738][T10198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.606611][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 386.619218][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 386.694957][ T9] usb 3-1: USB disconnect, device number 24 [ 386.967591][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'. [ 387.542583][ T5279] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 387.707038][ T5279] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 387.727401][ T5279] usb 4-1: config 0 has no interface number 0 [ 387.751605][ T5279] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 387.790173][ T5279] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.825644][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.861447][ T5279] usb 4-1: config 0 descriptor?? [ 387.888706][ T5279] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 388.088693][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.142001][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.180406][ T9] usb 4-1: USB disconnect, device number 20 [ 388.192594][ T9] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 389.392561][ T5279] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 389.554225][ T5279] usb 1-1: Using ep0 maxpacket: 32 [ 389.584540][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.637393][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.687644][ T5279] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 389.730509][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.781986][ T5279] usb 1-1: config 0 descriptor?? [ 390.313293][ T5279] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 390.484746][ T5279] ft260 0003:0403:6030.0016: chip code: 5e81 abf2 [ 391.071965][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.303203][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.429093][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 391.429109][ T29] audit: type=1326 audit(1728381076.142:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 391.481536][ T29] audit: type=1326 audit(1728381076.142:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 391.514980][ T29] audit: type=1326 audit(1728381076.142:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 391.540234][ T29] audit: type=1326 audit(1728381076.142:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 391.569430][ T29] audit: type=1326 audit(1728381076.142:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 391.639515][ T29] audit: type=1326 audit(1728381076.142:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000 [ 391.724072][ T5279] usb 1-1: USB disconnect, device number 20 [ 391.797240][T10263] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1146'. [ 391.815716][T10263] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 391.936451][ T1863] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 392.106483][ T1863] usb 5-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 392.131133][ T1863] usb 5-1: config 1 interface 0 has no altsetting 0 [ 392.153859][ T1863] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 392.166918][ T1863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.178616][ T1863] usb 5-1: Product: syz [ 392.194247][ T1863] usb 5-1: Manufacturer: syz [ 392.208793][ T1863] usb 5-1: SerialNumber: syz [ 392.432529][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 392.594171][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 392.619913][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.688036][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 392.709038][ T1863] usbhid 5-1:1.0: can't add hid device: -71 [ 392.752368][ T1863] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 392.763878][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 392.779792][ T1863] usb 5-1: USB disconnect, device number 13 [ 392.787490][ T9] usb 2-1: Manufacturer: syz [ 392.841425][ T9] usb 2-1: config 0 descriptor?? [ 392.983211][ T9] rc_core: IR keymap rc-hauppauge not found [ 393.001291][ T9] Registered IR keymap rc-empty [ 393.050773][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 393.089394][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 395.010785][ T5282] usb 2-1: USB disconnect, device number 35 [ 395.842791][ T936] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 395.997310][ T936] usb 5-1: Using ep0 maxpacket: 32 [ 396.007091][ T936] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 396.019581][ T936] usb 5-1: config 0 has no interface number 0 [ 396.048433][ T936] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 396.070785][ T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.107211][ T936] usb 5-1: Product: syz [ 