last executing test programs: 9.863956669s ago: executing program 2 (id=720): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) semget$private(0x0, 0x1, 0xd) syz_emit_ethernet(0x8e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500580600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="6002000080"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x55, 0x1b, 0x89, 0x20, 0x22b8, 0x6027, 0xc280, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000012c0)=ANY=[], 0xffdd) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = syz_io_uring_setup(0xec4, &(0x7f00000004c0)={0x0, 0x2f4c, 0x400, 0x20000007, 0x26d}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x80800) fallocate(r7, 0x54, 0x5, 0x7) r8 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0xec4, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) 7.991377629s ago: executing program 3 (id=729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080103000000007baa00fe00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.861063995s ago: executing program 2 (id=731): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0, 0x1}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) mq_open(&(0x7f0000000340)='\b\x00\x00\x00\x00\x00\x00\x00E\x00)\xd1-\\r\xdem\xb2}\bQ\xa0\xd2VQ\x00Q`\x83\xb6lP\xc6m3\xdb_\xa6v \x98|\xe0l\xb0\xa80\x9a\xf5u\xbd\x1b@\xeb}\xbf\a\xb9\x91\xe8VA\xe8\xd0\xc1\xd8\x95\x90\x90!\x89\x18^Ol;u\x84\xb2(X\xde\xbe%\x98\xd9\xa6g\x15\xc2\xed\x86b3(\x142Y\xb0\xc2\x1d5\\\xdfW\xb5\x9f\vvB\x9a\xb4K\x97{\xd07\xde}\xc0u\x85\xeb\x1f\xf5\x94EB*$\xf0\xa1\xc7p\x1a\x95\xe8:\xef\x12\\\'-\x0f\xae\xcd\xfdE\xcd\x8e\xfd1\xea\xbaiXhv|_N/E\x84\x98<\xbdS)\xb6\xe1\xf8\xa0#\x16\x92\xfc=\xf3!\x87f\xb1\xa8Iz\x1c\x9f\x15ln\x88\xb0$\x8dW\xcc\xccq\xe1\x7f', 0x40, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000200)=""/255) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd2, &(0x7f00000000c0)) open(0x0, 0x141a42, 0x0) readlink(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0, 0x1}) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) (async) mq_open(&(0x7f0000000340)='\b\x00\x00\x00\x00\x00\x00\x00E\x00)\xd1-\\r\xdem\xb2}\bQ\xa0\xd2VQ\x00Q`\x83\xb6lP\xc6m3\xdb_\xa6v \x98|\xe0l\xb0\xa80\x9a\xf5u\xbd\x1b@\xeb}\xbf\a\xb9\x91\xe8VA\xe8\xd0\xc1\xd8\x95\x90\x90!\x89\x18^Ol;u\x84\xb2(X\xde\xbe%\x98\xd9\xa6g\x15\xc2\xed\x86b3(\x142Y\xb0\xc2\x1d5\\\xdfW\xb5\x9f\vvB\x9a\xb4K\x97{\xd07\xde}\xc0u\x85\xeb\x1f\xf5\x94EB*$\xf0\xa1\xc7p\x1a\x95\xe8:\xef\x12\\\'-\x0f\xae\xcd\xfdE\xcd\x8e\xfd1\xea\xbaiXhv|_N/E\x84\x98<\xbdS)\xb6\xe1\xf8\xa0#\x16\x92\xfc=\xf3!\x87f\xb1\xa8Iz\x1c\x9f\x15ln\x88\xb0$\x8dW\xcc\xccq\xe1\x7f', 0x40, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000200)=""/255) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd2, &(0x7f00000000c0)) (async) open(0x0, 0x141a42, 0x0) (async) readlink(0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) 7.804317776s ago: executing program 3 (id=733): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000d00)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$binfmt_script(r0, 0x0, 0x0) (async) write$binfmt_script(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x80045530, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201010200000010c016e105022400010107800209040004000001020009210500010122bb05090581030002010100"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x1, 0x7) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x1}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000040)=0x8) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r6, 0x8, 0x1, 0x4}, &(0x7f00000000c0)=0x10) 4.951037858s ago: executing program 2 (id=744): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000200000001040000020000000c000000", @ANYRES32, @ANYBLOB="fdffffff00000000000000000000f6745745779e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x11) r2 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, &(0x7f0000000000)={r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4044000) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="39206f1faaaaaaaa10"], 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r7, 0x0, 0x4ffe6, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800}, 0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='#(:.', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='#(:.', 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) 4.695531198s ago: executing program 3 (id=747): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x3, 0x3, 0x25005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) ioctl$int_in(r1, 0x5421, 0x0) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x901) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x330fdb3412e39717) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd_index=0x7, 0x6, {0x0, r3}, 0x9, 0x9, 0x0, {0x0, 0x0, r4}}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = dup(r3) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r2]) r8 = accept4(r6, 0x0, 0x0, 0x0) sendfile(r8, r5, 0x0, 0x8a000) r9 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) 3.889610521s ago: executing program 2 (id=751): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="f88d412ea5b075391d5c69b93cd3f51637ee085c187cee510323bf0729131acdc4e8d59d861099f7d286261f407d129afa9ac9e29cceb2a5aaae753f022b5255343060433a6edd8850fd1d174319f20fb9f49205", 0x54}, {&(0x7f0000000000)="be1d9a891b9e322437cb678cd7a379e4ac32331fc26588899ac78e0ec1c07f2dddde55c281a1d0560d03365fc588f7", 0x2f}, {&(0x7f0000000700)="c778adb3eb6f3ff89b7945cac7d44990436cd8078c3c369da6625370cb4e6804312d42c5188e9c34c6ee9b552dd3ca051de48db3e9c453c744e6aab9d8f6721be0d7cc63db32bb2e394f070c1c8b7050398fcfa126d42539a23f26349e381f4f9919d4cecdd128153ca176a7189fcd2be3", 0x71}, {0x0}, {&(0x7f0000000540)}], 0x5}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.685595363s ago: executing program 2 (id=752): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x60, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000400)=""/147, 0x93}], 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = dup2(r4, r4) r6 = syz_io_uring_setup(0x24f8, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}) io_uring_enter(r6, 0x5b43, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x8918, 0x1000000000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x25, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x1000000, @empty}}}, 0x9c) syz_usb_connect$cdc_ncm(0x0, 0x97, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8001}, @mbim={0xc, 0x24, 0x1b, 0x41f3, 0x0, 0x0, 0x0, 0x59}, @mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) 3.368375978s ago: executing program 4 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x771ae9edda8b2eca}]}}}]}]}], {0x14}}, 0x74}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f00000000c0), 0x4) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x1, 0x808, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x6, 0x0, 0x0, 0x0, "a9c350ea09a558bbc069972fd6135503414190c502f593798bb71c06e61900000000268732ff1ca390b57d5bcf9ff700000000000000000a1000"}}, 0x80}}, 0x24) r6 = eventfd2(0x10000004, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0xa}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000240)=""/139, 0x29, 0x8b, 0x1, 0x3, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800, 0x0, r7, 0xffff, '\x00', r3, r8, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x0, 0x0, 0x0, r6}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6, 0x4}) bind(r2, &(0x7f0000000000)=@llc={0x1a, 0x10e, 0x1, 0xd, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) 2.735982817s ago: executing program 1 (id=759): r0 = semget(0x1, 0x3, 0x315) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000200), 0x0, &(0x7f0000000140)) unshare(0x2000400) socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f00000003c0)='ufs\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="bad104b80058ef65d9d0b800078ec03e640f013d66b9320600000f32ba4300ed26673e2e660f73f0003e0f38f10b66b8005000000f23d00f21f866350000000f0f23f8656436670fc75d97", 0x4b}], 0x1, 