last executing test programs: 12.400229402s ago: executing program 3 (id=2585): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x20, 0xfffffffd}, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) fcntl$dupfd(r0, 0x406, r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) r4 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, 0x0) syz_open_dev$video(0xffffffffffffffff, 0x7, 0x60801) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) syz_open_dev$vim2m(0x0, 0x408003, 0x2) r6 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0585605, 0x0) 11.617290638s ago: executing program 3 (id=2594): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x2, @local, 'wg2\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x50b101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000100)=0x9) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000020000040000000000000008000000000000002000000000000000"], 0x24, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = memfd_create(&(0x7f0000001e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7<\x7f\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$binfmt_elf32(r3, &(0x7f0000000540)=ANY=[], 0xa8) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r4, 0x1417, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0x37000, 0x0, 0x4000}]) dup3(r0, r1, 0x0) 9.651729334s ago: executing program 3 (id=2607): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 9.445158463s ago: executing program 3 (id=2608): syz_pidfd_open(0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) io_submit(0x0, 0x0, 0x0) iopl(0x3) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x10001) io_submit(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000190001000000000000000000000000000000000000000000000000000000fffd00000b0000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0xb4}}, 0x0) 8.929796755s ago: executing program 1 (id=2612): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000f00), 0x42, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00220f000000a32920de05077400000077"], 0x0}, 0x0) ppoll(&(0x7f00000010c0)=[{r0, 0x408}], 0x1, &(0x7f0000001100)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@deltfilter={0xee4, 0x2d, 0x29, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1}, {0x4, 0x7}, {0xfff1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x2}}, @filter_kind_options=@f_flow={{0x9}, {0x428, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x2ca6, 0x10000, 0xc1, 0x1400, 0x8, 0xef6a, 0xe, 0x7, 0x1, 0x5, 0x2c8400, 0x1ff, 0x7, 0x2, 0x9, 0x4, 0x2, 0x5, 0x80000000, 0x3, 0x4, 0x2, 0x0, 0xa621, 0x8, 0x4, 0x1, 0x7, 0xfffffffa, 0xf7, 0x101, 0x1, 0x9, 0x2, 0x1, 0x4, 0xa9a9, 0x90bc, 0x1, 0x6, 0x7, 0x1, 0x8, 0x401, 0x16, 0x2, 0x8, 0x4, 0x4, 0x5, 0x9, 0x4, 0x9, 0x8, 0x8, 0x5, 0x8, 0x4, 0xa4, 0x1, 0xfff, 0x7, 0x1, 0x0, 0xa, 0x9, 0x8, 0xea7, 0x3ff, 0xffc00000, 0x0, 0x4, 0x5, 0x5, 0x0, 0x1c000, 0x7, 0x2, 0x2, 0x3f8, 0x3, 0x4, 0x7fff, 0x7fff, 0x40, 0x0, 0x1, 0x2, 0x7, 0x80, 0x47d81a0e, 0x10000, 0x13, 0x4, 0x7, 0x9, 0x4, 0x6, 0x43b9528f, 0x4, 0xff, 0x10, 0xfffff800, 0xa, 0x6, 0x8, 0x2, 0x800, 0x1000000, 0x8, 0x16a7, 0x1, 0x35, 0x4, 0x5, 0xfffff619, 0x4, 0x6, 0xffff, 0x1, 0x401, 0x377, 0x101, 0x7, 0xd7, 0x100, 0x40, 0x4, 0x4000000, 0x9, 0x6d, 0x3, 0x239a, 0x200, 0x4f, 0x0, 0x7, 0x2, 0x10, 0x0, 0x8, 0xfffffffe, 0x0, 0x881e, 0x5, 0x9, 0x6, 0x8, 0x34f, 0x70c9, 0x200, 0x4dc, 0x4, 0x8001, 0x100, 0x7, 0x1, 0x1, 0x40, 0x1, 0x6, 0x7, 0x0, 0x8, 0x2, 0x9, 0x550, 0x5, 0xd82, 0x2, 0x6, 0x10000, 0x9, 0x2, 0xffff, 0x2, 0xa, 0xffff0000, 0x903d, 0x9, 0x8, 0x4f84cf0, 0x8, 0x7, 0x8, 0xffffff77, 0x3, 0x1, 0x2, 0xffff4022, 0x0, 0x9, 0xafe, 0x5, 0x6, 0xfff, 0xffffffff, 0x8, 0x4, 0xffffffff, 0x1, 0x3, 0x63, 0x0, 0x7, 0x80, 0x2, 0x4, 0x4fb5911a, 0x425, 0x6, 0x80000001, 0x1, 0x2, 0x2, 0xfffffff2, 0x3ff, 0x5, 0x200, 0x7, 0x6, 0x9, 0x10000000, 0xfffff306, 0x5, 0x7, 0x8, 0x699, 0x9, 0xffffffff, 0x3ff, 0x5b9, 0x6, 0x5, 0x6, 0x1, 0xff, 0x2, 0xb, 0x7f, 0x1, 0x4, 0x3, 0x1, 0x7ff, 0x2, 0x8, 0x7, 0x9, 0x9, 0xf06, 0x9, 0x3, 0x5, 0x5]}]}, @TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x36}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @filter_kind_options=@f_u32={{0x8}, {0xa74, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xb}}, @TCA_U32_SEL={0x634, 0x5, {0x7, 0x10, 0x16, 0x4, 0x7, 0x4, 0x7cc, 0x2, [{0x3, 0x8, 0x1000, 0x5}, {0x10000, 0x1000, 0x3}, {0x5, 0x567, 0x0, 0x6}, {0x6, 0x9, 0x6, 0x2}, {0x873, 0xa1, 0x0, 0xc}, {0x6, 0x7000000}, {0x8, 0xfffffff7, 0xd9, 0x40}, {0x0, 0x4, 0xff, 0x3}, {0x2, 0x6, 0x30c, 0x4}, {0x1, 0x3, 0x81, 0xfffffffe}, {0xc, 0x3, 0x5, 0xf5}, {0x5, 0x0, 0x3, 0x7}, {0x5, 0x10000, 0x1000, 0x9}, {0x1, 0x4, 0x4, 0x7}, {0x7284, 0x8, 0x81, 0xfffffffa}, {0xf71d, 0xffff, 0xff, 0xcaf2}, {0x1, 0x5, 0xcf, 0x9}, {0x10001, 0x10000, 0x9, 0x8}, {0x9, 0x2, 0x9, 0xfffffffe}, {0x1, 0x7, 0x7fff, 0x3}, {0x8, 0xa, 0x4, 0x1ff}, {0x10, 0xc69, 0x1, 0xb}, {0x37d, 0x37, 0x2, 0x6}, {0x8, 0x80000000, 0x9, 0x6eb}, {0x7ff, 0x1, 0xfffffc01, 0x2}, {0x10000, 0x8, 0x8, 0x8}, {0xa8, 0x7fffffff, 0x2, 0x101}, {0x8, 0x6, 0xfffffffb, 0xc}, {0x4, 0x200, 0xfffffff8}, {0x8001, 0x1, 0x0, 0x72}, {0x5, 0x80000001, 0x3, 0xd3}, {0x6, 0x2, 0x42c, 0x8}, {0x2, 0x657b, 0x101, 0xffff}, {0x0, 0x2, 0x8}, {0x8, 0x8, 0x200, 0x9a}, {0xa00000, 0x0, 0xffffffff, 0xe02}, {0xe, 0x7, 0x3, 0x7}, {0xffffe079, 0x5, 0x1dcd, 0x96b}, {0x0, 0xff, 0x7, 0x47a1}, {0x80000000, 0x9, 0x6, 0xa}, {0xd8e, 0x1, 0xc15, 0x333c}, {0x4, 0x0, 0x3, 0x1d1}, {0xe, 0x800, 0x4, 0xfff}, {0xfffffff9, 0x1, 0x0, 0x1}, {0x5, 0x80, 0xfffffeff, 0x1}, {0x6, 0x7, 0xff, 0x640a}, {0x8, 0x7fff8, 0x3ff, 0x3}, {0xf, 0x5, 0x1ff, 0x161a}, {0x971, 0x3, 0x4, 0xc4}, {0x8, 0x8, 0x4, 0x3}, {0x1ff, 0x6, 0x1, 0x54ddb998}, {0xedf, 0x9, 0x3ff, 0x3}, {0x1, 0x3, 0x6}, {0x6, 0x9, 0x0, 0x5}, {0x8, 0x5, 0x8001, 0x5}, {0x9, 0x2, 0xfffffffb}, {0x3, 0x3, 0x2, 0x2}, {0x28b8, 0x6, 0x101, 0x9}, {0x4, 0x5, 0xffffffff, 0x3ff}, {0x3a90000, 0x7fff, 0x1e6, 0xffff6f67}, {0x8, 0x4, 0x8f, 0xb}, {0xb4c, 0x4, 0x6, 0x6a}, {0x4, 0x8, 0x9, 0xbad}, {0x601, 0x0, 0xfffffff8, 0xd}, {0x5, 0x1, 0x2, 0x8}, {0x81, 0x3, 0x50, 0xac7}, {0xe, 0x800, 0x0, 0x1000}, {0x7f, 0x9, 0xf8, 0x3ff}, {0x7f, 0x4, 0x1ff, 0x6}, {0x2, 0xfffffff9, 0x7f, 0x6}, {0x5, 0x4b51, 0x4, 0x7}, {0x3, 0x3, 0x6b, 0x400}, {0xffff, 0x84, 0x7, 0x8}, {0xffff8000, 0x9, 0x5, 0xe886}, {0x9, 0xfffffff8, 0x2, 0x80}, {0x7, 0x1, 0x9, 0x1}, {0x0, 0x6, 0xd893, 0xfffffffc}, {0xc, 0x3, 0xfffffff7, 0x50798025}, {0x1, 0xf258, 0x8, 0x7fffffff}, {0x1, 0x1, 0x6, 0x400}, {0xaf, 0x8a, 0x100}, {0x3, 0x7, 0xfffffffe, 0x9}, {0x1, 0x3, 0x80, 0x1}, {0x7a3, 0x2, 0x0, 0x4}, {0x0, 0x7f, 0x2802, 0x2000}, {0x10, 0x10001, 0x1, 0x4ae}, {0x1, 0x401, 0xc15c, 0x101}, {0x5, 0x2, 0x7, 0x1}, {0x7, 0xfffffff8, 0xc, 0x8}, {0x4, 0xa69, 0xffffffff, 0x30}, {0x1, 0x0, 0x4, 0x4}, {0x7ff, 0xff, 0xc88, 0x2f}, {0x2, 0x4, 0x2, 0x1}, {0x80000000, 0x1, 0x1, 0x7}, {0x7, 0x4, 0x5, 0x7}, {0x4, 0x7, 0x5, 0xf}, {0x6, 0x67b9, 0xfff, 0x1c}, {0x5, 0x7f, 0x1000, 0x7}]}}, @TCA_U32_LINK={0x8, 0x3, 0xa}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x5}}, @TCA_U32_POLICE={0x41c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x80, 0x10, 0x3, 0x7, 0x1, 0x1, 0x9, 0x2, 0x800, 0x6, 0xffff0000, 0x1, 0x200, 0x4, 0x80000001, 0xd902, 0xc5, 0x6, 0x6, 0x1, 0x5, 0xfab, 0x476, 0x4, 0x7, 0x8081, 0xffff, 0x89, 0xd4, 0x9, 0x3, 0x400, 0x101, 0xb, 0x3, 0xd, 0x3, 0x9, 0x80000001, 0x2c, 0x3, 0x8, 0x7, 0x6d3280c3, 0x5, 0x3, 0x200, 0xbd3e, 0xb7, 0x3ff, 0x2, 0x5, 0x8000, 0x26294000, 0x7, 0x6, 0x80000000, 0xfffffff7, 0x10000, 0xfffff00d, 0x5, 0x2, 0x5, 0x9, 0x8, 0x73, 0x1, 0xd, 0x1, 0x6, 0x71, 0x5, 0x7, 0x1, 0xffffffff, 0x9, 0x5, 0x10000, 0x2, 0xe, 0x0, 0x204e, 0x0, 0x7fff, 0x30000000, 0x100, 0x81, 0x3, 0x80000000, 0x2, 0x0, 0x3, 0x80000001, 0x9, 0xd, 0x0, 0xfffffff9, 0x0, 0x6, 0x0, 0x9, 0xb029, 0x1, 0x8000000, 0x7fff, 0xe, 0x4, 0x8, 0x1, 0x66bf89af, 0x9, 0x7, 0x9, 0xa6, 0x5, 0xb, 0x1, 0xf844, 0x2, 0x9, 0x2, 0x7, 0x10001, 0x10, 0x4, 0xea, 0x3, 0x7, 0x8a20, 0xffffffff, 0x40, 0x33, 0x1, 0xf, 0x81, 0xffff8000, 0x80000001, 0x3, 0x8f4e, 0x4f3, 0xfffffc01, 0x1, 0x4, 0x1, 0xffffa3d2, 0x4, 0x7, 0x0, 0x6, 0x4, 0x101, 0x2c, 0x932, 0xc6, 0x4, 0x40, 0x4, 0x875, 0xaf, 0x7f, 0x8, 0x91, 0x4, 0x7, 0xdd0, 0x4be, 0x4, 0x6, 0xffffffff, 0x5, 0x6, 0x3ff, 0x4, 0x8, 0xd, 0x2, 0x3ff, 0xffff, 0x9, 0x362, 0x1, 0x4, 0x6, 0xf, 0x51, 0x5, 0x9, 0x0, 0x0, 0x4, 0x9, 0xfffffffe, 0x1ff, 0x0, 0x503e, 0x96, 0x0, 0x40, 0x2, 0x4, 0x4, 0x8, 0x0, 0x1e5, 0x91, 0xe1cd, 0x8001, 0x9, 0xfffffffb, 0x4, 0x6, 0x3ff, 0x4, 0x6db, 0x7, 0x3, 0x409, 0x9, 0x85, 0x4, 0x0, 0x4, 0x2c63, 0x14ed, 0x2, 0x8, 0x57, 0xca, 0x8, 0x8, 0x1, 0x6, 0xffff, 0x8, 0x8, 0x3, 0x4, 0x7, 0x9, 0x2, 0x58c, 0x5, 0x7f, 0x101, 0x0, 0x1, 0x496, 0x2, 0x80000001, 0xdbb, 0x6, 0x40, 0x0, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0xee4}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setsig(r2, 0xa, 0xf) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000"], 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000340)={0x1, @pix_mp={0x3, 0x8, 0x4f565559, 0x8, 0x3, [{0x80000001, 0x71b3}, {0x6, 0x5}, {0x4, 0x7}, {0xab6, 0x3}, {0x8, 0x5}, {0x7, 0x5}, {0x8000, 0x80000000}, {0xd, 0x4}], 0x1, 0x8e, 0x7}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8971, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f00000001c0), 0x4) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0xfffffe01, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000001c0)={0x3a, @remote, 0x4e22, 0x0, 'lblcr\x00', 0x4, 0x5, 0x52}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x1, 'veth1_vlan\x00', {}, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 8.226512011s ago: executing program 2 (id=2614): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x6, 0x3, 0x7, 0x7613}, {0x6, 0x2, 0x8, 0x2b52}, {0x5, 0x9, 0x9, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x0, 0xede8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) io_uring_setup(0x3215, &(0x7f0000000180)={0x0, 0xfffffffc, 0x1000, 0x203}) fcntl$lock(r0, 0x7, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x32, 0x0, 0x4000, @void, @value}, 0x20) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0xfc26) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000006001d000000000005001b00110000000900000035ce49c39f00a74ccf"], 0x2c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711e5dc0b6a0812"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'wg1\x00', 0x2000}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002) 7.999588054s ago: executing program 4 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x0) 6.824758488s ago: executing program 2 (id=2616): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000001140)=""/4051, 0xfd3}, {&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000003c0)=""/68, 0x44}], 0xa}, 0x40000000) 6.824014752s ago: executing program 4 (id=2617): memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec)\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="c00000002800010000000000fddbdf25fe800000000000000000000000000000fc0100000000000000000000000000010000000000000000020000002e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000500000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000050000000000000000000000000000000300000008000000000000030c000800"], 0xc0}}, 0x0) 6.568147704s ago: executing program 4 (id=2618): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.400995444s ago: executing program 2 (id=2620): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) unshare(0x8040400) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x40081271, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) process_vm_readv(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/241, 0xf1}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000002580)=""/9, 0x9}], 0x6, &(0x7f0000003b00)=[{&(0x7f0000002600)=""/18, 0x12}, {0x0}, {&(0x7f00000026c0)=""/176, 0xb0}, {&(0x7f0000002780)=""/213, 0xd5}, {&(0x7f0000002880)=""/89, 0x59}, {&(0x7f0000002900)=""/168, 0xa8}, {&(0x7f00000029c0)=""/44, 0x2c}, {&(0x7f0000002a00)=""/240, 0xf0}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x9, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "02cd1af5b897b2f9b533bae77401388ee8fc3e676945ca61", "87288f6509e07f9fb4d336f82e41654d8f8bd447c7bd59f37bc08c53cfd99353"}}}}}}}, 0x0) socket$inet(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in6=@rand_addr=' \x01\x00'}}, 0xe4) 6.251423569s ago: executing program 1 (id=2621): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$urandom(0xffffff9c, &(0x7f0000000300), 0x100, 0x0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setownex(r1, 0xf, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/142, 0x8e}], 0x1, 0x0, 0x0) read(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff000109022400010000300009040000010300020009210700b90122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0000100000006278ae9f69769ad589d78bc6f919bca9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xb, 0x800, 0x0, 0x3fffe}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x95ff, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r9], 0xb0}}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x5, 0xc7f, @l2={'ib', 0x3a, 'veth0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040880}, 0x80) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000980)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) 6.01304839s ago: executing program 4 (id=2622): syz_usb_connect(0x0, 0xe4, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb31ae201d0640c11dc1000000010902d20001180000000904"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x1000]}}]}]}]}, 0x38}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x109, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8206, 0x14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0x5e}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/136, 0x88, 0x10020, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x100}, 0x80) 5.902964009s ago: executing program 0 (id=2623): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0xa28, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0xa78) openat$kvm(0xffffffffffffff9c, 0x0, 0x751400, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0xffffffff, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x80}]}}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) socket$rds(0x15, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xfe701) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x3fffffff, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000400)={0xa, 0x4e21, 0x1000000080000, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000080)={0x0, 0x3, 0x0, "b80100000000000000000000000000000000000000000000b700"}) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) syz_emit_ethernet(0x46, &(0x7f0000002480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ed00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xc0}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000140)={0xdb, 0x0, 0x8}) write$binfmt_elf32(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1787], 0x6fb) sendmsg$inet_sctp(r4, &(0x7f00000002c0)={&(0x7f0000000400)=@in6={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000844400000500000000000000f7ffffff0f0000008400000007"], 0x24}, 0x80) 5.327396429s ago: executing program 0 (id=2624): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f00000000c0)=0x98) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) syz_usb_connect(0x0, 0x73, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x1a, 0xe8, 0xb3, 0x8, 0x2c7c, 0x620, 0x81d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0xd, 0x9, 0x90, 0xfa, [{{0x9, 0x4, 0x8e, 0x2, 0x0, 0xff, 0x5, 0x34, 0x80}}, {{0x9, 0x4, 0xe2, 0x4, 0x3, 0xad, 0x75, 0x4d, 0x8, [], [{{0x9, 0x5, 0x3, 0xc, 0x8, 0x2, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x13, 0x77e, 0x5e, 0x7, 0x9, [@generic={0x24, 0xb, "996ba38ce10b072118fc4e52279cdbeb677b38ebee8e67da4c1607a026f018394480"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x31, 0xb}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x3, 0x1, 0x1e, 0x10, 0x7f}, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050f100002071002004effff03100b9d96d0c190ef2e45bf1a06cf87e8124116d9cf6ce0a4cd9457b29b90924415927b44b5219b1ac46e3c6b9500dceb7a4d2eaf50972a594e9bac732a9b930df2cc2e47c6ce2169165557cae1ddc776a9adbab7891c722354c065919be95da9c318ac59ba19530ee0ffc7cdfbdd312e09b300478c86cbb191d022235642798f69c0936cb7e796789d715a74e92d0cfc97b6122e19b0b4464a0ae9129bd8694d2a92f008bc0bc2724338844459c75dfb076e671a9f5ceb0e37b2cbd0712cb64b5f71316a19a313f827d58141fe166eceb665"], 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x814}}]}) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030601030000000046000002000000"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x30, r2, 0xaaf9c000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_disconnect(r0) 3.87928044s ago: executing program 1 (id=2625): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f00000000c0)=0x98) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) syz_usb_connect(0x0, 0x73, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x1a, 0xe8, 0xb3, 0x8, 0x2c7c, 0x620, 0x81d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0xd, 0x9, 0x90, 0xfa, [{{0x9, 0x4, 0x8e, 0x2, 0x0, 0xff, 0x5, 0x34, 0x80}}, {{0x9, 0x4, 0xe2, 0x4, 0x3, 0xad, 0x75, 0x4d, 0x8, [], [{{0x9, 0x5, 0x3, 0xc, 0x8, 0x2, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x13, 0x77e, 0x5e, 0x7, 0x9, [@generic={0x24, 0xb, "996ba38ce10b072118fc4e52279cdbeb677b38ebee8e67da4c1607a026f018394480"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x31, 0xb}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x3, 0x1, 0x1e, 0x10, 0x7f}, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050f100002071002004effff03100b9d96d0c190ef2e45bf1a06cf87e8124116d9cf6ce0a4cd9457b29b90924415927b44b5219b1ac46e3c6b9500dceb7a4d2eaf50972a594e9bac732a9b930df2cc2e47c6ce2169165557cae1ddc776a9adbab7891c722354c065919be95da9c318ac59ba19530ee0ffc7cdfbdd312e09b300478c86cbb191d022235642798f69c0936cb7e796789d715a74e92d0cfc97b6122e19b0b4464a0ae9129bd8694d2a92f008bc0bc2724338844459c75dfb076e671a9f5ceb0e37b2cbd0712cb64b5f71316a19a313f827d58141fe166eceb665"], 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x814}}]}) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030601030000000046000002000000"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x30, r2, 0xaaf9c000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_disconnect(r0) 1.763665197s ago: executing program 0 (id=2626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0xffffffff, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x54}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 1.655657221s ago: executing program 4 (id=2627): syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x68, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/142, 0x8e}, {0x0}], 0x2) io_uring_setup(0x1694, &(0x7f0000000080)) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) write$proc_mixer(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x2b) dup3(r2, r1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x5d}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_writepages_result\x00', r4, 0x0, 0x8}, 0x18) 1.572005245s ago: executing program 0 (id=2628): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0xfffffdac}}, 0x1006) 1.229772778s ago: executing program 2 (id=2629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000010101030000000000000000020000000c001980080002000f0400003c0002802c00018014000300fe8000000000000000002100000000aa130004"], 0x5c}}, 0x0) 1.0595453s ago: executing program 2 (id=2630): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05840000000000000109022400010000000009040400010300000009210000000122050009058103"], 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x300}}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100fcffffff000000000a00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102377, 0x18fe9}], 0x1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PIO_FONTRESET(r8, 0x541b, 0x20000000) mlockall(0x1) mremap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ff5000/0x2000)=nil) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r9, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r10 = syz_io_uring_setup(0x61e1, &(0x7f00000001c0)={0x0, 0x57c9, 0x406, 0x10000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000001180)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}) io_uring_enter(r10, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.053470199s ago: executing program 1 (id=2631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc, @l2tp={0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x1000000}) 917.745038ms ago: executing program 0 (id=2632): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196"], 0x14}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x0, 0x25dfdc00, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5b}}}}}, 0x20}}, 0x0) 735.604545ms ago: executing program 1 (id=2633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f0000002340)=[{&(0x7f0000000600)="fe", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0, 0x0, 0x0, 0x0, 0xb]}, 0x45c) 631.483269ms ago: executing program 1 (id=2634): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$urandom(0xffffff9c, &(0x7f0000000300), 0x100, 0x0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setownex(r1, 0xf, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/142, 0x8e}], 0x1, 0x0, 0x0) read(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff000109022400010000300009040000010300020009210700b90122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0000100000006278ae9f69769ad589d78bc6f919bca9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xb, 0x800, 0x0, 0x3fffe}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x95ff, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r9], 0xb0}}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x5, 0xc7f, @l2={'ib', 0x3a, 'veth0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20040880}, 0x80) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000980)={{@host=0x10}, {@host=0x10}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b0899c7181ba154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e25291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031338b5440eefbe1e7fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418}) 0s ago: executing program 0 (id=2635): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x22c, 0x108, 0x0, 0x148, 0x108, 0x148, 0x198, 0x240, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'ipvlan1\x00', 'veth0_vlan\x00'}, 0x0, 0xa8, 0x108, 0x1d000000, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10d]}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) kernel console output (not intermixed with test programs): [ T1178] usb 2-1: config 0 descriptor?? [ 569.574111][ T1178] pwc: Askey VC010 type 2 USB webcam detected. [ 569.805894][T14989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.831972][T14989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.889128][ T5293] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 569.915030][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 569.994078][ T1178] pwc: send_video_command error -71 [ 570.009802][ T1178] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 570.029835][ T1178] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 570.048458][ T1178] usb 2-1: USB disconnect, device number 110 [ 570.071932][ T5293] usb 4-1: Using ep0 maxpacket: 8 [ 570.090666][ T5293] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 570.100545][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.109603][ T5293] usb 4-1: Product: syz [ 570.113815][ T5293] usb 4-1: Manufacturer: syz [ 570.120256][ T5293] usb 4-1: SerialNumber: syz [ 570.127115][ T5293] usb 4-1: config 0 descriptor?? [ 570.259136][ T5289] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 570.344723][ T5293] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 570.431801][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.442662][ T5289] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.451871][ T5289] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 570.461623][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.474250][ T5289] usb 3-1: config 0 descriptor?? [ 570.555948][ T5293] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 570.584050][ T5293] usb 4-1: USB disconnect, device number 108 [ 570.673180][ T5288] gspca_vc032x: reg_w err -71 [ 570.678046][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.697430][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.706660][T15012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.711273][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.721609][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.726970][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.734380][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.740836][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.741181][T15012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.747599][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.760533][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.765904][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.772165][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.786363][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.816855][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.829841][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.847526][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 570.850214][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.873941][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.880661][ T5288] gspca_vc032x: I2c Bus Busy Wait 00 [ 570.886119][ T5288] gspca_vc032x: Unknown sensor... [ 570.893812][ T5288] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 570.907856][ T5288] usb 5-1: USB disconnect, device number 92 [ 570.925222][ T5277] usb 3-1: USB disconnect, device number 87 [ 570.957275][T15015] netlink: 'syz.1.2352': attribute type 39 has an invalid length. [ 571.486223][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2358'. [ 571.681452][T14942] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 571.730405][ T5277] usb 1-1: USB disconnect, device number 93 [ 571.749015][ T5288] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 571.940014][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 571.958366][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.989237][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.017602][ T5288] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 572.042291][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.073744][ T5288] usb 2-1: config 0 descriptor?? [ 572.424911][T15062] netlink: 'syz.4.2371': attribute type 9 has an invalid length. [ 572.434837][T15062] netlink: 'syz.4.2371': attribute type 7 has an invalid length. [ 572.459804][T15062] netlink: 'syz.4.2371': attribute type 8 has an invalid length. [ 572.520161][ T5288] saitek 0003:06A3:0621.0059: collection stack underflow [ 572.528127][ T5288] saitek 0003:06A3:0621.0059: item 0 0 0 12 parsing failed [ 572.548143][ T5288] saitek 0003:06A3:0621.0059: parse failed [ 572.560415][ T5288] saitek 0003:06A3:0621.0059: probe with driver saitek failed with error -22 [ 572.681820][ T5293] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 572.765249][ T5288] usb 2-1: USB disconnect, device number 111 [ 572.801124][ T937] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 572.862168][ T5293] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.876441][ T5293] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.906488][ T5293] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 572.910098][T15089] FAULT_INJECTION: forcing a failure. [ 572.910098][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 572.928576][T15089] CPU: 1 UID: 0 PID: 15089 Comm: syz.2.2382 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 572.934429][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.939009][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 572.939030][T15089] Call Trace: [ 572.939041][T15089] [ 572.939052][T15089] dump_stack_lvl+0x241/0x360 [ 572.939093][T15089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.939124][T15089] ? __pfx__printk+0x10/0x10 [ 572.977928][T15089] ? fs_reclaim_acquire+0x93/0x140 [ 572.983069][T15089] ? __pfx___might_resched+0x10/0x10 [ 572.988505][T15089] should_fail_ex+0x3b0/0x4e0 [ 572.993215][T15089] ? tomoyo_encode+0x26f/0x540 [ 572.997993][T15089] should_failslab+0xac/0x100 [ 573.002685][T15089] ? tomoyo_encode+0x26f/0x540 [ 573.007460][T15089] __kmalloc_noprof+0xd8/0x400 [ 573.012246][T15089] tomoyo_encode+0x26f/0x540 [ 573.016855][T15089] tomoyo_realpath_from_path+0x59e/0x5e0 [ 573.022509][T15089] tomoyo_path_number_perm+0x23a/0x880 [ 573.027983][T15089] ? tomoyo_path_number_perm+0x208/0x880 [ 573.033626][T15089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 573.039630][T15089] ? __pfx_lock_acquire+0x10/0x10 [ 573.044688][T15089] ? __fget_files+0x29/0x470 [ 573.049292][T15089] ? __fget_files+0x3f3/0x470 [ 573.053982][T15089] security_file_ioctl_compat+0xc6/0x2a0 [ 573.059636][T15089] __se_compat_sys_ioctl+0xd6/0xc90 [ 573.064852][T15089] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 573.070684][T15089] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.076682][T15089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.083033][T15089] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 573.089651][T15089] ? lockdep_hardirqs_on+0x99/0x150 [ 573.094869][T15089] __do_fast_syscall_32+0xb4/0x110 [ 573.100020][T15089] ? exc_page_fault+0x590/0x8c0 [ 573.104886][T15089] do_fast_syscall_32+0x34/0x80 [ 573.109752][T15089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.116095][T15089] RIP: 0023:0xf7fa5579 [ 573.120171][T15089] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 573.139788][T15089] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 573.148227][T15089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285 [ 573.156211][T15089] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.164363][T15089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.172341][T15089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 573.180321][T15089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.188322][T15089] [ 573.192550][ T5293] usb 4-1: config 0 descriptor?? [ 573.203528][T15089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 573.252580][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.283522][ T937] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 573.308197][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.326337][ T937] usb 1-1: config 0 descriptor?? [ 573.338128][ T937] pwc: Askey VC010 type 2 USB webcam detected. [ 573.583077][T15095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2385'. [ 573.621203][T15095] x_tables: duplicate underflow at hook 1 [ 573.648645][T15097] FAULT_INJECTION: forcing a failure. [ 573.648645][T15097] name failslab, interval 1, probability 0, space 0, times 0 [ 573.704401][T15097] CPU: 1 UID: 0 PID: 15097 Comm: syz.2.2386 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 573.714901][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 573.725003][T15097] Call Trace: [ 573.728317][T15097] [ 573.731282][T15097] dump_stack_lvl+0x241/0x360 [ 573.736008][T15097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.741246][T15097] ? __pfx__printk+0x10/0x10 [ 573.745883][T15097] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 573.752003][T15097] ? __pfx___might_resched+0x10/0x10 [ 573.757331][T15097] should_fail_ex+0x3b0/0x4e0 [ 573.762059][T15097] should_failslab+0xac/0x100 [ 573.766787][T15097] ? __alloc_skb+0x1c3/0x440 [ 573.771422][T15097] kmem_cache_alloc_node_noprof+0x71/0x320 [ 573.777364][T15097] __alloc_skb+0x1c3/0x440 [ 573.781835][T15097] ? __pfx___alloc_skb+0x10/0x10 [ 573.786815][T15097] ? netlink_autobind+0xd6/0x2f0 [ 573.791798][T15097] ? netlink_autobind+0x2b0/0x2f0 [ 573.796871][T15097] netlink_sendmsg+0x638/0xcb0 [ 573.801684][T15097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.807015][T15097] ? __pfx_lock_release+0x10/0x10 [ 573.812170][T15097] ? aa_sock_msg_perm+0x91/0x160 [ 573.817155][T15097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.822486][T15097] __sock_sendmsg+0x221/0x270 [ 573.827201][T15097] ____sys_sendmsg+0x52a/0x7e0 [ 573.832099][T15097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.837441][T15097] __sys_sendmsg+0x2aa/0x390 [ 573.842071][T15097] ? __pfx___sys_sendmsg+0x10/0x10 [ 573.847221][T15097] ? vfs_write+0x7bf/0xc90 [ 573.851727][T15097] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 573.858436][T15097] ? lockdep_hardirqs_on+0x99/0x150 [ 573.863674][T15097] __do_fast_syscall_32+0xb4/0x110 [ 573.868822][T15097] ? exc_page_fault+0x590/0x8c0 [ 573.873711][T15097] do_fast_syscall_32+0x34/0x80 [ 573.878611][T15097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.884977][T15097] RIP: 0023:0xf7fa5579 [ 573.889072][T15097] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 573.908710][T15097] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 573.917185][T15097] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000480 [ 573.925189][T15097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.933275][T15097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.941274][T15097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 573.949269][T15097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.957280][T15097] [ 574.100351][T15077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.112420][T15101] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 