396.113686][ T936] usb 5-1: Manufacturer: syz [ 396.118371][ T936] usb 5-1: SerialNumber: syz [ 396.137012][ T936] usb 5-1: config 0 descriptor?? [ 396.149648][ T936] smsc95xx v2.0.0 [ 396.642519][ T936] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 396.694570][ T936] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 397.692443][ T5279] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 397.936370][ T5279] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45 [ 397.945719][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.965097][ T5279] usb 4-1: Product: syz [ 397.975361][ T5279] usb 4-1: Manufacturer: syz [ 397.986133][ T5279] usb 4-1: SerialNumber: syz [ 398.002497][ T5279] usb 4-1: config 0 descriptor?? [ 398.017442][ T5279] usb 4-1: Found UVC 0.00 device syz (8086:0b03) [ 398.027978][ T5279] usb 4-1: No valid video chain found. [ 398.228755][T10327] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1164'. [ 398.265032][T10327] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1164'. [ 398.340269][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.350609][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.454395][ T5279] usb 4-1: USB disconnect, device number 21 [ 399.107313][ T936] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 399.118295][ T936] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 399.143443][ T936] usb 5-1: USB disconnect, device number 14 [ 399.597896][ T5233] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 400.021579][T10376] fuse: Unknown parameter 'veth1_virt_wifi' [ 400.100576][T10378] netlink: 'syz.1.1181': attribute type 11 has an invalid length. [ 401.188754][T10391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1185'. [ 401.716970][T10396] fuse: Bad value for 'fd' [ 402.232699][T10410] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1190'. [ 402.269182][T10411] usb usb8: usbfs: process 10411 (syz.1.1189) did not claim interface 0 before use [ 402.602614][ T5279] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 402.623597][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 402.640369][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1193'. [ 402.807358][ T5279] usb 1-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 402.818429][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.842103][ T5279] usb 1-1: config 0 descriptor?? [ 402.894036][T10427] FAULT_INJECTION: forcing a failure. [ 402.894036][T10427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.936988][T10427] CPU: 0 UID: 0 PID: 10427 Comm: syz.4.1195 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 402.947806][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.957869][T10427] Call Trace: [ 402.961143][T10427] [ 402.964072][T10427] dump_stack_lvl+0x241/0x360 [ 402.968751][T10427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.973977][T10427] ? __pfx__printk+0x10/0x10 [ 402.978576][T10427] should_fail_ex+0x3b0/0x4e0 [ 402.983262][T10427] _copy_from_user+0x2f/0xe0 [ 402.987858][T10427] move_addr_to_kernel+0x82/0x150 [ 402.992887][T10427] get_compat_msghdr+0x425/0x730 [ 402.997832][T10427] ? __pfx_get_compat_msghdr+0x10/0x10 [ 403.003286][T10427] ? __sys_sendmmsg+0x4cb/0x730 [ 403.008145][T10427] ? kfree+0x4e/0x440 [ 403.012130][T10427] __sys_sendmmsg+0x467/0x730 [ 403.016894][T10427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 403.022091][T10427] ? __pfx_lock_acquire+0x10/0x10 [ 403.027125][T10427] ? get_pid_task+0x23/0x1f0 [ 403.031711][T10427] ? __pfx_lock_release+0x10/0x10 [ 403.036740][T10427] ? kstrtouint_from_user+0x128/0x190 [ 403.042140][T10427] ? ksys_write+0x229/0x2b0 [ 403.046654][T10427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.052643][T10427] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 403.058628][T10427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.064963][T10427] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 403.070508][T10427] __do_fast_syscall_32+0xb4/0x110 [ 403.075618][T10427] ? exc_page_fault+0x590/0x8c0 [ 403.080472][T10427] do_fast_syscall_32+0x34/0x80 [ 403.085325][T10427] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 403.091649][T10427] RIP: 0023:0xf741d579 [ 403.095710][T10427] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 403.115659][T10427] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 403.124074][T10427] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002940 [ 403.132042][T10427] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.140095][T10427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.148061][T10427] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 403.156034][T10427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.164017][T10427] [ 