0x44, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x5) write(0xffffffffffffffff, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc50631fb02a0647a3c2ed4c85c8eef57d078ec90823a", 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) ioctl$EVIOCRMFF(r3, 0x40085503, &(0x7f0000000100)=0x8) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x682183, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0xfffffffffffffe2c, &(0x7f0000000200)=0x7) 2.086320112s ago: executing program 4 (id=760): r0 = socket(0x3, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) sendto$inet(r0, 0x0, 0x3b, 0x0, &(0x7f0000000600)={0x2, 0x4e20, @multicast2}, 0x10) 1.953412718s ago: executing program 4 (id=761): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000ffffbeda00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) write$rfkill(r1, 0x0, 0x0) 1.703218418s ago: executing program 4 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x78, 0x49, 0xd30, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x18, 0x0, 0x0, 0xffff}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x78}}, 0x0) 1.540054681s ago: executing program 0 (id=763): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 1.510364084s ago: executing program 4 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) memfd_secret(0x0) (async) r1 = memfd_secret(0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x200000d, 0x12, r1, 0x82000000) (async) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x200000d, 0x12, r1, 0x82000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000b40)=""/212, 0xd4}, {&(0x7f0000000780)=""/163, 0xa4}, {&(0x7f0000000840)=""/111, 0xc1}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000440)=""/213, 0xd6}, {&(0x7f00000002c0)=""/24, 0x16}], 0x6, 0x0, 0x3ffc0) (async) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000b40)=""/212, 0xd4}, {&(0x7f0000000780)=""/163, 0xa4}, {&(0x7f0000000840)=""/111, 0xc1}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000440)=""/213, 0xd6}, {&(0x7f00000002c0)=""/24, 0x16}], 0x6, 0x0, 0x3ffc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) 1.248823665s ago: executing program 0 (id=765): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = socket(0xa, 0x3, 0x3) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000740)={@multicast2, @empty}, 0xc) 1.124111195s ago: executing program 4 (id=766): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500238e2aa08732b17000ea20155160d6f022d0002db0480e60904000400ff9e4d050904003702e2a5c60a09050404080009020909050500100010f807"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 1.123853767s ago: executing program 3 (id=767): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000002c0)={{}, {0x8001}, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0xdd, {0x1, 0xc, 0x80, "6577442d603dd802a77accc707bd4f8c7a5e2b70922835f9e7dcf93a2eb4665460ed67aedffbf52b97fb1b121690bbc4a9b7c71092cc6ccec096c18895fd10642fb2a8d83c21d13fd80d506ea28cc4750fa2228245a309dd67e8abda297ad1f4e9b506c52bfc7fdb904a678454b1e0606e0d067c0723fa0804e752d703fa9683", 0x50, "3325f8979a4dde1f3692068baa95872f50b292cd6e25bfbb6ff0c5294c8400d921b71aa7da2ce525ae185bb35b49d219e711ae94c37da5960e74cf006cf275558004975fffee1f44a69808b368503218"}, 0x1f, "a6b9c8cff6ca6ac0e7100f61dbdfc07c80adf5ebd6a6aeda8e26388a08dfd6"}, 0x108}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a98d87b6d12bd41f10177d3d458dd4992861ac000000000000000055aa00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.020665256s ago: executing program 0 (id=768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x4, 0x1fffffff) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c200000000000000000081003200080045ef00300068000009019078000000000000000005029078e0000001452300180067005d0016000164010100ffffffff"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 963.573143ms ago: executing program 1 (id=769): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_to_bond\x00', 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0002002b607b93a2f79d04e82678f3f76472f5eb0088f8e1255ed6a2e128c8e150e91c26e3cf104f12fe0416c82bf2ea5e03486fffd4ae6637d7b8b38d100af4cbaff4e76ea63788457601dd4e9a7617fb0dc666c4fc8e329d8b1ab27898987d25f97dcacfb6256578cc953d2ade41a5c3c46afb7133d677579578caae9d965c113b74", @ANYRES16=r2, @ANYBLOB="050000000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x40001, 0x43) socket$rds(0x15, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x49) bind$rxrpc(r5, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) getpid() openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x444341, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x2000}) read$FUSE(r4, &(0x7f0000003000)={0x2020}, 0x2020) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000000500)=""/132, 0x84}, {&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000380)=""/115, 0x73}], 0x4}, 0x40) syz_open_dev$vim2m(&(0x7f0000000080), 0x107, 0x2) 843.868031ms ago: executing program 0 (id=770): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r2, 0x3, &(0x7f0000000340)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r1, 0x0}, 0x0, 0x0]) syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) write$tun(r1, &(0x7f0000000680)={@val={0x0, 0xc}, @void, @llc={@snap={0xab, 0xaa, "ca", "0a03f8", 0x6007, "35624fabd1b6e1f43f2cd171df8372d60d234e8657390546184528738c9eb8745ef3527662dfb9d395474625d7b1ef132f309f1bb20480f67a382f3b602a8ee6a4b1c0972269a08905c16f69ef068542e341f205ffd71bda36619250398ca1f39a6c49225df2228111c82fe932811dccd7d082ef7552405f2979bbc7fdc4412a08e85a6693f19c04a4df229f26294271a826a15a4dddbc020a6c75a19bffa17613a1f8f9f95586513e6c097c5bbbd7ca4d36ba1c54e8751f469c75c7ec53d2452f8a460e1b548c59ad5ed905f6f9435877e405b81e39bc9413e4dea2fadad210f1ca56d3b5e8f612ec03d154b17d35a261a4d1951f019de24d35ff41002b54b207f01f0130887bca68096017eb27334b72a549a447fb925401d48b4a34ad9734fc4e83be0de8fd956d2afee096a5c016e2b4ccbb6f9bfd77b9e8a7d000c2194bd7ebb70987e157b7b0d76268d00204d47b929a12d7c3d4a4229028f71a4beddfba24141b2d50201e19cc978a83ba0b95ea7325137c9c3ab05f566675616ec9edd86eafa34b75047e09bee09ee0ff333f929fdc9af61c5dc5591fb8b05511bc30c69db79ef713c86643b7cb7abf710c3e07ab670e69e27dd2502e052decf18b5ea2b326149791cc8ba368693ac803f5650fdbf14db6f97536541504598ad4528403dd4046d2f9a21366df81261a215738da823e6c96a1be1dfb9b421d52af7f078bfb8130d53726d37a49563c02513a215dcc7cfcebe5eba5306978c5d794999989ed8d9f3d711eb64e9e0be0fd19cfce64ce816ec5aa1f5f40a2a21c9dd5edeeab57330ea546fdd3becf4dbab4862eb784a0b6b608adeb5ab0c673dbe1cd413936cb3e6bc8b8b814d1f301087b8c21fb0208aa6b5533973864414023293c2f6a883ce987f3356fd0f7a67b3e265181f91d778a62a7cc6b7fb739fa41c86fe5d8f15236ff0396a56386c889a8b7da549f71b9a3b77612edfec7d50705076064a7ab51cdc4008b638e9a7f1737af09bd622e25a39c66d7f0f5045f2f66fe092efd4e6a41843e52fe1a1576b42a83cc46fbaba5378d248efbac80db811c26bb986bd9d37b37c21cf2fc8a04179dd82a79cd3e4517d6194b576c70ef104290d49669aba3db9751783f9803096f6fbe1aec107e8fa5abd8f905329a2c4005bacf2ac099bba23757bcbd0c6211f7549ad2774e927ded521043284a08be114ee6083836a8a4a1e63e8478536310de5f031418b4df7f7085675b0db9e85d3e36b612c11e4986c6b85453c804626222d6c9ea52111e54f85922f0ad28b89f767c013f9d59e5d5801143ff831c571aa1ca44cc43606b8b640ec2d73bc7f4afc0a3f3a5b90ec385d5d108963106ca5f608bbf12f64f1ad06449603b3cc3e401f579a678f696d0ddc8ee116b56fab4e5fd10653249c09d2a0438a09c18573ace27093c3ffd0c9963432fa0ecf43f644b55408e33fa9f1640e1e41a3fef422b8f32038e63881b806559af67e6d6fbd4d929d946863aa6459df09191c7ae93ae0863f943119ff0eebed578a57b0d6c121c535a2712070543d72838d815dab8a8a52f49031ada024a14adc28a3617a2935efb139f212a960324a18dcb2a2aa8bddcd6b5f39caea2a16c1eadf786115b57f43d3c5085e125eccaf58c6274b208a7057ebfabb6d8fe6851639d9f1fc46cf8055a2a0230f722f99b8b89bf2e5933e2cbf5839785067a2caaf72dc77aeb0dbbf6b73b2f15a0bc176ef12b049fce95480b8289c7ef7c7e8b0458587fd00c346960401bca2772140d5a4070bb7deb0e34af27c67f4b0b3a13d42907cf46009e20c376dee491df6ec63c1aba428eeabc156c505da1f2daa5f1e305e2707dce89c242c7e10c4cc6b7402401c08758dcdb5b044028e27483881087222fe48fe2c40a6332e7c6890d4a95264cf906a1288d4793397916bf7de1d8be0feb55cb1264bdbf4208737de7194862eac70de1a38792a4a18ce8358bd53adebcf2050bc32eb22d4b95d0e0ad2c314618f7