574.125592][T15071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.161163][T15077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.180065][T15071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.259189][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2375'. [ 574.276914][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'. [ 574.292001][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2389'. [ 574.361016][ T25] usb 4-1: USB disconnect, device number 109 [ 574.383549][ T937] pwc: send_video_command error -71 [ 574.411165][T15107] fuse: Bad value for 'group_id' [ 574.413094][ T937] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 574.431040][T15107] fuse: Bad value for 'group_id' [ 574.491388][ T937] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 574.557564][ T937] usb 1-1: USB disconnect, device number 94 [ 575.111697][T15126] input: syz1 as /devices/virtual/input/input45 [ 575.439239][T15134] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 575.479218][T15137] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 575.851760][ T25] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 575.871822][ T5277] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 576.001453][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 576.021894][ T5277] usb 2-1: Using ep0 maxpacket: 32 [ 576.028433][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.049869][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.074570][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=ff.40 [ 576.089834][ T25] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 576.104300][ T25] usb 5-1: Product: syz [ 576.108610][ T25] usb 5-1: SerialNumber: syz [ 576.124864][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2412'. [ 576.170417][ T5277] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 576.179067][ T5277] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 576.187697][ T5277] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 576.196997][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 576.207035][ T5277] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 576.216977][ T5277] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 576.230319][ T5277] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 576.239763][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.253461][ T5277] usb 2-1: config 0 descriptor?? [ 576.412726][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'. [ 576.422071][ T5293] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 576.487407][ T5277] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 576.499325][ T937] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 576.537085][ T5277] usb 2-1: USB disconnect, device number 112 [ 576.564506][ T5277] usblp0: removed [ 576.604896][ T5293] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.615529][T15165] hsr_slave_1 (unregistering): left promiscuous mode [ 576.615833][ T5293] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 576.642729][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.663964][ T25] usb 5-1: 0:2 : does not exist [ 576.670923][ T5293] usb 3-1: config 0 descriptor?? [ 576.716351][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 576.726154][ T5293] pwc: Askey VC010 type 2 USB webcam detected. [ 576.734063][ T25] usb 5-1: USB disconnect, device number 93 [ 576.734632][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.766546][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.795509][ T937] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 576.808120][T12299] udevd[12299]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.828273][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.848689][ T937] usb 4-1: config 0 descriptor?? [ 576.953659][T15161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.982415][T15161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.021337][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 577.066186][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2413'. [ 577.099195][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 577.137122][ T5293] pwc: send_video_command error -71 [ 577.162532][ T5293] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 577.189250][ T5293] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 577.238453][ T5293] usb 3-1: USB disconnect, device number 88 [ 577.309869][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 577.318254][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 577.329039][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 577.338594][ T937] logitech 0003:046D:C298.005A: unknown main item tag 0x0 [ 577.346391][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 577.357665][ T937] logitech 0003:046D:C298.005A: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.3-1/input0 [ 577.397570][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.415783][ T937] logitech 0003:046D:C298.005A: no inputs found [ 577.428903][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 577.460274][T15181] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 577.467320][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 577.487424][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 577.497714][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.508421][ T9] usb 2-1: config 0 descriptor?? [ 577.594869][ T937] usb 4-1: USB disconnect, device number 110 [ 577.754515][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 577.924310][T15192] FAULT_INJECTION: forcing a failure. [ 577.924310][T15192] name failslab, interval 1, probability 0, space 0, times 0 [ 577.959763][T15192] CPU: 1 UID: 0 PID: 15192 Comm: syz.0.2424 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 577.970259][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 577.980360][T15192] Call Trace: [ 577.983674][T15192] [ 577.986627][T15192] dump_stack_lvl+0x241/0x360 [ 577.991350][T15192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.996597][T15192] ? __pfx__printk+0x10/0x10 [ 578.001230][T15192] should_fail_ex+0x3b0/0x4e0 [ 578.005956][T15192] should_failslab+0xac/0x100 [ 578.010673][T15192] ? __hw_addr_add_ex+0x1a8/0x610 [ 578.015712][T15192] __kmalloc_cache_noprof+0x6c/0x2c0 [ 578.021028][T15192] __hw_addr_add_ex+0x1a8/0x610 [ 578.025909][T15192] dev_addr_init+0x143/0x230 [ 578.030522][T15192] ? __pfx_dev_addr_init+0x10/0x10 [ 578.035659][T15192] alloc_netdev_mqs+0x2a1/0x1000 [ 578.040616][T15192] ? __pfx_veth_setup+0x10/0x10 [ 578.045486][T15192] rtnl_create_link+0x2f9/0xc20 [ 578.050360][T15192] rtnl_newlink+0x1423/0x20a0 [ 578.055057][T15192] ? rtnl_newlink+0xab1/0x20a0 [ 578.059857][T15192] ? __pfx_rtnl_newlink+0x10/0x10 [ 578.064903][T15192] ? __pfx___mutex_trylock_common+0x10/0x10 [ 578.070817][T15192] ? rcu_is_watching+0x15/0xb0 [ 578.075597][T15192] ? trace_contention_end+0x3c/0x120 [ 578.080895][T15192] ? __mutex_lock+0x2ef/0xd70 [ 578.085594][T15192] ? __pfx_lock_release+0x10/0x10 [ 578.090647][T15192] ? __pfx_rtnl_newlink+0x10/0x10 [ 578.095692][T15192] rtnetlink_rcv_msg+0x73f/0xcf0 [ 578.100733][T15192] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 578.105863][T15192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 578.111348][T15192] ? ref_tracker_free+0x643/0x7e0 [ 578.116393][T15192] netlink_rcv_skb+0x1e3/0x430 [ 578.121178][T15192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 578.126650][T15192] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.131967][T15192] ? netlink_deliver_tap+0x2e/0x1b0 [ 578.137193][T15192] netlink_unicast+0x7f6/0x990 [ 578.141977][T15192] ? __pfx_netlink_unicast+0x10/0x10 [ 578.147271][T15192] ? __virt_addr_valid+0x183/0x530 [ 578.152404][T15192] ? __check_object_size+0x48e/0x900 [ 578.157740][T15192] netlink_sendmsg+0x8e4/0xcb0 [ 578.162535][T15192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.167837][T15192] ? __pfx_lock_release+0x10/0x10 [ 578.172881][T15192] ? aa_sock_msg_perm+0x91/0x160 [ 578.177843][T15192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.183160][T15192] __sock_sendmsg+0x221/0x270 [ 578.187854][T15192] ____sys_sendmsg+0x52a/0x7e0 [ 578.192645][T15192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.197958][T15192] __sys_sendmsg+0x2aa/0x390 [ 578.202588][T15192] ? __pfx___sys_sendmsg+0x10/0x10 [ 578.207718][T15192] ? vfs_write+0x7bf/0xc90 [ 578.212199][T15192] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 578.218896][T15192] ? lockdep_hardirqs_on+0x99/0x150 [ 578.224144][T15192] __do_fast_syscall_32+0xb4/0x110 [ 578.229295][T15192] ? exc_page_fault+0x590/0x8c0 [ 578.234163][T15192] do_fast_syscall_32+0x34/0x80 [ 578.239031][T15192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 578.245375][T15192] RIP: 0023:0xf7f30579 [ 578.249473][T15192] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 578.269091][T15192] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 578.277524][T15192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 578.285504][T15192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.293484][T15192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.301490][T15192] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 578.309474][T15192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.317553][T15192] [ 578.514982][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.544991][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.699154][ T9] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 578.699177][ T25] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 578.734253][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2430'. [ 578.745231][T15208] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2430'. [ 578.754500][T15208] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 578.781238][ T937] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 578.857370][ T8] usb 2-1: USB disconnect, device number 113 [ 578.866764][ T8] usblp0: removed [ 578.883770][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.900348][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 578.905188][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 578.919643][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.935523][ T25] usb 1-1: config 0 descriptor?? [ 578.944227][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 578.950139][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 578.971072][ T937] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 578.988882][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.997118][ T937] usb 4-1: Product: syz [ 579.002367][ T937] usb 4-1: Manufacturer: syz [ 579.007048][ T937] usb 4-1: SerialNumber: syz [ 579.019667][ T937] usb 4-1: config 0 descriptor?? [ 579.030393][ T937] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 579.059071][ T9] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 579.153143][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.166835][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.219052][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 579.226361][ T9] usb usb3-port1: attempt power cycle [ 579.251349][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 579.310275][ T25] pwc: send_video_command error -71 [ 579.330210][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 579.342706][ T25] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 579.364387][ T25] usb 1-1: USB disconnect, device number 95 [ 579.449307][T15213] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 579.595778][T15218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2434'. [ 579.613570][ T9] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 579.659876][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 579.811062][ T9] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 579.839927][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 579.850949][T15203] netlink: 368 bytes leftover after parsing attributes in process `syz.3.2428'. [ 579.860572][ T9] usb usb3-port1: unable to enumerate USB device [ 579.871933][ T937] gspca_sonixj: reg_r err -32 [ 579.877088][ T937] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 580.010691][ T5289] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 580.186194][ T5289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.198955][ T5289] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 580.208040][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.260038][ T5289] usb 5-1: config 0 descriptor?? [ 580.273065][ T5289] pwc: Askey VC010 type 2 USB webcam detected. [ 580.528234][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.546738][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.560206][T15244] binder: 15243:15244 ioctl 4018620d 0 returned -22 [ 580.599515][T15244] binder: 15243:15244 ioctl c018620c 20000000 returned -14 [ 580.642670][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2437'. [ 580.713941][ T5289] pwc: send_video_command error -71 [ 580.720648][ T5289] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 580.743868][ T5289] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 580.764145][ T5289] usb 5-1: USB disconnect, device number 94 [ 581.579284][ T5289] usb 4-1: USB disconnect, device number 111 [ 581.627053][T15258] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 581.999993][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 582.019045][ T5289] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 582.171714][ T5289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.182396][ T5289] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 582.189172][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 582.192003][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.210313][ T5289] usb 4-1: config 0 descriptor?? [ 582.218432][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.230034][ T5289] pwc: Askey VC010 type 2 USB webcam detected. [ 582.250893][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2C, changing to 0xC [ 582.267124][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 582.303638][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 2.40 [ 582.348232][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.377223][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.391296][T15267] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 582.492557][T15264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.670308][T15264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.708181][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.810399][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 582.932210][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.150425][ T5289] pwc: send_video_command error -71 [ 583.155751][ T5289] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 583.163546][ T5289] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 583.185948][ T5289] usb 4-1: USB disconnect, device number 112 [ 583.196682][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.222885][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.233207][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 583.241781][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 583.249726][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 583.257382][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 583.312906][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.349719][T15276] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 583.564910][ T35] bridge_slave_1: left allmulticast mode [ 583.574333][ T35] bridge_slave_1: left promiscuous mode [ 583.584703][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.589089][ T5277] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 583.603828][ T35] bridge_slave_0: left allmulticast mode [ 583.630808][ T35] bridge_slave_0: left promiscuous mode [ 583.641080][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.768422][ T5277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.809055][ T5277] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.840555][ T5277] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 583.863554][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.902232][ T5277] usb 3-1: config 0 descriptor?? [ 584.068573][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 584.068594][ T29] audit: type=1326 audit(1727082554.580:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.141746][T15281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.175413][ T29] audit: type=1326 audit(1727082554.580:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.229073][T15281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.269192][ T29] audit: type=1326 audit(1727082554.650:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.339328][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 584.400261][ T29] audit: type=1326 audit(1727082554.650:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.504876][ T29] audit: type=1326 audit(1727082554.650:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.576397][ T25] usb 3-1: USB disconnect, device number 93 [ 584.618563][ T29] audit: type=1326 audit(1727082554.650:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.667333][ T29] audit: type=1326 audit(1727082554.650:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.739401][ T29] audit: type=1326 audit(1727082554.650:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.792063][ T29] audit: type=1326 audit(1727082554.650:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.850110][ T29] audit: type=1326 audit(1727082554.650:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.3.2457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.877574][T15296] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 585.369224][ T5232] Bluetooth: hci4: command tx timeout [ 585.434329][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.487807][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.522151][ T35] bond0 (unregistering): Released all slaves [ 585.672206][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2462'. [ 586.179346][T15311] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 586.552562][T15279] chnl_net:caif_netlink_parms(): no params data found [ 586.796515][ T35] hsr_slave_0: left promiscuous mode [ 586.803224][ T35] hsr_slave_1: left promiscuous mode [ 586.856696][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.882488][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.903967][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.934258][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.027961][ T35] veth1_macvtap: left promiscuous mode [ 587.070762][ T35] veth0_macvtap: left promiscuous mode [ 587.079669][ T35] veth1_vlan: left promiscuous mode [ 587.101937][ T35] veth0_vlan: left promiscuous mode [ 587.439675][ T5232] Bluetooth: hci4: command tx timeout [ 588.261610][ T9] cdc_ncm 2-1:1.0: bind() failure [ 588.369188][ T9] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 588.370113][ T25] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 588.459972][ T9] usb 2-1: USB disconnect, device number 114 [ 588.559163][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 588.570946][ T25] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 588.580018][ T25] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 588.588675][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 588.597915][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 588.607698][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 588.617522][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 588.630644][ T25] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 588.639790][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.653013][ T25] usb 4-1: config 0 descriptor?? [ 588.789062][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 588.901680][ T25] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 588.942561][ T25] usb 4-1: USB disconnect, device number 113 [ 588.961613][ T25] usblp0: removed [ 589.031522][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.049696][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 589.058796][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.079877][ T9] usb 2-1: config 0 descriptor?? [ 589.101201][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 589.277272][ T35] team0 (unregistering): Port device team_slave_1 removed [ 589.333157][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.388657][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.425331][ T35] team0 (unregistering): Port device team_slave_0 removed [ 589.430238][ T25] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 589.455916][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 589.519816][ T5232] Bluetooth: hci4: command tx timeout [ 589.559017][ T9] pwc: send_video_command error -71 [ 589.564335][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 589.617609][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 589.619296][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 589.669874][ T25] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 589.680512][ T25] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 589.700717][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 589.700954][ T9] usb 2-1: USB disconnect, device number 115 [ 589.716619][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 589.737333][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 589.774790][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 589.815125][ T25] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 589.834738][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.856021][ T25] usb 4-1: config 0 descriptor?? [ 590.100309][ T25] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 590.648568][ T9] usb 4-1: USB disconnect, device number 114 [ 590.666393][ T9] usblp0: removed [ 591.470683][T15361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2472'. [ 591.643527][ T5232] Bluetooth: hci4: command tx timeout [ 591.660444][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.667679][T15279] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.693477][T15279] bridge_slave_0: entered allmulticast mode [ 591.702106][T15279] bridge_slave_0: entered promiscuous mode [ 591.729829][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.736997][T15279] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.845093][T15279] bridge_slave_1: entered allmulticast mode [ 591.896183][T15279] bridge_slave_1: entered promiscuous mode [ 592.031038][T15348] fuse: Bad value for 'group_id' [ 592.036560][T15348] fuse: Bad value for 'group_id' [ 592.116187][T15279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.251644][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 592.260868][T15372] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2476'. [ 592.271714][T15372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2476'. [ 592.285492][T15372] vlan2: entered allmulticast mode [ 592.290953][T15372] gretap0: entered allmulticast mode [ 592.302527][T15279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.511092][T15279] team0: Port device team_slave_0 added [ 592.520562][T15279] team0: Port device team_slave_1 added [ 592.654362][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 592.679453][T15279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.686464][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.724844][T15279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.753219][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 592.769237][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 592.783945][ T5277] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 592.793672][T15279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.803059][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.829125][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.837006][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 592.844371][T15279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.856996][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 592.868275][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 592.897317][ T5293] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 592.954256][ T5277] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 592.976575][ T5277] usb 1-1: config 0 has no interface number 0 [ 592.983032][ T5277] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.994478][ T5277] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.006008][ T5277] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 593.015297][ T5277] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 593.023473][ T5277] usb 1-1: Manufacturer: syz [ 593.030227][ T5277] usb 1-1: config 0 descriptor?? [ 593.079545][ T5293] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.096502][ T5293] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.116477][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.146167][ T5293] usb 4-1: config 0 descriptor?? [ 593.167746][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.176732][ T5293] pwc: Askey VC010 type 2 USB webcam detected. [ 593.261253][T15279] hsr_slave_0: entered promiscuous mode [ 593.268038][T15279] hsr_slave_1: entered promiscuous mode [ 593.275501][T15279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.288144][T15279] Cannot create hsr debugfs directory [ 593.325865][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.420251][T15386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.430950][T15386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.450855][T15384] CIFS: VFS: Malformed UNC in devname [ 593.527185][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 593.545722][ T5277] usbhid 1-1:0.18: can't add hid device: -71 [ 593.552216][ T5277] usbhid 1-1:0.18: probe with driver usbhid failed with error -71 [ 593.561610][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.591529][ T5277] usb 1-1: USB disconnect, device number 96 [ 593.639043][ T5289] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 593.658736][ T5293] pwc: send_video_command error -71 [ 593.673545][ T5293] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 593.714335][ T5293] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 593.756763][ T5293] usb 4-1: USB disconnect, device number 115 [ 593.801418][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.839118][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 593.850895][ T5289] usb 2-1: config 0 interface 0 has no altsetting 0 [ 593.879063][ T5289] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 593.905936][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.916771][ T5289] usb 2-1: config 0 descriptor?? [ 594.330601][ T35] bridge_slave_1: left allmulticast mode [ 594.348814][ T35] bridge_slave_1: left promiscuous mode [ 594.355246][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.365989][ T5289] hid (null): report_id 0 is invalid [ 594.398124][ T5289] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.005B/input/input46 [ 594.443257][ T35] bridge_slave_0: left allmulticast mode [ 594.449149][ T35] bridge_slave_0: left promiscuous mode [ 594.455251][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.508572][ T5289] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.005B/input/input47 [ 594.680927][ T5289] kye 0003:0458:5013.005B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 595.039171][ T54] Bluetooth: hci3: command tx timeout [ 595.284138][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.298535][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.314349][ T35] bond0 (unregistering): Released all slaves [ 595.452053][T15398] wlan0: mtu greater than device maximum [ 595.473589][T15431] netem: change failed [ 595.482268][ T5289] usb 2-1: USB disconnect, device number 116 [ 595.556125][T15393] chnl_net:caif_netlink_parms(): no params data found [ 595.929968][ T8] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 596.061545][T15393] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.068680][T15393] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.086942][T15393] bridge_slave_0: entered allmulticast mode [ 596.097757][T15393] bridge_slave_0: entered promiscuous mode [ 596.111303][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.121956][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.131854][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 596.141340][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.154828][ T8] usb 4-1: config 0 descriptor?? [ 596.179081][ T35] hsr_slave_0: left promiscuous mode [ 596.191882][ T35] hsr_slave_1: left promiscuous mode [ 596.211627][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.229969][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.250066][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.257562][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.337330][ T35] veth1_macvtap: left promiscuous mode [ 596.343217][ T35] veth0_macvtap: left promiscuous mode [ 596.349059][ T35] veth1_vlan: left promiscuous mode [ 596.354649][ T35] veth0_vlan: left promiscuous mode [ 596.405211][T15436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.424388][T15436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.522857][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 596.646984][ T9] usb 4-1: USB disconnect, device number 116 [ 597.129850][ T5232] Bluetooth: hci3: command tx timeout [ 597.464420][ T35] team0 (unregistering): Port device team_slave_1 removed [ 597.527702][ T35] team0 (unregistering): Port device team_slave_0 removed [ 598.214329][T15393] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.226922][T15393] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.249561][T15393] bridge_slave_1: entered allmulticast mode [ 598.274777][T15393] bridge_slave_1: entered promiscuous mode [ 598.511207][T15393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.604449][T15393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.619344][T15279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 598.792568][T15279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 598.820177][T15279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 598.876534][T15393] team0: Port device team_slave_0 added [ 598.916971][T15393] team0: Port device team_slave_1 added [ 598.950870][T15279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 599.058536][T15393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.089039][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.166152][T15393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.203338][ T5232] Bluetooth: hci3: command tx timeout [ 599.228451][T15393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.239544][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.269653][T15393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.435677][T15393] hsr_slave_0: entered promiscuous mode [ 599.458608][T15393] hsr_slave_1: entered promiscuous mode [ 599.465529][T15393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.481555][T15393] Cannot create hsr debugfs directory [ 599.509064][ T5288] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 599.671981][ T5288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.705059][ T5288] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 599.715431][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.728142][ T5288] usb 1-1: config 0 descriptor?? [ 599.744714][ T5288] pwc: Askey VC010 type 2 USB webcam detected. [ 599.809198][ T46] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 599.875551][T15279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.955609][T15279] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.969855][T15502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.988975][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 600.001857][ T46] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 600.012053][T15502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.049064][ T46] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 600.062082][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.069395][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.085951][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 600.127872][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 600.140423][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.147591][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.166910][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 600.177185][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2509'. [ 600.189127][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 600.212491][ T46] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 600.279520][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.309639][ T46] usb 2-1: config 0 descriptor?? [ 600.417595][T15279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.449032][ T5288] pwc: send_video_command error -71 [ 600.494094][ T5288] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 600.537874][ T46] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 600.555935][ T5288] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 600.600060][ T46] usb 2-1: USB disconnect, device number 117 [ 600.606994][ T5288] usb 1-1: USB disconnect, device number 97 [ 600.647578][ T46] usblp0: removed [ 600.666314][T15521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2513'. [ 600.770407][T15279] veth0_vlan: entered promiscuous mode [ 600.793551][T15393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 600.816725][T15279] veth1_vlan: entered promiscuous mode [ 600.826888][T15393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 600.854871][T15393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 600.866382][T15393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 600.904468][T15279] veth0_macvtap: entered promiscuous mode [ 600.928098][T15279] veth1_macvtap: entered promiscuous mode [ 