403.237889][T10430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1197'. [ 403.284842][T10430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 403.300419][T10430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 403.310548][T10430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 403.326530][T10430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 403.482711][ T5279] aquacomputer_d5next 0003:0C70:F010.0017: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.0-1/input0 [ 403.528951][T10444] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1201'. [ 403.654325][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.675916][ T5233] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 403.684778][ T5233] Bluetooth: hci0: Injecting HCI hardware error event [ 403.694621][ T5233] Bluetooth: hci0: hardware error 0x00 [ 403.732595][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.894851][ T5279] usb 1-1: USB disconnect, device number 21 [ 404.701626][T10475] FAULT_INJECTION: forcing a failure. [ 404.701626][T10475] name failslab, interval 1, probability 0, space 0, times 0 [ 404.774500][T10475] CPU: 1 UID: 0 PID: 10475 Comm: syz.4.1208 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 404.785281][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.795325][T10475] Call Trace: [ 404.798592][T10475] [ 404.801504][T10475] dump_stack_lvl+0x241/0x360 [ 404.806180][T10475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.811367][T10475] ? __pfx__printk+0x10/0x10 [ 404.815948][T10475] ? fs_reclaim_acquire+0x93/0x140 [ 404.821041][T10475] ? __pfx___might_resched+0x10/0x10 [ 404.826325][T10475] should_fail_ex+0x3b0/0x4e0 [ 404.831008][T10475] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 404.836723][T10475] should_failslab+0xac/0x100 [ 404.841399][T10475] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 404.847128][T10475] __kmalloc_noprof+0xd8/0x400 [ 404.851902][T10475] tomoyo_realpath_from_path+0xcf/0x5e0 [ 404.857455][T10475] tomoyo_path_number_perm+0x23a/0x880 [ 404.862926][T10475] ? tomoyo_path_number_perm+0x208/0x880 [ 404.868567][T10475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 404.874573][T10475] ? __pfx_lock_acquire+0x10/0x10 [ 404.879628][T10475] ? __fget_files+0x29/0x470 [ 404.884219][T10475] ? __fget_files+0x3f3/0x470 [ 404.888903][T10475] security_file_ioctl_compat+0xc6/0x2a0 [ 404.894548][T10475] __se_compat_sys_ioctl+0xd6/0xc90 [ 404.899750][T10475] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 404.905564][T10475] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 404.911544][T10475] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.917876][T10475] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 404.924466][T10475] ? lockdep_hardirqs_on+0x99/0x150 [ 404.929666][T10475] __do_fast_syscall_32+0xb4/0x110 [ 404.934772][T10475] ? exc_page_fault+0x590/0x8c0 [ 404.939630][T10475] do_fast_syscall_32+0x34/0x80 [ 404.944559][T10475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.950882][T10475] RIP: 0023:0xf741d579 [ 404.954944][T10475] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 404.974549][T10475] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 404.982963][T10475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002271 [ 404.990926][T10475] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.998891][T10475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.006855][T10475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 405.014821][T10475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.022800][T10475] [ 405.088324][T10475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.336222][T10480] binder: 10479:10480 ioctl 4018620d 0 returned -22 [ 405.504297][T10484] netlink: 'syz.0.1212': attribute type 12 has an invalid length. [ 405.541828][T10484] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1212'. [ 405.560220][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.629386][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.730536][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 405.763714][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 405.792509][ T5279] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 405.811270][T10491] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1214'. [ 405.814686][T10489] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1213'. [ 405.840469][ T5233] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 405.945540][ T5279] usb 5-1: device descriptor read/64, error -71 [ 405.972527][T10489] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1213'. [ 406.712736][ T5233] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 