a7fdb8ac8898faf80b7a467ae18e024c491f81141a9e59189223056a7b55a473e1c769cd2a095441333b669fc69b82ca0e3782bd44c12af997b039e5f99c305f88d434d46afa2d6d4ef133e942de27457ecca431f76ae14c731a009bd3845d7a482df8c4d4e0dc415b688157e98e6c836f3e994228d57a6b92c3ac77c677e2ecdf0a0df54de06769839e9fa3f49c0e22507394b51b75f7106f9742f576562d661ead41b28bb7bb6d5a03e296950913132bdd5290c05914a65b2c3521b314bfc2ccfce71c93316d6f27c396a6add955ece5fbe08cd89dd3c7ad105f9322baa3292b440d3ef3efc3d16cfc99687ea11151ade4dd7861bc7de81223dcd0732a704ebab49e713616278fa76fd09ceb06bfbd72b56acac8dbf3210a137f895209c7db6223d829ba49e75d326c26507e29182eaaf86afd2c261df3625ed26ac468284ef438e040991b771e964652db51184927e599308bc8a8367df22f1720b4376a89ba30d54b37762a8d024b1869ec3722fc9a0d99f1ca2f0bdf71528a7af274182bb1c9727c0d1e5811f0993dd821bea4aa67ca18c9eb041c977f235ab711e5c712c11e08ddc09effbfffec16cdf9ceaead362ae2ab12cbd28694cc17f0f1d57ace9016ec8740e71f94f1676748f6dc1b8f09cd9b07e00910510006325de3c893977bcfb8f6f929fb75ba87b65077289c14a7f9ced080bbd1d01d32b3da8c806298aa89bf387ca2e4605d96abec57955a55de9c78a8d568feee19b4ba65c23700c55f9a42b25d025509e188f4584761f41da6758795e9fc515bda1a866eb268f126104e80fca2cdb20629ee330c48805a2d59b766936de5b147ff43728422690ff1259e45b824c3a041f739a9f8afb684b3a93b45efe9908fbcb008b694bf91ab03c404dac4fb1e703f1bd8f15016743e26633386b73e3818f0c22a7e3774511d2d7e9b9f82c318726b88b20d9c95382b45df66500047a1ea73d90087ea525749f7da2fefb68cef0c2eee1624017f5e58e90c2a59155cba52b2579ede2dc0d8c9fa9a16c2e8e8477393ef9fa926f9f1eae30b0f84d36bf0396a0cfc7d2da6a48ebac1e9ab59873c282cd400c948e39f938e76fd1a80919148408c92b75e0017572751c5b90bda42d825b1b05b683f1824e5c140271b4f31ca021a411c1612ea8b1f62b3b37b85adcebd5873820410c4ba9e0beec7e1b81fb5c42905bea737b9ce15e1f7299caa957458b7cfe05d8be12781a68f690e9417e5ab5477c2fc017791e6d78165ff38d1eec229d65835bed8bf56fc2e0106ea1912d39ded42b5b93ec3335e437320d2b556ae361406cf4fbe7903c6af27682af995659a9fd3c1d400c2e575b4b18776712fedbff26974217453e3047321b9e597cf7e8078911676978a09b37fa76634b5cc434b957600ec658330c5b2dfaded05def2b74957bb0bc003ac0213ed44726bb0395722ca77fb5551c5e5a494be245ac3bdf8ecf1bb1e5d6d23a563845a67b1253aa7f4dbad3b1ca661f4edcd9915ea93d82ce40d3e30d2b09fb5793620454ba6858ad091933eaeff331830843436577decf00b4d0e84725d6427ca2643849d80125ad5f1163c910eacb15aa0fe05a8838e0d7135a2958ba6861ce941c711ea21c63449cf0a5df694375c5e174ffc8a2dc8dcaf450b9eaffed0a57c2aa4d39d1f3bc1d1f98a36136c1ceac4d7e10583fc55f2a99928395fb09fa20c674b2bcb3a8d9e4497827758b46c21baa49a18062edff675872905cd7817e7de371cd856d6eb5672c9a78bb5bded3d3936e59e4ca68e6ec9cceb52099202cc6434a3c65f7066a5c4e6ecf43706e312531335e65dde8a39df0c1cce444c2bf5d45b20ae3188b2d31ced701976477a4efe78e115ba637dd886229b8604174177b6d5b5e1897e8378d60a072f1bb6bbaf394da2117eb6b38208fe3838cd69c11cc4890b715e8352edb95431ad1700d362414bb8d5ccdd0da51233f22e94b960726a667b40ddce343e68d974bbb97168c6430591f9dbec3b07505fe2f5e916f6eb0fda9cfcca48853c5eb455d0584e09be6c5ee3c4896249408078304405284e141361817679dcb425d207240960e1572f0b1bfc6310768f05614099f9093e8bed87b9dd6c06c857b64faa4501c5237445e9e42235ea2974d8982882e64ee81c31b159089af5fbdda374991ca9cc0d58b1f4cd5f9c5bc40a067986baecb71c7c97c3da8aa6154b9e7ca3532e912228509f168e41b87daf092b64336308a380faf9f565ad96e2feaf124f870e000a35ddf35764c2bbbf7c36cdcf9216c833c7b8cf9c7ec00dc1b80dd54d7ff98d8a934e65b183ae65341c7c3ede74728f1b3ba536e69cb269fa07850180c06e0fd5f5ad4d3f047c65d4b5fa194ca709466b5826e1fc644adca061770c99e49e90f41d2f266f4411f37ab638918a6d39c82dbd75d4e5b0e280449cbc1e3297b4c252b1daa8b411672af907ea255a759cb0b0e7fd4071d32ce684d7abd8d46b9e908e419aea04d6b56799cfa507fc5b48f50096c8f0708db8c05526eb45d2235e96526bd2e108925e8c974aed863d9cd27b596baf64193ff82ad7e9634f9dfcfe12a0233e363b5ef390d5f5421303cc59fb09390f2ed73366978f69057bf50bbf18c591bd342fda04f93d716d78de3ad917920c024227fa2a222b2622fbb3bc874dce16da0be2d1651dec4bf1ece1694e3ed9b68823c0d231dfeee7ef982b4f8de9d69589a4afc7b26dcd78e00c231c477326166d6422f5e505e4572dd12353d625fc2608602e9e75c99253e3800ad21c6bfab53af3b07bb57076cca3f1e5bb1b51c8001fb7209e85af5e5241cf5225c5487bb324450f2f5144f82e4652fecf30562118ad414603cc08d2bfdefb38b66088a6842daac4a1d280af1e0c03bb512ba1430a55354e535142229f666bbe036763bfa17fe5428a09d8694b6fbf8e61a6335cb09bbb8015a208a166eec48f37f607512c11c5f018cafa592cac91be49ce1e1f7d7ff913fa6951c103429da478f10e00e1c26e8d3875f9f41a15e212fbe3a625ebbdf60f879786e6362c9b816ea83e694aae9ee66d787b698ac7954010fb70662a559fb1028aaf8ef71253cc8f573169d18f7e095c5e956c7c8a2f93311c51a9030ac4c9e5b0a5811a24fd63391b0aecb5f5a4dfefac3681a02830ff045fa7ff481aec765fe0ea8cf20a8266584a368c6e370654d20880b6e354c28fc1349b3e290064498b9526faf34792fa08169baf47faaaa590e06c694acc78e0d64755a6d5ab9ceed5944c36e8af9671f519585fb9de3be531d396dedfbd990272c6ba159a4a34f7aab402e05371ca342a12561a5af10c8eacfb27df4c3fc32f2ec78449ec16169ba68064c9fe34a8ec073fceb4e86ef087cbbabf77ac4914c1020f4479d3c3cb01ecc50d44e2a1527fe5763d12d450d73607b16e6f4a85ca977f804962a881e9fcd9fe4d71ab9ecb62990b04aa76592dd2179919189373075f8ca71cc22706bf590d569b06d9f569696d49af5dab4631bff308dccba316d8b9ea86ea21c7c1d876440c9881738c0a9a4e42395d876cdbbea83ecfd17b8b35d1f44221cc1612e6cd0740d6f896f077ded6345ab1ab8d23592f907a7d28c46be5d12d13c2b7a729481a5a72bf4dcad64afd42410ae0c95c18a3460b18dada95528c46e2597f71fed96ae032e820ae10bec8bb416d3adf596449eead3126a66f996581336fc89c370f5ab4cee7be48777a90b66e097696dab76e263083d602effa18a9"}}}, 0x100c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "abb99279fd89da307583e654afb42af2dc91b30b60e83d50", "66eb64f2e8a3742962ae5b2fb03f495701288cf603c82fce6302900c99be5aab"}}}}}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000000), 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 706.400285ms ago: executing program 3 (id=771): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000004f000000660000000000000016000000000900009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x10000004, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x0, 0x4000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 643.194553ms ago: executing program 0 (id=772): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000980)=0x59) r5 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in={{0x2, 0x3, @empty}}}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r4, 0x775}, &(0x7f0000000080)=0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a14}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r5, &(0x7f0000000240)="6f337397a2cd6a678e9b9d1e48b61a63a7ae0099c3f7718dd60c6d75717236c7b4b1c0826b8ab7db9d072f0e57124ce61d0d970da9db95546a1b9ba029ab91c78f6f5afb09d8ee93084d2fd25d24c0cb78542c5c18ac524a9f715c1ad4246d1867a737c7f6da27d17862cea98efa7cf57c5274de3e1678f57f87fbaded4e8f54936badaa88e5aca4d23f97b3b49a7af23950451656447fca2917", 0x9a) 519.923701ms ago: executing program 1 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async, rerun: 64) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) (rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746f0164653d30303030303030303030303030303030303130303030302d9da4d437d8e25f8f2c757365725f69643d643139c4e0f5363816bd48c6c0a1667d94a9a6211846dcc74c85e80118047cb729849754a75acf84d97438cc021278e58155a60e5c2d2ba9610cb3c83b9f267f310887c997a2990def15656d753c5c9ce0322801c2cf00f296bd628ca49d292b17e9667ef9ec034bf4f6b31392ff7c2b7527ddffcfb259286a8b6c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) (async, rerun: 64) read$FUSE(r3, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0xfe63) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000000000150000000001"], 0x29) (async) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xc0280, 0x0) r7 = dup3(r6, r3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r10}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r10}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r10, 0x0, 0x2}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r10}) (async) close_range(r8, 0xffffffffffffffff, 0x0) 518.63341ms ago: executing program 2 (id=774): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xcd, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffbfd00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="4f3bfde51b257f", 