600.998144][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.010346][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.022722][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.033676][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.044389][ T46] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 601.052435][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.064239][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.074469][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.085318][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.095414][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.105971][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.117814][T15279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.167876][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.180110][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.190632][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.201767][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.211759][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.222452][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 601.227718][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.241048][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.253724][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.263957][ T46] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 601.272431][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.283213][ T5232] Bluetooth: hci3: command tx timeout [ 601.288722][ T46] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 601.297830][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.307905][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 601.315852][T15279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.317054][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 601.337850][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 601.351541][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 601.364916][ T46] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 601.379014][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.399138][ T46] usb 2-1: config 0 descriptor?? [ 601.405002][T15279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.424539][T15279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.480794][T15393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.512183][T15279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.539693][T15279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.551859][T15279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.562236][T15279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.597701][T15393] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.622396][ T46] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 118 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 601.649668][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.656842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.688132][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.695426][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.710109][ T8] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 601.747320][T15393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.773924][T15393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.875263][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.907991][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.917778][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.940532][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 601.959065][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.990950][T15393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.009155][ T5288] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 602.012701][ T8] usb 1-1: config 0 descriptor?? [ 602.041365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.052661][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.068457][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 602.172698][ T5288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.199237][ T46] usb 2-1: USB disconnect, device number 118 [ 602.216149][T15393] veth0_vlan: entered promiscuous mode [ 602.223013][ T46] usblp0: removed [ 602.243191][ T5288] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 602.258005][T15393] veth1_vlan: entered promiscuous mode [ 602.274812][ T5288] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 602.308343][T15532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.309035][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.377093][ T5288] usb 4-1: config 0 descriptor?? [ 602.401147][T15532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.418585][T15393] veth0_macvtap: entered promiscuous mode [ 602.457376][T15393] veth1_macvtap: entered promiscuous mode [ 602.507576][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 602.526603][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.579278][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.615594][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.617582][T15555] FAULT_INJECTION: forcing a failure. [ 602.617582][T15555] name failslab, interval 1, probability 0, space 0, times 0 [ 602.651041][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.664669][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.672798][T15555] CPU: 0 UID: 0 PID: 15555 Comm: syz.4.2517 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 602.684952][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 602.695042][T15555] Call Trace: [ 602.698342][T15555] [ 602.701312][T15555] dump_stack_lvl+0x241/0x360 [ 602.706006][T15555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.711240][T15555] ? __pfx__printk+0x10/0x10 [ 602.715859][T15555] ? fs_reclaim_acquire+0x93/0x140 [ 602.721095][T15555] ? __pfx___might_resched+0x10/0x10 [ 602.726413][T15555] should_fail_ex+0x3b0/0x4e0 [ 602.731107][T15555] ? tomoyo_encode+0x26f/0x540 [ 602.735875][T15555] should_failslab+0xac/0x100 [ 602.740590][T15555] ? tomoyo_encode+0x26f/0x540 [ 602.745359][T15555] __kmalloc_noprof+0xd8/0x400 [ 602.750158][T15555] tomoyo_encode+0x26f/0x540 [ 602.754763][T15555] tomoyo_realpath_from_path+0x59e/0x5e0 [ 602.760416][T15555] tomoyo_path_number_perm+0x23a/0x880 [ 602.765901][T15555] ? tomoyo_path_number_perm+0x208/0x880 [ 602.771557][T15555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 602.777585][T15555] ? __pfx_lock_acquire+0x10/0x10 [ 602.782686][T15555] ? __fget_files+0x29/0x470 [ 602.787294][T15555] ? __fget_files+0x3f3/0x470 [ 602.791992][T15555] security_file_ioctl_compat+0xc6/0x2a0 [ 602.797721][T15555] __se_compat_sys_ioctl+0xd6/0xc90 [ 602.802936][T15555] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 602.808787][T15555] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 602.814793][T15555] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 602.821136][T15555] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 602.827765][T15555] ? lockdep_hardirqs_on+0x99/0x150 [ 602.832974][T15555] __do_fast_syscall_32+0xb4/0x110 [ 602.838117][T15555] ? exc_page_fault+0x590/0x8c0 [ 602.842981][T15555] do_fast_syscall_32+0x34/0x80 [ 602.847839][T15555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.854179][T15555] RIP: 0023:0xf744d579 [ 602.858249][T15555] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 602.877881][T15555] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 602.886342][T15555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000802c550a [ 602.894321][T15555] RDX: 0000000020000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.902317][T15555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 602.910290][T15555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 602.918262][T15555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.926267][T15555] [ 602.984000][ T8] pwc: send_video_command error -71 [ 602.989091][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.990054][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 603.001174][T15555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 603.014620][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.044114][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.061293][ T8] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 603.077939][ T8] usb 1-1: USB disconnect, device number 98 [ 603.079167][T15555] usb usb8: usbfs: process 15555 (syz.4.2517) did not claim interface 0 before use [ 603.119802][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.167699][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.170075][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'. [ 603.192845][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.213872][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.241656][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.284398][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.315419][T15393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.375923][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 603.391346][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.407357][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.417398][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.428065][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.438062][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.448905][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.459123][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.469874][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.487407][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.498049][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.508395][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.521010][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.530963][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.541600][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.558756][T15393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.570626][T15393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.579711][T15393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.588580][T15393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.597576][T15393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.637615][ T5288] usb 4-1: USB disconnect, device number 117 [ 603.818591][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.869386][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.923567][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.942867][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.202145][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 604.418295][T15602] netlink: 'syz.1.2524': attribute type 14 has an invalid length. [ 604.427010][ T5288] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 604.468342][T15602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2524'. [ 604.604505][ T5288] usb 1-1: config 0 has no interfaces? [ 604.614837][ T5288] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 604.714084][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.749678][ T5288] usb 1-1: config 0 descriptor?? [ 604.915649][T15616] x_tables: ip_tables: osf match: only valid for protocol 6 [ 605.043391][T15588] team_slave_0: entered promiscuous mode [ 605.049175][T15588] team_slave_1: entered promiscuous mode [ 605.089012][T15588] macsec1: entered promiscuous mode [ 605.094349][T15588] team0: entered promiscuous mode [ 605.094804][T15588] macsec1: entered allmulticast mode [ 605.130381][T15588] team0: entered allmulticast mode [ 605.135609][T15588] team_slave_0: entered allmulticast mode [ 605.155154][T15588] team_slave_1: entered allmulticast mode [ 605.190328][T15588] team0: left allmulticast mode [ 605.195264][T15588] team_slave_0: left allmulticast mode [ 605.207611][T15588] team_slave_1: left allmulticast mode [ 605.213894][T15588] team0: left promiscuous mode [ 605.219335][T15588] team_slave_0: left promiscuous mode [ 605.224837][T15588] team_slave_1: left promiscuous mode [ 605.383421][ T8] usb 1-1: USB disconnect, device number 99 [ 605.449097][ T5288] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 605.519418][ T5289] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 605.613168][ T5288] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 605.627319][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.669736][ T5288] usb 2-1: config 0 descriptor?? [ 605.683937][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 605.698472][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 605.710303][ T5289] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 605.727516][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.755879][ T5289] usb 4-1: config 0 descriptor?? [ 605.784953][T15631] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 605.922137][T15625] openvswitch: netlink: Flow actions attr not present in new flow. [ 606.035449][T15631] syz_tun: entered promiscuous mode [ 606.084177][T15631] vlan2: entered promiscuous mode [ 606.120232][T15631] vlan2: entered allmulticast mode [ 606.125497][T15631] syz_tun: entered allmulticast mode [ 606.156184][ T5288] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 606.168187][T15631] syz_tun: left allmulticast mode [ 606.179074][ T46] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 606.187040][ T5288] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 606.196021][T15631] syz_tun: left promiscuous mode [ 606.290873][ T5289] usb 4-1: string descriptor 0 read error: -71 [ 606.310767][ T5289] usbhid 4-1:0.0: can't add hid device: -71 [ 606.318111][ T5289] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 606.328996][ T5278] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 606.340319][ T5289] usb 4-1: USB disconnect, device number 118 [ 606.350643][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.371036][ T46] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.384205][ T46] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 606.400706][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.425433][ T46] usb 5-1: config 0 descriptor?? [ 606.479513][ T5278] usb 1-1: Using ep0 maxpacket: 32 [ 606.494498][ T5278] usb 1-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 606.510284][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.518400][ T5278] usb 1-1: Product: syz [ 606.523106][ T5278] usb 1-1: Manufacturer: syz [ 606.527753][ T5278] usb 1-1: SerialNumber: syz [ 606.538995][ T5288] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 606.664925][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.688061][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.698959][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 606.723175][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.742583][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.771354][ T5288] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 606.774882][T15661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.793155][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 606.813004][ T5288] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 606.831709][ T5288] usb 3-1: Product: syz [ 606.841140][T15661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.851125][ T5288] usb 3-1: Manufacturer: syz [ 606.865976][ T5277] usb 5-1: USB disconnect, device number 95 [ 606.883357][ T5288] usb 3-1: config 0 descriptor?? [ 606.940774][ T5278] usb 1-1: bad CDC descriptors [ 606.951591][ T5278] usb 1-1: USB disconnect, device number 100 [ 607.305343][ T5288] kovaplus 0003:1E7D:2D50.005C: unknown main item tag 0xd [ 607.338363][ T5288] kovaplus 0003:1E7D:2D50.005C: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 607.463739][T15697] kvm: kvm [15695]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xfffffeb7 [ 607.828489][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 607.828511][ T29] audit: type=1326 audit(1727082578.340:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 607.857031][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.873973][ T29] audit: type=1326 audit(1727082578.340:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 607.945816][ T29] audit: type=1326 audit(1727082578.340:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 607.956593][ T5288] kovaplus 0003:1E7D:2D50.005C: couldn't init struct kovaplus_device [ 607.976750][ T5288] kovaplus 0003:1E7D:2D50.005C: couldn't install mouse [ 608.005746][ T5288] kovaplus 0003:1E7D:2D50.005C: probe with driver kovaplus failed with error -71 [ 608.028361][ T29] audit: type=1326 audit(1727082578.340:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 608.029257][ T5288] usb 3-1: USB disconnect, device number 94 [ 608.061117][ T8] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 608.095992][T15720] FAULT_INJECTION: forcing a failure. [ 608.095992][T15720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.166492][ T29] audit: type=1326 audit(1727082578.340:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 608.200804][T15720] CPU: 0 UID: 0 PID: 15720 Comm: syz.4.2548 