406.724339][ T5233] Bluetooth: hci3: Injecting HCI hardware error event [ 406.732865][ T5239] Bluetooth: hci3: hardware error 0x00 [ 407.187245][T10506] [ 407.189586][T10506] ====================================================== [ 407.196689][T10506] WARNING: possible circular locking dependency detected [ 407.203721][T10506] 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 Not tainted [ 407.210834][T10506] ------------------------------------------------------ [ 407.217859][T10506] syz.2.1220/10506 is trying to acquire lock: [ 407.223931][T10506] ffff888065a5ba98 (&mm->mmap_lock){++++}-{3:3}, at: upgrade_mmap_lock_carefully+0xb6/0x160 [ 407.234060][T10506] [ 407.234060][T10506] but task is already holding lock: [ 407.241423][T10506] ffff888074714aa0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 407.252140][T10506] [ 407.252140][T10506] which lock already depends on the new lock. [ 407.252140][T10506] [ 407.262527][T10506] [ 407.262527][T10506] the existing dependency chain (in reverse order) is: [ 407.271524][T10506] [ 407.271524][T10506] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 407.280212][T10506] lock_acquire+0x1ed/0x550 [ 407.285243][T10506] down_write+0x99/0x220 [ 407.290001][T10506] process_measurement+0x439/0x1fb0 [ 407.295710][T10506] ima_file_mmap+0x13d/0x2b0 [ 407.300810][T10506] security_mmap_file+0x7e7/0xa40 [ 407.306349][T10506] __se_sys_remap_file_pages+0x6e6/0xa50 [ 407.312491][T10506] __do_fast_syscall_32+0xb4/0x110 [ 407.318112][T10506] do_fast_syscall_32+0x34/0x80 [ 407.323476][T10506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.330316][T10506] [ 407.330316][T10506] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 407.337877][T10506] validate_chain+0x18ef/0x5920 [ 407.343242][T10506] __lock_acquire+0x1384/0x2050 [ 407.348607][T10506] lock_acquire+0x1ed/0x550 [ 407.353623][T10506] down_write_killable+0xab/0x260 [ 407.359163][T10506] upgrade_mmap_lock_carefully+0xb6/0x160 [ 407.365403][T10506] lock_mm_and_find_vma+0x107/0x2f0 [ 407.371115][T10506] exc_page_fault+0x1bf/0x8c0 [ 407.376306][T10506] asm_exc_page_fault+0x26/0x30 [ 407.381696][T10506] fault_in_readable+0x165/0x2b0 [ 407.387155][T10506] fault_in_iov_iter_readable+0x229/0x280 [ 407.393391][T10506] generic_perform_write+0x259/0x6d0 [ 407.399189][T10506] shmem_file_write_iter+0xf9/0x120 [ 407.404898][T10506] vfs_write+0xa6d/0xc90 [ 407.409648][T10506] ksys_write+0x183/0x2b0 [ 407.414484][T10506] __do_fast_syscall_32+0xb4/0x110 [ 407.420103][T10506] do_fast_syscall_32+0x34/0x80 [ 407.425464][T10506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.432305][T10506] [ 407.432305][T10506] other info that might help us debug this: [ 407.432305][T10506] [ 407.442522][T10506] Possible unsafe locking scenario: [ 407.442522][T10506] [ 407.449957][T10506] CPU0 CPU1 [ 407.455306][T10506] ---- ---- [ 407.460742][T10506] lock(&sb->s_type->i_mutex_key#12); [ 407.466203][T10506] lock(&mm->mmap_lock); [ 407.473048][T10506] lock(&sb->s_type->i_mutex_key#12); [ 407.481024][T10506] lock(&mm->mmap_lock); [ 407.485345][T10506] [ 407.485345][T10506] *** DEADLOCK *** [ 407.485345][T10506] [ 407.493470][T10506] 3 locks held by syz.2.1220/10506: [ 407.498654][T10506] #0: ffff888011b83438 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 407.507708][T10506] #1: ffff88801cb66420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 407.516672][T10506] #2: ffff888074714aa0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 407.527816][T10506] [ 407.527816][T10506] stack backtrace: [ 407.533693][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.2.1220 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 407.544442][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.554485][T10506] Call Trace: [ 407.557754][T10506] [ 407.560675][T10506] dump_stack_lvl+0x241/0x360 [ 407.565345][T10506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.570534][T10506] ? __pfx__printk+0x10/0x10 [ 407.575122][T10506] print_circular_bug+0x13a/0x1b0 [ 407.580139][T10506] check_noncircular+0x36a/0x4a0 [ 407.585067][T10506] ? __pfx_register_lock_class+0x10/0x10 [ 407.590716][T10506] ? __pfx_check_noncircular+0x10/0x10 [ 407.596178][T10506] ? lockdep_lock+0x123/0x2b0 [ 407.600873][T10506] ? validate_chain+0x11e/0x5920 [ 407.605810][T10506] validate_chain+0x18ef/0x5920 [ 407.610657][T10506] ? __pfx_validate_chain+0x10/0x10 [ 407.615862][T10506] ? __pfx_validate_chain+0x10/0x10 [ 407.621058][T10506] ? ima_match_policy+0x115/0x22f0 [ 407.626170][T10506] ? cgroup_rstat_updated+0x13b/0xc60 [ 407.631542][T10506] ? __pfx_validate_chain+0x10/0x10 [ 407.636747][T10506] ? mark_lock+0x9a/0x360 [ 407.641071][T10506] ? mark_lock+0x9a/0x360 [ 407.645391][T10506] ? __lock_acquire+0x1384/0x2050 [ 407.650415][T10506] ? mark_lock+0x9a/0x360 [ 407.654733][T10506] __lock_acquire+0x1384/0x2050 [ 407.659580][T10506] lock_acquire+0x1ed/0x550 [ 407.664080][T10506] ? upgrade_mmap_lock_carefully+0xb6/0x160 [ 407.669968][T10506] ? __pfx_lock_acquire+0x10/0x10 [ 407.674992][T10506] ? __pfx___might_resched+0x10/0x10 [ 407.680277][T10506] ? cmp_ex_search+0x74/0xa0 [ 407.684864][T10506] ? bsearch+0x98/0xc0 [ 407.688929][T10506] down_write_killable+0xab/0x260 [ 407.693941][T10506] ? upgrade_mmap_lock_carefully+0xb6/0x160 [ 407.699827][T10506] ? upgrade_mmap_lock_carefully+0xb6/0x160 [ 407.705713][T10506] ? __pfx_down_write_killable+0x10/0x10 [ 407.711333][T10506] ? fault_in_readable+0x165/0x2b0 [ 407.716469][T10506] ? find_vma+0xf9/0x170 [ 407.720733][T10506] ? __pfx_find_vma+0x10/0x10 [ 407.725521][T10506] ? fault_in_readable+0x165/0x2b0 [ 407.730652][T10506] upgrade_mmap_lock_carefully+0xb6/0x160 [ 407.736388][T10506] lock_mm_and_find_vma+0x107/0x2f0 [ 407.741588][T10506] exc_page_fault+0x1bf/0x8c0 [ 407.746270][T10506] asm_exc_page_fault+0x26/0x30 [ 407.751127][T10506] RIP: 0010:fault_in_readable+0x165/0x2b0 [ 407.756845][T10506] Code: b3 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 f5 c9 b3 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 407.776442][T10506] RSP: 0018:ffffc9000b5cfa20 EFLAGS: 00050283 [ 407.782518][T10506] RAX: ffffffff81e11ca7 RBX: 0000000020002000 RCX: 0000000000040000 [ 407.790488][T10506] RDX: ffffc90004a43000 RSI: 000000000000007e RDI: 000000000000007f [ 407.798457][T10506] RBP: ffffc9000b5cfad8 R08: ffffffff81e11c18 R09: ffffffff84b96d19 [ 407.806427][T10506] R10: 0000000000000002 R11: ffff888031dc0000 R12: 000000000000fe00 [ 407.814396][T10506] R13: dffffc0000000000 R14: 0000000020010000 R15: 1ffff920016b9f4c [ 407.822361][T10506] ? fault_in_iov_iter_readable+0x49/0x280 [ 407.828169][T10506] ? fault_in_readable+0xf8/0x2b0 [ 407.833192][T10506] ? fault_in_readable+0x187/0x2b0 [ 407.838306][T10506] ? seqcount_lockdep_reader_access+0x157/0x220 [ 407.844540][T10506] ? __pfx_fault_in_readable+0x10/0x10 [ 407.849994][T10506] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 407.856225][T10506] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 407.862805][T10506] ? inode_to_bdi+0x69/0xf0 [ 407.867298][T10506] fault_in_iov_iter_readable+0x229/0x280 [ 407.873013][T10506] generic_perform_write+0x259/0x6d0 [ 407.878292][T10506] ? __pfx_generic_perform_write+0x10/0x10 [ 407.884088][T10506] ? __pfx_generic_write_checks+0x10/0x10 [ 407.889799][T10506] ? rcu_read_lock_any_held+0xb7/0x160 [ 407.895248][T10506] ? file_update_time+0x2a0/0x430 [ 407.900266][T10506] shmem_file_write_iter+0xf9/0x120 [ 407.905458][T10506] vfs_write+0xa6d/0xc90 [ 407.909690][T10506] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 407.915496][T10506] ? __pfx_vfs_write+0x10/0x10 [ 407.920253][T10506] ? fdget_pos+0x24e/0x320 [ 407.924660][T10506] ksys_write+0x183/0x2b0 [ 407.928983][T10506] ? __pfx_ksys_write+0x10/0x10 [ 407.933825][T10506] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 407.940412][T10506] ? lockdep_hardirqs_on+0x99/0x150 [ 407.945606][T10506] __do_fast_syscall_32+0xb4/0x110 [ 407.950718][T10506] ? exc_page_fault+0x590/0x8c0 [ 407.955565][T10506] do_fast_syscall_32+0x34/0x80 [ 407.960403][T10506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.967155][T10506] RIP: 0023:0xf7ff6579 [ 407.971209][T10506] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 407.990804][T10506] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 407.999221][T10506] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000100 [ 408.007182][T10506] RDX: 000000000000fecc RSI: 0000000000000000 RDI: 0000000000000000 [ 408.015142][T10506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.023100][T10506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 408.031059][T10506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.039025][T10506] [ 408.132394][ T936] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 408.283033][ T936] usb 1-1: Using ep0 maxpacket: 8 [ 408.291994][ T936] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 408.301430][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.310444][ T936] usb 1-1: Product: syz [ 408.314702][ T936] usb 1-1: Manufacturer: syz [ 408.319466][ T936] usb 1-1: SerialNumber: syz [ 408.527764][ T936] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 409.033259][ T5239] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 410.157673][ T936] usb 1-1: USB disconnect, device number 22 [ 410.167176][ T936] usblp0: removed