0x7}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x70, 0x9c, 0x31, 0x20, 0x4e8, 0x6601, 0x819b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa3, 0x5f, 0x50}}]}}]}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x14f242, 0x0) unshare(0x4020400) sendfile(r2, r2, 0x0, 0x7ffff000) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) recvmsg$can_bcm(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000300)=""/18, 0x12}, {&(0x7f00000004c0)=""/4086, 0xff6}, {&(0x7f00000014c0)=""/123, 0x7b}, {&(0x7f00000017c0)=""/153, 0x99}], 0x8, &(0x7f0000001680)=""/196, 0xc4}, 0x40000000) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) writev(r3, &(0x7f000001fc40)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) syz_io_uring_setup(0x2118, &(0x7f0000000080)={0x0, 0x76d0, 0x40, 0x2, 0x398, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000180)) 376.449294ms ago: executing program 3 (id=775): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5405b40861a22753635010203010902120001000000000904"], 0x0) fanotify_mark(0xffffffffffffffff, 0x90, 0x2000, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="0003000000bf"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) cachestat(r5, &(0x7f0000000100)={0x800, 0x43}, &(0x7f00000001c0), 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_j1939(r6, &(0x7f0000000200)={0x1d, r7, 0xffffffffffffffff}, 0x18) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r10}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xab, 0x7, @buffer={0x0, 0x59, &(0x7f0000000240)=""/89}, &(0x7f0000000380)="1bfefcc2833f861ddf2f9d4b6ecefccff6c73a7e1277d44c50d1b10b990a2f82dee09b69b9cc4d05ee9984426b7978636a3b57db07d852f17741e42d7e2456962bd787c428a8870bd0cc3bac5948a07608c8cff290c4bf00b1f9a5e4bb5aca4ce55a7a19a1de751c2e2abdb3b5e162f982ce6218e401a0ce18fe9c301e52fd022d314b104ce2aa5ba6f40a4a8f11070277997756933281089783776f3b65ca55bd2fe12968e3fc2754e10f", &(0x7f0000000500)=""/205, 0x7ff, 0x14, 0x2, &(0x7f00000002c0)}) 327.500097ms ago: executing program 0 (id=776): syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x800) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe86) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x5955}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, r8}, 0x14) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r9, &(0x7f0000000500)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x4c, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 228.060288ms ago: executing program 1 (id=777): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000d000000007baa00fe00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 170.946266ms ago: executing program 1 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = io_uring_setup(0x30d3, &(0x7f00000000c0)={0x0, 0xed7, 0x2, 0x0, 0x8017}) r1 = socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x908, 0x2) (async) connect$qrtr(r1, &(0x7f0000000080), 0xc) (async) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000200)=0x44ba, 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000240)={0x3, 0x0, 0x3, {0x9, 0x3}, 0x3, 0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) (async, rerun: 32) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0xfc5e) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000180)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r7, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800dd8d000000000000000002000000ff0000070000000008000b000000060008000400", @ANYRES32], 0x2c}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000440)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x190, 0xa, 0x148, 0x190, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) umount2(&(0x7f00000001c0)='./file0\x00', 0xd) (async) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000000c0)={0x28, 0x4}, 0x28) 0s ago: executing program 1 (id=779): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r1}, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x2, 0x1, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x86}}}, 0x32) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) lseek(r3, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r4, &(0x7f0000000100), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000400)=""/218, 0xda) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000980)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) kernel console output (not intermixed with test programs): et_files+0x3f3/0x470 [ 221.400351][ T7727] security_file_ioctl+0xc6/0x2a0 [ 221.405377][ T7727] __se_sys_ioctl+0x47/0x170 [ 221.409974][ T7727] do_syscall_64+0xf3/0x230 [ 221.414483][ T7727] ? clear_bhb_loop+0x35/0x90 [ 221.419173][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.425077][ T7727] RIP: 0033:0x7f6c0c77dff9 [ 221.429491][ T7727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.449112][ T7727] RSP: 002b:00007f6c0d657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.457559][ T7727] RAX: ffffffffffffffda RBX: 00007f6c0c935f80 RCX: 00007f6c0c77dff9 [ 221.465547][ T7727] RDX: 00000000200001c0 RSI: 00000000000089f4 RDI: 0000000000000003 [ 221.473540][ T7727] RBP: 00007f6c0d657090 R08: 0000000000000000 R09: 0000000000000000 [ 221.481512][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.489483][ T7727] R13: 0000000000000000 R14: 00007f6c0c935f80 R15: 00007f6c0ca5fa28 [ 221.497486][ T7727] [ 221.504740][ T5288] usb 3-1: device descriptor read/64, error -71 [ 221.548674][ T25] usb usb5-port1: attempt power cycle [ 221.604663][ T7727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.625890][ T5288] usb usb3-port1: attempt power cycle [ 221.683286][ T5230] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 221.881528][ T7116] usb 4-1: USB disconnect, device number 52 [ 221.923298][ T5230] usb 2-1: device descriptor read/64, error -71 [ 221.943378][ T25] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 221.964716][ T5288] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 221.972747][ T25] usb 5-1: device descriptor read/8, error -71 [ 222.020165][ T5288] usb 3-1: device descriptor read/8, error -71 [ 222.137402][ T7736] netlink: 'syz.0.600': attribute type 4 has an invalid length. [ 222.153029][ T7736] netlink: 152 bytes leftover after parsing attributes in process `syz.0.600'. [ 222.223835][ T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 222.243346][ T5230] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 222.258620][ T7739] loop2: detected capacity change from 0 to 7 [ 222.268275][ T7739] Dev loop2: unable to read RDB block 7 [ 222.314109][ T5288] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 222.328947][ T7739] loop2: unable to read partition table [ 222.338437][ T7739] loop2: partition table beyond EOD, truncated [ 222.343993][ T5288] usb 3-1: device descriptor read/8, error -71 [ 222.373491][ T5230] usb 2-1: device descriptor read/64, error -71 [ 222.387683][ T25] usb 5-1: device descriptor read/8, error -71 [ 222.409063][ T7736] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 222.431793][ T7739] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 222.463639][ T5288] usb usb3-port1: unable to enumerate USB device [ 222.492976][ T5230] usb usb2-port1: attempt power cycle [ 222.503877][ T25] usb usb5-port1: unable to enumerate USB device [ 222.751173][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 222.751193][ T30] audit: type=1326 audit(1729180192.832:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9220b7dff9 code=0x0 [ 222.799429][ T7748] bond2: entered promiscuous mode [ 222.815057][ T7748] bond2: entered allmulticast mode [ 222.831912][ T7753] tipc: Started in network mode [ 222.841961][ T7753] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 222.852340][ T30] audit: type=1326 audit(1729180192.932:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0c77dff9 code=0x7ffc0000 [ 222.863301][ T5230] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 222.885022][ T30] audit: type=1326 audit(1729180192.972:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0c77dff9 code=0x7ffc0000 [ 222.891691][ T7753] tipc: Enabled bearer , priority 22 [ 222.916049][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.927968][ T30] audit: type=1326 audit(1729180193.002:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c0c77c990 code=0x7ffc0000 [ 222.951792][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.960514][ T5230] usb 2-1: device descriptor read/8, error -71 [ 223.032359][ T30] audit: type=1326 audit(1729180193.002:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c0c77dbfb code=0x7ffc0000 [ 223.070011][ T7749] bond3: entered promiscuous mode [ 223.079331][ T30] audit: type=1326 audit(1729180193.002:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c0c77dbfb code=0x7ffc0000 [ 223.103476][ T30] audit: type=1326 audit(1729180193.072:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0c77dff9 code=0x7ffc0000 [ 223.115098][ T7749] bond3: entered allmulticast mode [ 223.126398][ T30] audit: type=1326 audit(1729180193.072:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0c77dff9 code=0x7ffc0000 [ 223.154898][ T30] audit: type=1326 audit(1729180193.072:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6c0c77dff9 code=0x7ffc0000 [ 223.193678][ T5288] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 223.203507][ T5230] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 223.227695][ T5230] usb 2-1: device descriptor read/8, error -71 [ 223.232480][ T30] audit: type=1326 audit(1729180193.072:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0c77dff9 code=0x7ffc0000 [ 223.346963][ T5230] usb usb2-port1: unable to enumerate USB device [ 223.702561][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 223.743500][ T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 223.893477][ T7116] tipc: Node number set to 43690 [ 223.938531][ T25] usb 5-1: config 0 has no interfaces? [ 223.943827][ T5288] usb 1-1: device descriptor read/64, error -71 [ 223.965008][ T25] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 223.979406][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.006511][ T25] usb 5-1: Product: syz [ 224.021451][ T25] usb 5-1: Manufacturer: syz [ 224.026308][ T25] usb 5-1: SerialNumber: syz [ 224.032747][ T25] usb 5-1: config 0 descriptor?? [ 224.242906][ T7770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.253819][ T5288] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 224.356075][ T7770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.484528][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 224.527415][ T7770] wireguard0: entered promiscuous mode [ 224.532962][ T7770] wireguard0: entered allmulticast mode [ 224.542176][ T5288] usb 1-1: device descriptor read/64, error -71 [ 224.665170][ T5288] usb usb1-port1: attempt power cycle [ 225.003401][ T5288] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 225.024036][ T5288] usb 1-1: device descriptor read/8, error -71 [ 225.263422][ T5288] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 225.317787][ T5288] usb 1-1: device descriptor read/8, error -71 [ 225.353604][ T7116] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 225.461887][ T5288] usb usb1-port1: unable to enumerate USB device [ 225.536448][ T7116] usb 4-1: config 0 has no interfaces? [ 225.561847][ T7116] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 225.575901][ T7116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.609314][ T7116] usb 4-1: Product: syz [ 225.628514][ T7116] usb 4-1: Manufacturer: syz [ 225.652751][ T7116] usb 4-1: SerialNumber: syz [ 225.678053][ T7116] usb 4-1: config 0 descriptor?? [ 226.075620][ T46] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 226.253345][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 226.267348][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.286265][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.302329][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.318024][ T46] usb 2-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 226.327509][ T46] usb 2-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 226.336122][ T46] usb 2-1: Manufacturer: syz [ 226.345372][ T46] usb 2-1: config 0 descriptor?? [ 226.386400][ T25] usb 5-1: USB disconnect, device number 49 [ 226.506954][ T7856] FAULT_INJECTION: forcing a failure. [ 226.506954][ T7856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.522683][ T7856] CPU: 0 UID: 0 PID: 7856 Comm: syz.4.617 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 226.533324][ T7856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.543414][ T7856] Call Trace: [ 226.546718][ T7856] [ 226.549663][ T7856] dump_stack_lvl+0x241/0x360 [ 226.554374][ T7856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.559596][ T7856] ? __pfx__printk+0x10/0x10 [ 226.564215][ T7856] ? __pfx_lock_release+0x10/0x10 [ 226.569293][ T7856] should_fail_ex+0x3b0/0x4e0 [ 226.574021][ T7856] _copy_from_iter+0x1ed/0x1d60 [ 226.578908][ T7856] ? __virt_addr_valid+0x183/0x530 [ 226.584048][ T7856] ? __pfx_lock_release+0x10/0x10 [ 226.589125][ T7856] ? __alloc_skb+0x28f/0x440 [ 226.593768][ T7856] ? __pfx__copy_from_iter+0x10/0x10 [ 226.599089][ T7856] ? __virt_addr_valid+0x183/0x530 [ 226.604235][ T7856] ? __virt_addr_valid+0x183/0x530 [ 226.609378][ T7856] ? __virt_addr_valid+0x45f/0x530 [ 226.614520][ T7856] ? __check_object_size+0x48e/0x900 [ 226.619851][ T7856] netlink_sendmsg+0x73d/0xcb0 [ 226.624657][ T7856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.629995][ T7856] ? aa_sock_msg_perm+0x91/0x160 [ 226.634972][ T7856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.640302][ T7856] __sock_sendmsg+0x221/0x270 [ 226.645024][ T7856] ____sys_sendmsg+0x52a/0x7e0 [ 226.649828][ T7856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.655154][ T7856] __sys_sendmsg+0x292/0x380 [ 226.659771][ T7856] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.664921][ T7856] ? __pfx_vfs_write+0x10/0x10 [ 226.669761][ T7856] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.676131][ T7856] ? do_syscall_64+0x100/0x230 [ 226.680928][ T7856] ? do_syscall_64+0xb6/0x230 [ 226.685641][ T7856] do_syscall_64+0xf3/0x230 [ 226.690173][ T7856] ? clear_bhb_loop+0x35/0x90 [ 226.694875][ T7856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.700802][ T7856] RIP: 0033:0x7f00ab97dff9 [ 226.705252][ T7856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.724895][ T7856] RSP: 002b:00007f00ac6b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.733355][ T7856] RAX: ffffffffffffffda RBX: 00007f00abb35f80 RCX: 00007f00ab97dff9 [ 226.741369][ T7856] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 226.749366][ T7856] RBP: 00007f00ac6b4090 R08: 0000000000000000 R09: 0000000000000000 [ 226.757361][ T7856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.765361][ T7856] R13: 0000000000000000 R14: 00007f00abb35f80 R15: 00007f00abc5fa28 [ 226.773379][ T7856] [ 226.795485][ T5288] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 227.003507][ T5288] usb 3-1: Using ep0 maxpacket: 16 [ 227.010294][ T5288] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 227.027050][ T5288] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.049568][ T5288] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.062489][ T5288] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.082246][ T46] wacom 0003:056A:2A22.0010: Unknown device_type for 'syz'. Ignoring. [ 227.095107][ T5288] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.132859][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.141493][ T5288] usb 3-1: Product: syz [ 227.148207][ T5288] usb 3-1: Manufacturer: syz [ 227.153088][ T5288] usb 3-1: SerialNumber: syz [ 227.243457][ T5230] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 227.326338][ T5283] usb 2-1: USB disconnect, device number 57 [ 227.393363][ T5230] usb 5-1: Using ep0 maxpacket: 16 [ 227.439041][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 227.456484][ T5288] usb 3-1: USB disconnect, device number 54 [ 227.465035][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.490919][ T5230] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 227.502842][ T5229] udevd[5229]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.515221][ T5230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.532335][ T5230] usb 5-1: Product: syz [ 227.536660][ T5230] usb 5-1: Manufacturer: syz [ 227.541380][ T5230] usb 5-1: SerialNumber: syz [ 227.548305][ T5230] usb 5-1: config 0 descriptor?? [ 227.600716][ T5230] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 227.764493][ T2505] usb 5-1: Failed to submit usb control message: -71 [ 227.764797][ T5288] usb 5-1: USB disconnect, device number 50 [ 227.793952][ T2505] usb 5-1: unable to send the bmi data to the device: -71 [ 227.810193][ T2505] usb 5-1: unable to get target info from device [ 227.832380][ T2505] usb 5-1: could not get target info (-71) [ 227.852944][ T2505] usb 5-1: could not probe fw (-71) [ 227.943421][ T46] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 228.127985][ T935] usb 4-1: USB disconnect, device number 53 [ 228.204855][ T7877] FAULT_INJECTION: forcing a failure. [ 228.204855][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.243374][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.1.621 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 228.254039][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.264133][ T7877] Call Trace: [ 228.267427][ T7877] [ 228.270384][ T7877] dump_stack_lvl+0x241/0x360 [ 228.275091][ T7877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.280310][ T7877] ? __pfx__printk+0x10/0x10 [ 228.284939][ T7877] ? __pfx_lock_release+0x10/0x10 [ 228.290003][ T7877] should_fail_ex+0x3b0/0x4e0 [ 228.294725][ T7877] _copy_from_user+0x2f/0xe0 [ 228.299346][ T7877] get_user_ifreq+0xc3/0x200 [ 228.304018][ T7877] sock_ioctl+0x793/0x8e0 [ 228.308385][ T7877] ? __pfx_sock_ioctl+0x10/0x10 [ 228.313290][ T7877] ? __fget_files+0x3f3/0x470 [ 228.317982][ T7877] ? __pfx_sock_ioctl+0x10/0x10 [ 228.322860][ T7877] __se_sys_ioctl+0xf9/0x170 [ 228.327485][ T7877] do_syscall_64+0xf3/0x230 [ 228.332002][ T7877] ? clear_bhb_loop+0x35/0x90 [ 228.336698][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.342620][ T7877] RIP: 0033:0x7fc69757dff9 [ 228.347050][ T7877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.366657][ T7877] RSP: 002b:00007fc698423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.375083][ T7877] RAX: ffffffffffffffda RBX: 00007fc697735f80 RCX: 00007fc69757dff9 [ 228.383076][ T7877] RDX: 00000000200001c0 RSI: 00000000000089f4 RDI: 0000000000000003 [ 228.391096][ T7877] RBP: 00007fc698423090 R08: 0000000000000000 R09: 0000000000000000 [ 228.399085][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.407060][ T7877] R13: 0000000000000000 R14: 00007fc697735f80 R15: 00007fc69785fa28 [ 228.415043][ T7877] [ 228.522683][ T46] usb 1-1: config index 0 descriptor too short (expected 23373, got 77) [ 228.531745][ T46] usb 1-1: config 82 has too many interfaces: 212, using maximum allowed: 32 [ 228.546650][ T7887] netlink: 'syz.4.625': attribute type 9 has an invalid length. [ 228.558081][ T46] usb 1-1: config 82 has an invalid descriptor of length 90, skipping remainder of the config [ 228.571958][ T7888] syz.3.624 (7888): attempted to duplicate a private mapping with mremap. This is not supported. [ 228.597928][ T7887] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.625'. [ 228.609020][ T46] usb 1-1: config 82 has 0 interfaces, different from the descriptor's value: 212 [ 228.632000][ T46] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 228.641327][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.660161][ T46] usb 1-1: Product: syz [ 228.664775][ T7885] syz.3.624 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 228.670387][ T46] usb 1-1: Manufacturer: syz [ 228.697431][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 228.701800][ T46] usb 1-1: SerialNumber: syz [ 228.750813][ T7889] netlink: 'syz.4.625': attribute type 9 has an invalid length. [ 228.789394][ T7889] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.625'. [ 228.994091][ T46] usb 1-1: USB disconnect, device number 63 [ 229.084800][ T7115] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 229.277020][ T7115] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 229.296862][ T7115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.310953][ T7115] usb 4-1: Product: syz [ 229.320232][ T7115] usb 4-1: Manufacturer: syz [ 229.329708][ T7115] usb 4-1: SerialNumber: syz [ 229.344425][ T7115] usb 4-1: config 0 descriptor?? [ 229.345392][ T7903] FAULT_INJECTION: forcing a failure. [ 229.345392][ T7903] name failslab, interval 1, probability 0, space 0, times 0 [ 229.364365][ T7115] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 229.368464][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.2.629 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 229.381075][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.391160][ T7903] Call Trace: [ 229.394468][ T7903] [ 229.397425][ T7903] dump_stack_lvl+0x241/0x360 [ 229.402145][ T7903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.407393][ T7903] ? __pfx__printk+0x10/0x10 [ 229.412019][ T7903] ? ref_tracker_alloc+0x332/0x490 [ 229.417162][ T7903] should_fail_ex+0x3b0/0x4e0 [ 229.421886][ T7903] ? skb_clone+0x20c/0x390 [ 229.426331][ T7903] should_failslab+0xac/0x100 [ 229.431041][ T7903] ? skb_clone+0x20c/0x390 [ 229.435486][ T7903] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 229.440903][ T7903] skb_clone+0x20c/0x390 [ 229.445198][ T7903] __netlink_deliver_tap+0x3cc/0x7c0 [ 229.450530][ T7903] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.455758][ T7903] netlink_deliver_tap+0x19d/0x1b0 [ 229.460899][ T7903] netlink_unicast+0x7c4/0x990 [ 229.465712][ T7903] ? __pfx_netlink_unicast+0x10/0x10 [ 229.471048][ T7903] ? __virt_addr_valid+0x183/0x530 [ 229.476196][ T7903] ? __check_object_size+0x48e/0x900 [ 229.481530][ T7903] netlink_sendmsg+0x8e4/0xcb0 [ 229.486346][ T7903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.491661][ T7903] ? aa_sock_msg_perm+0x91/0x160 [ 229.496633][ T7903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.501950][ T7903] __sock_sendmsg+0x221/0x270 [ 229.508233][ T7903] ____sys_sendmsg+0x52a/0x7e0 [ 229.508273][ T7903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.508305][ T7903] __sys_sendmsg+0x292/0x380 [ 229.508326][ T7903] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.508375][ T7903] ? __pfx_vfs_write+0x10/0x10 [ 229.508417][ T7903] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.508446][ T7903] ? do_syscall_64+0x100/0x230 [ 229.508468][ T7903] ? do_syscall_64+0xb6/0x230 [ 229.508489][ T7903] do_syscall_64+0xf3/0x230 [ 229.508508][ T7903] ? clear_bhb_loop+0x35/0x90 [ 229.508536][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.508564][ T7903] RIP: 0033:0x7fbad297dff9 [ 229.508582][ T7903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.508598][ T7903] RSP: 002b:00007fbad377e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.508622][ T7903] RAX: ffffffffffffffda RBX: 00007fbad2b35f80 RCX: 00007fbad297dff9 [ 229.508637][ T7903] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 229.508649][ T7903] RBP: 00007fbad377e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.508665][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.508681][ T7903] R13: 0000000000000000 R14: 00007fbad2b35f80 R15: 00007fbad2c5fa28 [ 229.508705][ T7903] [ 229.534272][ T7903] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 229.539654][ T7903] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.766608][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.778557][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.789699][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.813928][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.860475][ T7913] vivid-001: disconnect [ 229.865736][ T7115] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 229.873008][ T7115] sq905c 4-1:0.0: Reading version command failed [ 229.887378][ T7115] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 229.922301][ T7115] usb 4-1: USB disconnect, device number 54 [ 