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 608.211300][T15720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 608.221402][T15720] Call Trace: [ 608.224723][T15720] [ 608.227690][T15720] dump_stack_lvl+0x241/0x360 [ 608.232430][T15720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.237686][T15720] ? __pfx__printk+0x10/0x10 [ 608.242336][T15720] ? __pfx_lock_release+0x10/0x10 [ 608.247434][T15720] should_fail_ex+0x3b0/0x4e0 [ 608.252185][T15720] _copy_from_iter+0x1ed/0x1d60 [ 608.257089][T15720] ? _copy_from_iter+0x257/0x1d60 [ 608.262176][T15720] ? __virt_addr_valid+0x183/0x530 [ 608.267339][T15720] ? skb_set_owner_w+0x238/0x3e0 [ 608.272338][T15720] ? __pfx_lock_release+0x10/0x10 [ 608.277429][T15720] ? __pfx__copy_from_iter+0x10/0x10 [ 608.282772][T15720] ? __pfx__copy_from_iter+0x10/0x10 [ 608.288120][T15720] ? page_copy_sane+0x154/0x260 [ 608.293289][T15720] copy_page_from_iter+0x7a/0x100 [ 608.298373][T15720] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 608.304339][T15720] packet_sendmsg+0x435c/0x6860 [ 608.309430][T15720] ? aa_sk_perm+0x96d/0xab0 [ 608.313983][T15720] ? __pfx_packet_sendmsg+0x10/0x10 [ 608.319156][ T29] audit: type=1326 audit(1727082578.340:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 608.319221][T15720] ? __fget_files+0x29/0x470 [ 608.346001][T15720] ? aa_sock_msg_perm+0x91/0x160 [ 608.351004][T15720] ? __pfx_packet_sendmsg+0x10/0x10 [ 608.356248][T15720] __sock_sendmsg+0x221/0x270 [ 608.358004][ T29] audit: type=1326 audit(1727082578.340:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 608.360954][T15720] __sys_sendto+0x398/0x4f0 [ 608.361001][T15720] ? __pfx___sys_sendto+0x10/0x10 [ 608.361056][T15720] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 608.399105][T15720] __ia32_sys_sendto+0xdd/0x100 [ 608.404022][T15720] __do_fast_syscall_32+0xb4/0x110 [ 608.409206][T15720] ? exc_page_fault+0x590/0x8c0 [ 608.414112][T15720] do_fast_syscall_32+0x34/0x80 [ 608.419107][T15720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.425495][T15720] RIP: 0023:0xf744d579 [ 608.429606][T15720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 608.449262][T15720] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 608.456762][ T29] audit: type=1326 audit(1727082578.340:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 608.457702][T15720] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000180 [ 608.457723][T15720] RDX: 0000000000010008 RSI: 0000000000000000 RDI: 0000000020000140 [ 608.457740][T15720] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 608.457756][T15720] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 608.457771][T15720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.490402][ T29] audit: type=1326 audit(1727082578.340:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 608.495949][T15720] [ 608.508984][ T5281] usb 2-1: USB disconnect, device number 119 [ 608.614682][ T8] usb 1-1: config 0 has no interfaces? [ 608.624757][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 608.637742][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.671795][ T29] audit: type=1326 audit(1727082578.340:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 608.719769][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2550'. [ 608.749965][ T8] usb 1-1: config 0 descriptor?? [ 609.009672][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2553'. [ 609.021319][ T8] usb 1-1: USB disconnect, device number 101 [ 609.229058][ T5281] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 609.243783][T15747] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 609.319550][ T5293] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 609.391337][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 609.411248][ T5281] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 609.423453][ T5281] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.439938][T15759] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 609.467857][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 609.477401][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.486354][ T5281] usb 3-1: Product: syz [ 609.492078][ T5281] usb 3-1: Manufacturer: syz [ 609.492682][ T5293] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.507264][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.516371][ T5281] usb 3-1: SerialNumber: syz [ 609.534781][ T5293] usb 5-1: config 0 descriptor?? [ 609.546601][ T5281] hub 3-1:1.0: bad descriptor, ignoring hub [ 609.559466][ T5289] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 609.567565][ T5281] hub 3-1:1.0: probe with driver hub failed with error -5 [ 609.750533][ T5289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.779054][ T5289] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 609.788126][ T5289] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 609.816025][ T5281] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 95 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 609.863377][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.891331][ T5289] usb 2-1: config 0 descriptor?? [ 609.943213][T15776] netlink: 'syz.0.2560': attribute type 29 has an invalid length. [ 609.977644][T15776] netlink: 'syz.0.2560': attribute type 29 has an invalid length. [ 610.161388][ T5288] usb 3-1: USB disconnect, device number 95 [ 610.169478][ T5288] usblp0: removed [ 610.189024][ T5293] [drm:udl_init] *ERROR* Selecting channel failed [ 610.216436][T15755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.227471][ T5293] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 610.235506][ T5293] [drm] Initialized udl on minor 2 [ 610.243118][ T5293] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 610.252273][ T5293] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 610.269428][ T5281] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 610.280873][ T5281] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 610.289292][ T5281] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 610.310383][T15755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.318785][ T5293] usb 5-1: USB disconnect, device number 96 [ 610.382828][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 610.437096][ T5288] usb 2-1: USB disconnect, device number 120 [ 610.534442][ T5289] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 610.709059][ T5289] usb 1-1: Using ep0 maxpacket: 16 [ 610.727184][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.746136][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2566'. [ 610.776356][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.817807][ T5289] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 610.839804][ T5289] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 610.859799][ T5289] usb 1-1: Product: syz [ 610.867319][ T5289] usb 1-1: Manufacturer: syz [ 610.886235][ T5289] usb 1-1: config 0 descriptor?? [ 611.094529][T15801] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 611.186063][T15806] netlink: 'syz.4.2572': attribute type 29 has an invalid length. [ 611.205420][T15807] netlink: 'syz.2.2569': attribute type 10 has an invalid length. [ 611.320363][T15807] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 611.343306][ T5289] kovaplus 0003:1E7D:2D50.005D: unknown main item tag 0xd [ 611.344548][ T5289] kovaplus 0003:1E7D:2D50.005D: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 611.346639][T15806] netlink: 'syz.4.2572': attribute type 29 has an invalid length. [ 611.373576][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 611.537356][T15814] random: crng reseeded on system resumption [ 611.758972][ T5277] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 611.930577][ T5277] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 611.948724][ T5289] kovaplus 0003:1E7D:2D50.005D: couldn't init struct kovaplus_device [ 611.959987][T15815] warning: `syz.3.2574' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 611.981465][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2574'. [ 611.991081][ T5277] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 612.005202][ T5289] kovaplus 0003:1E7D:2D50.005D: couldn't install mouse [ 612.020335][ T5289] kovaplus 0003:1E7D:2D50.005D: probe with driver kovaplus failed with error -71 [ 612.039553][ T5277] usb 5-1: config 0 interface 0 has no altsetting 0 [ 612.064514][ T5277] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 612.075435][ T5289] usb 1-1: USB disconnect, device number 102 [ 612.088917][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.097106][ T5277] usb 5-1: Product: syz [ 612.150429][ T5277] usb 5-1: Manufacturer: syz [ 612.165086][T15826] netlink: 'syz.2.2576': attribute type 14 has an invalid length. [ 612.179181][ T5277] usb 5-1: SerialNumber: syz [ 612.194283][T15826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2576'. [ 612.220669][ T5277] usb 5-1: config 0 descriptor?? [ 612.243633][ T5277] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input48 [ 612.428129][T15812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.462908][T15812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.480857][ T5277] usb 5-1: USB disconnect, device number 97 [ 612.530003][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 612.786505][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 612.802439][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'. [ 613.451213][ T5281] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 613.620990][ T5281] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 613.632512][ T5281] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 613.644716][ T5281] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 613.654497][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.875695][T15857] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2590'. [ 613.916141][T15857] gretap0: entered promiscuous mode [ 613.955757][T15866] loop7: detected capacity change from 0 to 16384 [ 613.972172][ T5281] usb 3-1: string descriptor 0 read error: -71 [ 613.994832][ T5281] hub 3-1:32.0: USB hub found [ 613.998632][T15864] caif0: entered allmulticast mode [ 614.017956][ T5281] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 614.108537][ T5281] usb 3-1: USB disconnect, device number 96 [ 614.146352][T15864] loop7: detected capacity change from 16384 to 16383 [ 614.169265][ T5278] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 614.350623][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 614.389897][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.470243][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.497615][ T5278] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 614.517199][ T5278] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 614.549876][ T5278] usb 1-1: Product: syz [ 614.554333][ T5278] usb 1-1: Manufacturer: syz [ 614.609091][ T5289] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 614.630503][ T5278] usb 1-1: config 0 descriptor?? [ 614.779051][ T5289] usb 5-1: device descriptor read/64, error -71 [ 615.029878][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 615.033588][T15883] loop2: detected capacity change from 0 to 4 [ 615.048730][T15883] Dev loop2: unable to read RDB block 4 [ 615.059544][T15883] loop2: unable to read partition table [ 615.068647][ T5278] kovaplus 0003:1E7D:2D50.005E: unknown main item tag 0xd [ 615.088276][ T5278] kovaplus 0003:1E7D:2D50.005E: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 615.113102][T15883] loop2: partition table beyond EOD, truncated [ 615.125065][ T5289] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 615.137115][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2601'. [ 615.159274][T15883] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.176219][ T4681] Dev loop2: unable to read RDB block 4 [ 615.184247][ T4681] loop2: unable to read partition table [ 615.195833][ T4681] loop2: partition table beyond EOD, truncated [ 615.290095][ T5289] usb 5-1: device descriptor read/64, error -71 [ 615.409213][ T5289] usb usb5-port1: attempt power cycle [ 615.518367][T15896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2605'. [ 615.559113][ T5281] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 615.707068][ T5278] kovaplus 0003:1E7D:2D50.005E: couldn't init struct kovaplus_device [ 615.720934][ T5281] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.726031][ T5278] kovaplus 0003:1E7D:2D50.005E: couldn't install mouse [ 615.736718][ T5281] usb 3-1: config 5 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.752732][ T5278] kovaplus 0003:1E7D:2D50.005E: probe with driver kovaplus failed with error -71 [ 615.767856][ T5281] usb 3-1: New USB device found, idVendor=0570, idProduct=009f, bcdDevice= 0.00 [ 615.769021][ T5289] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 615.780759][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.805559][ T5278] usb 1-1: USB disconnect, device number 103 [ 615.816622][ T5289] usb 5-1: device descriptor read/8, error -71 [ 615.966259][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.064908][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.069074][ T5289] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 616.107770][ T5289] usb 5-1: device descriptor read/8, error -71 [ 616.205751][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.226961][ T5289] usb usb5-port1: unable to enumerate USB device [ 616.248399][T15906] netlink: 'syz.1.2610': attribute type 4 has an invalid length. [ 616.307557][T15889] netlink: 'syz.2.2602': attribute type 10 has an invalid length. [ 616.329087][T15889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.359651][T15889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.397931][T15889] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 616.472462][ T5281] usbhid 3-1:5.0: can't add hid device: -71 [ 616.488450][ T5281] usbhid 3-1:5.0: probe with driver usbhid failed with error -71 [ 616.522077][ T5281] usb 3-1: USB disconnect, device number 97 [ 616.580446][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.631335][T15913] bridge_slave_1: left allmulticast mode [ 616.635787][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 616.648296][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 616.661336][T15913] bridge_slave_1: left promiscuous mode [ 616.670509][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 616.679846][T15913] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.689663][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 616.699531][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 616.706924][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 616.741568][T15913] bridge_slave_0: left allmulticast mode [ 616.747243][T15913] bridge_slave_0: left promiscuous mode [ 616.766710][T15913] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.789295][ T5293] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 616.998158][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.048075][ T5293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.061389][ T5293] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.087228][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.150409][ T5293] usb 2-1: config 0 descriptor?? [ 617.217133][T15924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2614'. [ 617.291280][ T52] bridge_slave_1: left allmulticast mode [ 617.306667][ T52] bridge_slave_1: left promiscuous mode [ 617.336729][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.359022][ T5289] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 617.379887][ T52] bridge_slave_0: left allmulticast mode [ 617.389493][ T52] bridge_slave_0: left promiscuous mode [ 617.395340][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.539025][ T5289] usb 1-1: Using ep0 maxpacket: 8 [ 617.547103][ T5289] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 617.569051][ T5289] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 617.584073][ T5289] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.592690][ T5293] plantronics 0003:047F:FFFF.005F: unbalanced collection at end of report description [ 617.620483][ T5289] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.639720][ T5293] plantronics 0003:047F:FFFF.005F: parse failed [ 617.644110][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.649147][ T5293] plantronics 0003:047F:FFFF.005F: probe with driver plantronics failed with error -22 [ 617.666188][ T5289] usb 1-1: Product: syz [ 617.675941][ T5289] usb 1-1: Manufacturer: syz [ 617.687412][ T5289] usb 1-1: SerialNumber: syz [ 617.854481][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.887536][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.151806][ T5289] usb 1-1: 0:2 : does not exist [ 618.192990][ T5289] usb 1-1: USB disconnect, device number 104 [ 618.243708][T12299] udevd[12299]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.375306][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.387846][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.409589][ T52] bond0 (unregistering): Released all slaves [ 618.441825][ T5289] usb 2-1: USB disconnect, device number 121 [ 618.535612][T15916] chnl_net:caif_netlink_parms(): no params data found [ 618.654828][T15953] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2617'. [ 618.676550][T15953] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2617'. [ 618.806020][T15951] netlink: 'syz.2.2616': attribute type 29 has an invalid length. [ 618.808996][ T54] Bluetooth: hci2: command tx timeout [ 618.829120][T15956] netlink: 'syz.2.2616': attribute type 29 has an invalid length. [ 619.017117][ T2939] bond0: (slave bond_slave_0): interface is now down [ 619.047686][ T2939] bond0: (slave bond_slave_1): interface is now down [ 619.111191][ T9778] bond0: (slave bond_slave_0): interface is now down [ 619.118008][ T9778] bond0: (slave bond_slave_1): interface is now down [ 619.135818][T15969] netlink: 'syz.4.2618': attribute type 10 has an invalid length. [ 619.138973][ T9778] bond0: (slave bond_slave_0): interface is now down [ 619.157689][ T9778] bond0: (slave bond_slave_1): interface is now down [ 619.182373][T15969] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 619.189081][ T9778] bond0: (slave bond_slave_0): interface is now down [ 619.198300][ T9778] bond0: (slave bond_slave_1): interface is now down [ 619.236788][T15976] vlan2: entered promiscuous mode [ 619.249624][ T3729] bond0: (slave bond_slave_0): interface is now down [ 619.256573][T15976] bridge0: entered promiscuous mode [ 619.264513][ T3729] bond0: (slave bond_slave_1): interface is now down [ 619.275448][T15976] bridge0: port 3(vlan2) entered blocking state [ 619.284146][T15976] bridge0: port 3(vlan2) entered disabled state [ 619.291495][T15976] vlan2: entered allmulticast mode [ 619.296972][T15976] bridge0: entered allmulticast mode [ 619.309336][ T9778] bond0: (slave bond_slave_0): interface is now down [ 619.327372][ T9778] bond0: (slave bond_slave_1): interface is now down [ 619.336182][T15976] vlan2: left allmulticast mode [ 619.342068][ T5293] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 619.351858][ T2939] bond0: (slave bond_slave_0): interface is now down [ 619.357493][T15976] bridge0: left allmulticast mode [ 619.368587][ T2939] bond0: (slave bond_slave_1): interface is now down [ 619.397051][T15976] bridge0: left promiscuous mode [ 619.413011][ T2939] bond0: (slave bond_slave_0): interface is now down [ 619.427827][ T2939] bond0: (slave bond_slave_1): interface is now down [ 619.458925][ T3729] bond0: (slave bond_slave_0): interface is now down [ 619.465678][ T3729] bond0: (slave bond_slave_1): interface is now down [ 619.499571][ T7430] bond0: (slave bond_slave_0): interface is now down [ 619.508053][ T7430] bond0: (slave bond_slave_1): interface is now down [ 619.523500][ T52] hsr_slave_0: left promiscuous mode [ 619.529232][ T5293] usb 2-1: Using ep0 maxpacket: 16 [ 619.534415][ T7430] bond0: (slave bond_slave_0): interface is now down [ 619.536346][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.549290][ T7430] bond0: (slave bond_slave_1): interface is now down [ 619.560905][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.573872][ T52] hsr_slave_1: left promiscuous mode [ 619.587745][ T5293] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 619.589212][ T9778] bond0: (slave bond_slave_0): interface is now down [ 619.598633][ T5293] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 619.617465][T15986] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 619.627196][ T5293] usb 2-1: Product: syz [ 619.628664][ T9778] bond0: (slave bond_slave_1): interface is now down [ 619.649631][ T5293] usb 2-1: Manufacturer: syz [ 619.660054][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.667543][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.676107][ T5293] usb 2-1: config 0 descriptor?? [ 619.683690][ T11] bond0: (slave bond_slave_0): interface is now down [ 619.690691][ T11] bond0: (slave bond_slave_1): interface is now down [ 619.699000][ T46] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 619.721777][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.739010][ T11] bond0: (slave bond_slave_0): interface is now down [ 619.746729][ T11] bond0: (slave bond_slave_1): interface is now down [ 619.746819][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.779199][ T35] bond0: (slave bond_slave_0): interface is now down [ 619.787184][ T35] bond0: (slave bond_slave_1): interface is now down [ 619.809120][ T11] bond0: (slave bond_slave_0): interface is now down [ 619.823371][ T52] veth1_macvtap: left promiscuous mode [ 619.842180][ T11] bond0: (slave bond_slave_1): interface is now down [ 619.861449][ T52] veth0_macvtap: left promiscuous mode [ 619.862577][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 619.874151][ T52] veth1_vlan: left promiscuous mode [ 619.889342][ T11] bond0: (slave bond_slave_0): interface is now down [ 619.890846][ T52] veth0_vlan: left promiscuous mode [ 619.897127][ T11] bond0: (slave bond_slave_1): interface is now down [ 619.920724][ T46] usb 5-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 619.932231][ T11] bond0: (slave bond_slave_0): interface is now down [ 619.939086][ T11] bond0: (slave bond_slave_1): interface is now down [ 619.951161][ T46] usb 5-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 619.966762][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.980190][ T11] bond0: (slave bond_slave_0): interface is now down [ 619.987615][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.019511][ T46] quatech2 5-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 620.029017][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.035773][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.069518][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.076591][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.101450][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.108401][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.114867][ T5293] kovaplus 0003:1E7D:2D50.0060: unknown main item tag 0xd [ 620.129004][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.130896][ T5293] kovaplus 0003:1E7D:2D50.0060: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 620.135974][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.171465][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.178778][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.198988][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.209220][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.229096][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.251588][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.282401][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.289570][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.299089][ T937] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 620.310466][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2622'. [ 620.310546][ T35] bond0: (slave bond_slave_0): interface is now down [ 620.326708][ T35] bond0: (slave bond_slave_1): interface is now down [ 620.349061][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.355882][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.390511][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.398471][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.419095][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.425941][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.449270][ T12] bond0: (slave bond_slave_0): interface is now down [ 620.450971][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.456034][ T12] bond0: (slave bond_slave_1): interface is now down [ 620.475401][ T12] bond0: (slave bond_slave_0): interface is now down [ 620.494905][ T12] bond0: (slave bond_slave_1): interface is now down [ 620.496060][ T937] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.512341][ T937] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 620.520258][ T35] bond0: (slave bond_slave_0): interface is now down [ 620.528671][ T35] bond0: (slave bond_slave_1): interface is now down [ 620.546269][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.558017][ T11] bond0: (slave bond_slave_0): interface is now down [ 620.574423][ T937] usb 1-1: config 0 descriptor?? [ 620.584876][ T11] bond0: (slave bond_slave_1): interface is now down [ 620.630197][ T12] bond0: (slave bond_slave_0): interface is now down [ 620.636996][ T12] bond0: (slave bond_slave_1): interface is now down [ 620.679421][ T35] bond0: (slave bond_slave_0): interface is now down [ 620.691424][ T35] bond0: (slave bond_slave_1): interface is now down [ 620.722807][ T35] bond0: (slave bond_slave_0): interface is now down [ 620.738958][ T35] bond0: (slave bond_slave_1): interface is now down [ 620.756045][ T5293] kovaplus 0003:1E7D:2D50.0060: couldn't init struct kovaplus_device [ 620.765501][ T12] bond0: (slave bond_slave_0): interface is now down [ 620.774173][ T12] bond0: (slave bond_slave_1): interface is now down [ 620.781034][ T5293] kovaplus 0003:1E7D:2D50.0060: couldn't install mouse [ 620.789351][ T5293] kovaplus 0003:1E7D:2D50.0060: probe with driver kovaplus failed with error -71 [ 620.809141][ T12] bond0: (slave bond_slave_0): interface is now down [ 620.822215][ T5293] usb 2-1: USB disconnect, device number 122 [ 620.825193][ T12] bond0: (slave bond_slave_1): interface is now down [ 620.869457][ T12] bond0: (slave bond_slave_0): interface is now down [ 620.879008][ T54] Bluetooth: hci2: command tx timeout [ 620.893840][T15989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.899824][ T12] bond0: (slave bond_slave_1): interface is now down [ 620.942105][ T12] bond0: (slave bond_slave_0): interface is now down [ 620.944476][T15989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.963662][ T12] bond0: (slave bond_slave_1): interface is now down [ 620.989054][ T35] bond0: (slave bond_slave_0): interface is now down [ 620.995789][ T35] bond0: (slave bond_slave_1): interface is now down [ 621.029015][ T35] bond0: (slave bond_slave_0): interface is now down [ 621.039496][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'. [ 621.055087][ T35] bond0: (slave bond_slave_1): interface is now down [ 621.100016][ T7430] bond0: (slave bond_slave_0): interface is now down [ 621.106862][ T7430] bond0: (slave bond_slave_1): interface is now down [ 621.157288][ T9778] bond0: (slave bond_slave_0): interface is now down [ 621.171530][ T9778] bond0: (slave bond_slave_1): interface is now down [ 621.186529][ T5278] usb 1-1: USB disconnect, device number 105 [ 621.199050][ T35] bond0: (slave bond_slave_0): interface is now down [ 621.217788][ T35] bond0: (slave bond_slave_1): interface is now down [ 621.239054][ T35] bond0: (slave bond_slave_0): interface is now down [ 621.246004][ T35] bond0: (slave bond_slave_1): interface is now down [ 621.268896][ T7430] bond0: (slave bond_slave_0): interface is now down [ 621.284020][ T7430] bond0: (slave bond_slave_1): interface is now down [ 621.309266][ T9778] bond0: (slave bond_slave_0): interface is now down [ 621.318010][ T9778] bond0: (slave bond_slave_1): interface is now down [ 621.362881][ T12] bond0: (slave bond_slave_0): interface is now down [ 621.379241][ T12] bond0: (slave bond_slave_1): interface is now down [ 621.417098][ T12] bond0: (slave bond_slave_0): interface is now down [ 621.452693][ T12] bond0: (slave bond_slave_1): interface is now down [ 621.493515][ T11] bond0: (slave bond_slave_0): interface is now down [ 621.504298][ T11] bond0: (slave bond_slave_1): interface is now down [ 621.548978][ T9778] bond0: (slave bond_slave_0): interface is now down [ 621.559024][ T9778] bond0: (slave bond_slave_1): interface is now down [ 621.589183][ T9778] bond0: (slave bond_slave_0): interface is now down [ 621.596043][ T9778] bond0: (slave bond_slave_1): interface is now down [ 621.645418][ T52] team0 (unregistering): Port device team_slave_1 removed [ 621.656524][ T9778] bond0: (slave bond_slave_0): interface is now down [ 621.676995][ T9778] bond0: (slave bond_slave_1): interface is now down [ 621.699779][ T9778] bond0: (slave bond_slave_0): interface is now down [ 621.727266][ T9778] bond0: (slave bond_slave_1): interface is now down [ 621.749005][ T9778] bond0: (slave bond_slave_0): interface is now down [ 621.755932][ T9778] bond0: (slave bond_slave_1): interface is now down [ 621.768602][ T52] team0 (unregistering): Port device team_slave_0 removed [ 621.793551][ T937] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 621.801554][ T9778] bond0: (slave bond_slave_0): interface is now down [ 621.808765][ T9778] bond0: (slave bond_slave_1): interface is now down [ 621.830571][ T12] bond0: (slave bond_slave_0): interface is now down [ 621.847080][ T12] bond0: (slave bond_slave_1): interface is now down [ 621.884594][ T35] bond0: (slave bond_slave_0): interface is now down [ 621.892752][ T35] bond0: (slave bond_slave_1): interface is now down [ 621.927063][ T35] bond0: (slave bond_slave_0): interface is now down [ 621.935414][ T35] bond0: (slave bond_slave_1): interface is now down [ 621.961994][ T11] bond0: (slave bond_slave_0): interface is now down [ 621.969512][ T11] bond0: (slave bond_slave_1): interface is now down [ 621.990652][ T11] bond0: (slave bond_slave_0): interface is now down [ 622.000552][ T11] bond0: (slave bond_slave_1): interface is now down [ 622.001430][ T937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.018195][ T937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.020221][ T35] bond0: (slave bond_slave_0): interface is now down [ 622.028392][ T937] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 622.044392][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.058334][ T937] usb 2-1: config 0 descriptor?? [ 622.063955][ T35] bond0: (slave bond_slave_1): interface is now down [ 622.099108][ T35] bond0: (slave bond_slave_0): interface is now down [ 622.108323][ T35] bond0: (slave bond_slave_1): interface is now down [ 622.128972][ T11] bond0: (slave bond_slave_0): interface is now down [ 622.144402][ T11] bond0: (slave bond_slave_1): interface is now down [ 622.171029][ T11] bond0: (slave bond_slave_0): interface is now down [ 622.186278][ T11] bond0: (slave bond_slave_1): interface is now down [ 622.210371][ T7430] bond0: (slave bond_slave_0): interface is now down [ 622.217441][ T7430] bond0: (slave bond_slave_1): interface is now down [ 622.229199][ T7430] bond0: (slave bond_slave_0): interface is now down [ 622.236134][ T7430] bond0: (slave bond_slave_1): interface is now down [ 622.276992][ T12] bond0: (slave bond_slave_0): interface is now down [ 622.297302][ T12] bond0: (slave bond_slave_1): interface is now down [ 622.334540][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.344994][ T35] bond0: (slave bond_slave_0): interface is now down [ 622.365235][ T35] bond0: (slave bond_slave_1): interface is now down [ 622.376302][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.400168][ T35] bond0: (slave bond_slave_0): interface is now down [ 622.411700][ T35] bond0: (slave bond_slave_1): interface is now down [ 622.438953][ T35] bond0: (slave bond_slave_0): interface is now down [ 622.447156][ T35] bond0: (slave bond_slave_1): interface is now down [ 622.469954][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 622.485956][ T12] bond0: (slave bond_slave_0): interface is now down [ 622.497866][ T12] bond0: (slave bond_slave_1): interface is now down [ 622.519056][ T12] bond0: (slave bond_slave_0): interface is now down [ 622.526148][ T12] bond0: (slave bond_slave_1): interface is now down [ 622.549580][ T12] bond0: (slave bond_slave_0): interface is now down [ 622.556741][ T12] bond0: (slave bond_slave_1): interface is now down [ 622.589026][ T12] bond0: (slave bond_slave_0): interface is now down [ 622.612029][ T12] bond0: (slave bond_slave_1): interface is now down [ 622.640042][ T12] bond0: (slave bond_slave_0): interface is now down [ 622.651714][ T5289] usb 2-1: USB disconnect, device number 123 [ 622.664074][ T12] bond0: (slave bond_slave_1): interface is now down [ 622.688965][ T11] bond0: (slave bond_slave_0): interface is now down [ 622.703527][ T11] bond0: (slave bond_slave_1): interface is now down [ 622.744115][ T11] bond0: (slave bond_slave_0): interface is now down [ 622.753723][ T11] bond0: (slave bond_slave_1): interface is now down [ 622.779086][ T12] bond0: (slave bond_slave_0): interface is now down [ 622.805336][ T12] bond0: (slave bond_slave_1): interface is now down [ 622.838199][ T35] bond0: (slave bond_slave_0): interface is now down [ 622.845192][ T35] bond0: (slave bond_slave_1): interface is now down [ 622.879235][ T35] bond0: (slave bond_slave_0): interface is now down [ 622.897369][ T35] bond0: (slave