230.123377][ T5288] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 230.254138][ T5288] usb 1-1: device descriptor read/64, error -71 [ 230.263341][ T7115] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 230.423330][ T7115] usb 4-1: Using ep0 maxpacket: 16 [ 230.430461][ T7115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.442139][ T7115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.453237][ T7115] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.470224][ T7115] usb 4-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 230.479680][ T7115] usb 4-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 230.495999][ T7115] usb 4-1: Manufacturer: syz [ 230.503317][ T5288] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 230.510815][ T7115] usb 4-1: config 0 descriptor?? [ 230.593342][ T5230] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 230.625402][ T6720] tipc: Resetting bearer [ 230.652182][ T5288] usb 1-1: device descriptor read/64, error -71 [ 230.665733][ T6720] tipc: Disabling bearer [ 230.743349][ T5230] usb 2-1: device descriptor read/64, error -71 [ 230.770354][ T5288] usb usb1-port1: attempt power cycle [ 230.887483][ T1114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.987969][ T1114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.993344][ T5230] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 231.029115][ T7115] wacom 0003:056A:2A22.0011: Unknown device_type for 'syz'. Ignoring. [ 231.110767][ T1114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.123385][ T5288] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 231.156833][ T5288] usb 1-1: device descriptor read/8, error -71 [ 231.166009][ T5230] usb 2-1: device descriptor read/64, error -71 [ 231.190399][ T1114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.237562][ T7115] usb 4-1: USB disconnect, device number 55 [ 231.284390][ T5230] usb usb2-port1: attempt power cycle [ 231.302284][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.312483][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.323838][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.336324][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.346036][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.362237][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.391248][ T1114] bridge_slave_1: left allmulticast mode [ 231.413435][ T5288] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 231.421551][ T1114] bridge_slave_1: left promiscuous mode [ 231.433170][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.443907][ T5288] usb 1-1: device descriptor read/8, error -71 [ 231.452152][ T1114] bridge_slave_0: left allmulticast mode [ 231.467435][ T1114] bridge_slave_0: left promiscuous mode [ 231.475321][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.563672][ T5288] usb usb1-port1: unable to enumerate USB device [ 231.644170][ T5230] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 231.697807][ T5230] usb 2-1: device descriptor read/8, error -71 [ 231.949239][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.957929][ T5230] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 231.969809][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.982379][ T1114] bond0 (unregistering): Released all slaves [ 231.984507][ T5230] usb 2-1: device descriptor read/8, error -71 [ 232.059933][ T1114] tipc: Left network mode [ 232.079226][ T5283] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 232.108271][ T5230] usb usb2-port1: unable to enumerate USB device [ 232.261466][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 232.276439][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.303260][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.323925][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.344387][ T5283] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.364035][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.385697][ T5283] usb 4-1: config 0 descriptor?? [ 232.469271][ T1114] hsr_slave_0: left promiscuous mode [ 232.482538][ T1114] hsr_slave_1: left promiscuous mode [ 232.502151][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.519382][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.542785][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.552710][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.640853][ T1114] veth1_macvtap: left promiscuous mode [ 232.653444][ T1114] veth0_macvtap: left promiscuous mode [ 232.659256][ T1114] veth1_vlan: left promiscuous mode [ 232.674547][ T1114] veth0_vlan: left promiscuous mode [ 232.850457][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.881485][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.882280][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.901908][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.902443][ T5283] usbhid 4-1:0.0: can't add hid device: -71 [ 232.916894][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.931442][ T5283] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 232.941928][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.956106][ T5283] usb 4-1: USB disconnect, device number 56 [ 232.965693][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.978643][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.998846][ T7913] vivid-001: reconnect [ 233.419458][ T5231] Bluetooth: hci1: command tx timeout [ 233.483096][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 233.563994][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 233.894703][ T46] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 234.067294][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 234.079058][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.098215][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.111832][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.163622][ T46] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.194653][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.224825][ T7923] chnl_net:caif_netlink_parms(): no params data found [ 234.226353][ T46] usb 4-1: config 0 descriptor?? [ 234.397264][ T7962] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.645'. [ 234.411655][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'. [ 234.590803][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 234.643964][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 234.731738][ T46] usb 4-1: USB disconnect, device number 57 [ 234.811119][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.827424][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.846349][ T7923] bridge_slave_0: entered allmulticast mode [ 234.862975][ T7923] bridge_slave_0: entered promiscuous mode [ 234.891492][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.896893][ T7984] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 234.901907][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.946299][ T7984] kvm: pic: non byte read [ 234.951519][ T7923] bridge_slave_1: entered allmulticast mode [ 234.966223][ T7923] bridge_slave_1: entered promiscuous mode [ 234.974686][ T7984] kvm: pic: level sensitive irq not supported [ 234.974762][ T7984] kvm: pic: non byte read [ 234.981435][ T7945] chnl_net:caif_netlink_parms(): no params data found [ 235.027919][ T7984] kvm: pic: level sensitive irq not supported [ 235.028006][ T7984] kvm: pic: non byte read [ 235.057115][ T7984] kvm: pic: level sensitive irq not supported [ 235.057194][ T7984] kvm: pic: non byte read [ 235.093884][ T5231] Bluetooth: hci3: command tx timeout [ 235.149576][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.212044][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.233731][ T5230] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 235.327636][ T7923] team0: Port device team_slave_0 added [ 235.414778][ T5230] usb 4-1: Using ep0 maxpacket: 32 [ 235.422250][ T7923] team0: Port device team_slave_1 added [ 235.443396][ T5230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.493420][ T5231] Bluetooth: hci1: command tx timeout [ 235.510169][ T5230] usb 4-1: config 9 has an invalid interface number: 102 