bond_slave_1): interface is now down [ 622.919168][ T35] bond0: (slave bond_slave_0): interface is now down [ 622.926267][ T35] bond0: (slave bond_slave_1): interface is now down [ 622.951047][ T11] bond0: (slave bond_slave_0): interface is now down [ 622.959633][ T11] bond0: (slave bond_slave_1): interface is now down [ 622.966574][ T54] Bluetooth: hci2: command tx timeout [ 622.979293][ T9778] bond0: (slave bond_slave_0): interface is now down [ 622.989230][ T9778] bond0: (slave bond_slave_1): interface is now down [ 623.019102][ T9778] bond0: (slave bond_slave_0): interface is now down [ 623.029112][ T9778] bond0: (slave bond_slave_1): interface is now down [ 623.055932][ T7430] bond0: (slave bond_slave_0): interface is now down [ 623.064279][ T7430] bond0: (slave bond_slave_1): interface is now down [ 623.092332][ T7430] bond0: (slave bond_slave_0): interface is now down [ 623.100888][ T7430] bond0: (slave bond_slave_1): interface is now down [ 623.128927][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.135707][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.160844][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.167895][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.189033][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.196172][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.229082][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.244874][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.274230][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.290211][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.319145][ T35] bond0: (slave bond_slave_0): interface is now down [ 623.326085][ T35] bond0: (slave bond_slave_1): interface is now down [ 623.348175][T15916] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.349074][ T9778] bond0: (slave bond_slave_0): interface is now down [ 623.356541][T15916] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.371226][T15916] bridge_slave_0: entered allmulticast mode [ 623.377307][ T9778] bond0: (slave bond_slave_1): interface is now down [ 623.378729][T15916] bridge_slave_0: entered promiscuous mode [ 623.395524][T15916] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.403253][T15916] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.410514][ T35] bond0: (slave bond_slave_0): interface is now down [ 623.411256][T15916] bridge_slave_1: entered allmulticast mode [ 623.417325][ T35] bond0: (slave bond_slave_1): interface is now down [ 623.433348][T15916] bridge_slave_1: entered promiscuous mode [ 623.439163][ T35] bond0: (slave bond_slave_0): interface is now down [ 623.439192][ T35] bond0: (slave bond_slave_1): interface is now down [ 623.459145][ T7430] bond0: (slave bond_slave_0): interface is now down [ 623.470031][ T7430] bond0: (slave bond_slave_1): interface is now down [ 623.477831][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2622'. [ 623.490028][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.540561][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.569869][ T46] usb 5-1: qt2_attach - failed to power on unit: -71 [ 623.573202][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.579061][ T46] quatech2 5-1:24.0: probe with driver quatech2 failed with error -71 [ 623.603510][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.631854][ T46] usb 5-1: USB disconnect, device number 102 [ 623.659037][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.676081][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.708733][T15916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.719757][ T9778] bond0: (slave bond_slave_0): interface is now down [ 623.726497][ T9778] bond0: (slave bond_slave_1): interface is now down [ 623.739925][T15916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.780732][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.787487][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.813815][ T35] bond0: (slave bond_slave_0): interface is now down [ 623.828716][ T35] bond0: (slave bond_slave_1): interface is now down [ 623.854646][ T35] bond0: (slave bond_slave_0): interface is now down [ 623.854676][ T35] bond0: (slave bond_slave_1): interface is now down [ 623.859387][T15916] team0: Port device team_slave_0 added [ 623.863385][T15916] team0: Port device team_slave_1 added [ 623.874422][ T35] bond0: (slave bond_slave_0): interface is now down [ 623.874460][ T35] bond0: (slave bond_slave_1): interface is now down [ 623.889365][ T9778] bond0: (slave bond_slave_0): interface is now down [ 623.889393][ T9778] bond0: (slave bond_slave_1): interface is now down [ 623.919187][ T11] bond0: (slave bond_slave_0): interface is now down [ 623.919217][ T11] bond0: (slave bond_slave_1): interface is now down [ 623.938925][ T35] bond0: (slave bond_slave_0): interface is now down [ 623.938953][ T35] bond0: (slave bond_slave_1): interface is now down [ 623.947047][T15916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.947072][T15916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.947102][T15916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.950080][T15916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.950100][T15916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.950131][T15916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.960590][ T11] bond0: (slave bond_slave_0): interface is now down [ 624.039018][ T46] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 624.084589][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.181846][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2629'. [ 624.214493][ T11] bond0: (slave bond_slave_1): interface is now down [ 624.270090][ T35] bond0: (slave bond_slave_0): interface is now down [ 624.276847][ T35] bond0: (slave bond_slave_1): interface is now down [ 624.299114][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 624.345695][ T9778] bond0: (slave bond_slave_0): interface is now down [ 624.352711][ T9778] bond0: (slave bond_slave_1): interface is now down [ 624.379800][ T11] bond0: (slave bond_slave_0): interface is now down [ 624.387696][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 624.392440][ T11] bond0: (slave bond_slave_1): interface is now down [ 624.438109][ T46] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 624.447697][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.455826][ T46] usb 5-1: Product: syz [ 624.459365][ T35] bond0: (slave bond_slave_0): interface is now down [ 624.460318][ T46] usb 5-1: Manufacturer: syz [ 624.472812][ T46] usb 5-1: SerialNumber: syz [ 624.484796][T15916] hsr_slave_0: entered promiscuous mode [ 624.497477][ T35] bond0: (slave bond_slave_1): interface is now down [ 624.502776][ T46] usb 5-1: config 0 descriptor?? [ 624.524830][ T46] usb 5-1: no audio or video endpoints found [ 624.547226][ T35] bond0: (slave bond_slave_0): interface is now down [ 624.547923][T15916] hsr_slave_1: entered promiscuous mode [ 624.573249][ T35] bond0: (slave bond_slave_1): interface is now down [ 624.582230][T15916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.590442][ T5281] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 624.590706][T15916] Cannot create hsr debugfs directory [ 624.606133][ T35] bond0: (slave bond_slave_0): interface is now down [ 624.621850][ T35] bond0: (slave bond_slave_1): interface is now down [ 624.643545][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.651832][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.669943][ T35] bond0: (slave bond_slave_0): interface is now down [ 624.699028][ T35] bond0: (slave bond_slave_1): interface is now down [ 624.749274][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 624.756077][ T5281] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 624.764188][ T35] bond0: (slave bond_slave_0): interface is now down [ 624.764214][ T35] bond0: (slave bond_slave_1): interface is now down [ 624.775560][T16004] ALSA: mixer_oss: invalid OSS volume '' [ 624.785136][ T35] bond0: (slave bond_slave_0): interface is now down [ 624.788419][ T5281] usb 3-1: config 0 has no interface number 0 [ 624.810002][ T5281] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.814422][ T35] bond0: (slave bond_slave_1): interface is now down [ 624.832552][T16004] program syz.4.2627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.844763][ T5281] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.858542][ T937] usb 5-1: USB disconnect, device number 103 [ 624.865089][ T11] bond0: (slave bond_slave_0): interface is now down [ 624.883492][ T11] bond0: (slave bond_slave_1): interface is now down [ 624.885457][ T5281] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 624.918998][ T35] bond0: (slave bond_slave_0): interface is now down [ 624.922952][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.936046][ T35] bond0: (slave bond_slave_1): interface is now down [ 624.958454][ T5281] usb 3-1: config 0 descriptor?? [ 624.959569][ T11] bond0: (slave bond_slave_0): interface is now down [ 625.005760][ T11] bond0: (slave bond_slave_1): interface is now down [ 625.039097][ T54] Bluetooth: hci2: command tx timeout [ 625.046191][ T35] bond0: (slave bond_slave_0): interface is now down [ 625.068427][ T35] bond0: (slave bond_slave_1): interface is now down [ 625.089149][ T52] bond0: (slave bond_slave_0): interface is now down [ 625.107972][ T52] bond0: (slave bond_slave_1): interface is now down [ 625.128993][ T35] bond0: (slave bond_slave_0): interface is now down [ 625.139203][ T46] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 625.148144][ T35] bond0: (slave bond_slave_1): interface is now down [ 625.168997][ T11] bond0: (slave bond_slave_0): interface is now down [ 625.175748][ T11] bond0: (slave bond_slave_1): interface is now down [ 625.209075][ T11] bond0: (slave bond_slave_0): interface is now down [ 625.233501][ T11] bond0: (slave bond_slave_1): interface is now down [ 625.276160][ T11] bond0: (slave bond_slave_0): interface is now down [ 625.299025][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 625.324741][ T11] bond0: (slave bond_slave_1): interface is now down [ 625.336000][T16035] ------------[ cut here ]------------ [ 625.341724][T16035] WARNING: CPU: 1 PID: 16035 at include/linux/cpumask.h:135 io_sq_offload_create+0xd2f/0xfd0 [ 625.352149][T16035] Modules linked in: [ 625.356088][T16035] CPU: 1 UID: 0 PID: 16035 Comm: syz.2.2630 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 625.366910][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 625.377103][T16035] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 625.383428][T16035] Code: 3d f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 4c 2e 3d f6 e9 95 f3 ff ff e8 72 7a d3 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 625.403241][T16035] RSP: 0018:ffffc9000d0ffc20 EFLAGS: 00010287 [ 625.409541][T16035] RAX: ffffffff8bc13f3e RBX: ffffc9000d0ffdec RCX: 0000000000040000 [ 625.418148][T16035] RDX: ffffc9000955a000 RSI: 000000000000112c RDI: 000000000000112d [ 625.426720][T16035] RBP: ffffc9000d0ffd20 R08: ffffffff8bc13c2b R09: 1ffffffff2039055 [ 625.434879][T16035] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff88807b31a000 [ 625.443192][T16035] R13: 0000000000010000 R14: 1ffff92001a1ff90 R15: ffffc9000d0ffca0 [ 625.451327][T16035] FS: 0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f5665b40 [ 625.460405][T16035] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 625.467070][T16035] CR2: 000000000c3b9041 CR3: 0000000031624000 CR4: 00000000003506f0 [ 625.475152][T16035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 625.483270][T16035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 625.491420][T16035] Call Trace: [ 625.494751][T16035] [ 625.497755][T16035] ? __warn+0x168/0x4e0 [ 625.502084][T16035] ? io_sq_offload_create+0xd2f/0xfd0 [ 625.507519][T16035] ? report_bug+0x2b3/0x500 [ 625.512206][T16035] ? io_sq_offload_create+0xd2f/0xfd0 [ 625.518020][T16035] ? handle_bug+0x60/0x90 [ 625.522900][T16035] ? exc_invalid_op+0x1a/0x50 [ 625.527637][T16035] ? asm_exc_invalid_op+0x1a/0x20 [ 625.532808][T16035] ? io_sq_offload_create+0xa1b/0xfd0 [ 625.538211][T16035] ? io_sq_offload_create+0xd2e/0xfd0 [ 625.543884][T16035] ? io_sq_offload_create+0xd2f/0xfd0 [ 625.549370][T16035] ? __pfx_io_sq_offload_create+0x10/0x10 [ 625.555126][T16035] ? io_allocate_scq_urings+0x426/0x640 [ 625.560819][T16035] io_uring_create+0x792/0x1360 [ 625.565755][T16035] __se_sys_io_uring_setup+0x2ba/0x330 [ 625.571348][T16035] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 625.577396][T16035] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 625.584140][T16035] ? lockdep_hardirqs_on+0x99/0x150 [ 625.589454][T16035] __do_fast_syscall_32+0xb4/0x110 [ 625.594606][T16035] ? ret_from_fork_asm+0x1a/0x30 [ 625.599719][T16035] ? lockdep_hardirqs_on+0x99/0x150 [ 625.604963][T16035] do_fast_syscall_32+0x34/0x80 [ 625.609924][T16035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 625.616350][T16035] RIP: 0023:0xf7f00579 [ 625.620969][T16035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 625.641214][T16035] RSP: 002b:00000000f566551c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 625.649772][T16035] RAX: ffffffffffffffda RBX: 00000000000061e1 RCX: 00000000200001c0 [ 625.657804][T16035] RDX: 00000000f71dd174 RSI: 0000000000000001 RDI: 00000000f566557c [ 625.665966][T16035] RBP: 0000000020000040 R08: 0000000000000000 R09: 0000000000000000 [ 625.674148][T16035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 625.682348][T16035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.690439][T16035] [ 625.693506][T16035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 625.700802][T16035] CPU: 1 UID: 0 PID: 16035 Comm: syz.2.2630 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 625.711240][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 625.721328][T16035] Call Trace: [ 625.724640][T16035] [ 625.727597][T16035] dump_stack_lvl+0x241/0x360 [ 625.732316][T16035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.737545][T16035] ? __pfx__printk+0x10/0x10 [ 625.742592][T16035] ? vscnprintf+0x5d/0x90 [ 625.746979][T16035] panic+0x349/0x880 [ 625.750925][T16035] ? __warn+0x177/0x4e0 [ 625.755120][T16035] ? __pfx_panic+0x10/0x10 [ 625.759597][T16035] __warn+0x34b/0x4e0 [ 625.763670][T16035] ? io_sq_offload_create+0xd2f/0xfd0 [ 625.769108][T16035] report_bug+0x2b3/0x500 [ 625.773536][T16035] ? io_sq_offload_create+0xd2f/0xfd0 [ 625.778968][T16035] handle_bug+0x60/0x90 [ 625.783192][T16035] exc_invalid_op+0x1a/0x50 [ 625.787747][T16035] asm_exc_invalid_op+0x1a/0x20 [ 625.792639][T16035] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 625.798669][T16035] Code: 3d f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 4c 2e 3d f6 e9 95 f3 ff ff e8 72 7a d3 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 625.818327][T16035] RSP: 0018:ffffc9000d0ffc20 EFLAGS: 00010287 [ 625.824435][T16035] RAX: ffffffff8bc13f3e RBX: ffffc9000d0ffdec RCX: 0000000000040000 [ 625.832435][T16035] RDX: ffffc9000955a000 RSI: 000000000000112c RDI: 000000000000112d [ 625.840445][T16035] RBP: ffffc9000d0ffd20 R08: ffffffff8bc13c2b R09: 1ffffffff2039055 [ 625.848440][T16035] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff88807b31a000 [ 625.856423][T16035] R13: 0000000000010000 R14: 1ffff92001a1ff90 R15: ffffc9000d0ffca0 [ 625.864430][T16035] ? io_sq_offload_create+0xa1b/0xfd0 [ 625.869842][T16035] ? io_sq_offload_create+0xd2e/0xfd0 [ 625.875253][T16035] ? __pfx_io_sq_offload_create+0x10/0x10 [ 625.881029][T16035] ? io_allocate_scq_urings+0x426/0x640 [ 625.886612][T16035] io_uring_create+0x792/0x1360 [ 625.891516][T16035] __se_sys_io_uring_setup+0x2ba/0x330 [ 625.897016][T16035] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 625.903045][T16035] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 625.909690][T16035] ? lockdep_hardirqs_on+0x99/0x150 [ 625.915024][T16035] __do_fast_syscall_32+0xb4/0x110 [ 625.920189][T16035] ? ret_from_fork_asm+0x1a/0x30 [ 625.925190][T16035] ? lockdep_hardirqs_on+0x99/0x150 [ 625.930439][T16035] do_fast_syscall_32+0x34/0x80 [ 625.935361][T16035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 625.941731][T16035] RIP: 0023:0xf7f00579 [ 625.945826][T16035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 625.965472][T16035] RSP: 002b:00000000f566551c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 625.973929][T16035] RAX: ffffffffffffffda RBX: 00000000000061e1 RCX: 00000000200001c0 [ 625.981950][T16035] RDX: 00000000f71dd174 RSI: 0000000000000001 RDI: 00000000f566557c [ 625.990054][T16035] RBP: 0000000020000040 R08: 0000000000000000 R09: 0000000000000000 [ 625.998073][T16035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 626.006077][T16035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.014102][T16035] [ 626.017422][T16035] Kernel Offset: disabled [ 626.021762][T16035] Rebooting in 86400 seconds..