but max is 0 [ 235.543139][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.554597][ T5230] usb 4-1: config 9 has no interface number 0 [ 235.566800][ T5230] usb 4-1: config 9 interface 102 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 235.577187][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.586337][ T46] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 235.611258][ T7945] bridge_slave_0: entered allmulticast mode [ 235.632156][ T7945] bridge_slave_0: entered promiscuous mode [ 235.646648][ T5230] usb 4-1: config 9 interface 102 has no altsetting 0 [ 235.665002][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.672109][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.681010][ T7945] bridge_slave_1: entered allmulticast mode [ 235.688847][ T7945] bridge_slave_1: entered promiscuous mode [ 235.713903][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.721010][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.724085][ T5230] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=ce.38 [ 235.748012][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.769739][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.777357][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.803428][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 235.803453][ T30] audit: type=1326 audit(1729180205.862:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8003 comm="syz.1.650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc69757dff9 code=0x0 [ 235.803522][ T30] audit: type=1326 audit(1729180205.862:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8003 comm="syz.1.650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc69757dff9 code=0x0 [ 235.855231][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.869261][ T30] audit: type=1326 audit(1729180205.952:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8003 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69757dff9 code=0x7ffc0000 [ 235.922274][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.940936][ T5230] usb 4-1: Product: syz [ 235.949351][ T30] audit: type=1326 audit(1729180205.992:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8003 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc69757dff9 code=0x7ffc0000 [ 235.988532][ T46] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 235.992554][ T5230] usb 4-1: Manufacturer: syz [ 235.999551][ T46] usb 1-1: config 0 has no interfaces? [ 236.019373][ T30] audit: type=1326 audit(1729180205.992:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8003 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69757dff9 code=0x7ffc0000 [ 236.059173][ T46] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.073840][ T30] audit: type=1326 audit(1729180205.992:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8003 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69757dff9 code=0x7ffc0000 [ 236.083647][ T5230] usb 4-1: SerialNumber: syz [ 236.103149][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.107841][ T7945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.111910][ T46] usb 1-1: Product: syz [ 236.111932][ T46] usb 1-1: Manufacturer: syz [ 236.111950][ T46] usb 1-1: SerialNumber: syz [ 236.130693][ T30] audit: type=1326 audit(1729180205.992:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8003 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc69757c990 code=0x7ffc0000 [ 236.159795][ T46] usb 1-1: config 0 descriptor?? [ 236.288842][ T7945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.369681][ T1114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.445366][ T5230] usb 4-1: USB disconnect, device number 58 [ 236.514568][ T7115] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 236.570357][ T7923] hsr_slave_0: entered promiscuous mode [ 236.598939][ T7923] hsr_slave_1: entered promiscuous mode [ 236.670799][ T1114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.723974][ T7115] usb 2-1: Using ep0 maxpacket: 16 [ 236.748819][ T7115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.748951][ T7945] team0: Port device team_slave_0 added [ 236.787761][ T7115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.820147][ T1114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.840919][ T7115] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 236.878805][ T7115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.898454][ T7115] usb 2-1: config 0 descriptor?? [ 236.921243][ T7945] team0: Port device team_slave_1 added [ 237.070521][ T1114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.173781][ T5231] Bluetooth: hci3: command tx timeout [ 237.188642][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.207818][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.236159][ T7945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.260265][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.268852][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.299844][ T7945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.317048][ T7115] samsung 0003:0419:0001.0012: unknown main item tag 0x1 [ 237.398600][ T30] audit: type=1326 audit(1729180207.482:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9220b7dff9 code=0x0 [ 237.462049][ T7115] samsung 0003:0419:0001.0012: unknown main item tag 0x0 [ 237.497073][ T7115] samsung 0003:0419:0001.0012: item fetching failed at offset 3/5 [ 237.511653][ T7945] hsr_slave_0: entered promiscuous mode [ 237.529598][ T7945] hsr_slave_1: entered promiscuous mode [ 237.542836][ T7945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.552885][ T7945] Cannot create hsr debugfs directory [ 237.573471][ T5231] Bluetooth: hci1: command tx timeout [ 237.589250][ T7115] samsung 0003:0419:0001.0012: parse failed [ 237.620341][ T7115] samsung 0003:0419:0001.0012: probe with driver samsung failed with error -22 [ 237.700873][ T7115] usb 2-1: USB disconnect, device number 62 [ 238.047520][ T1114] bridge_slave_1: left allmulticast mode [ 238.054033][ T1114] bridge_slave_1: left promiscuous mode [ 238.061321][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.078017][ T1114] bridge_slave_0: left allmulticast mode [ 238.084645][ T1114] bridge_slave_0: left promiscuous mode [ 238.090763][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.698267][ T46] usb 1-1: USB disconnect, device number 68 [ 238.871765][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.888513][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.899913][ T1114] bond0 (unregistering): Released all slaves [ 238.989641][ T8031] netlink: 3 bytes leftover after parsing attributes in process `syz.1.654'. [ 239.021480][ T8031] ipvlan2: entered promiscuous mode [ 239.053421][ T935] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 239.063830][ T8033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.194150][ T46] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 239.245401][ T935] usb 4-1: Using ep0 maxpacket: 16 [ 239.253659][ T5231] Bluetooth: hci3: command tx timeout [ 239.282733][ T935] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 239.297031][ T935] usb 4-1: config 0 has no interface number 0 [ 239.306396][ T935] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.317777][ T935] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 239.347047][ T935] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 239.357036][ T935] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 239.364011][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 239.365991][ T935] usb 4-1: Product: syz [ 239.376094][ T935] usb 4-1: SerialNumber: syz [ 239.379281][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.392070][ T935] usb 4-1: config 0 descriptor?? [ 239.400217][ T935] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 239.418085][ T935] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input29 [ 239.419812][ T46] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 239.446384][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.459805][ T46] usb 1-1: Product: syz [ 239.480226][ T46] usb 1-1: Manufacturer: syz [ 239.494821][ T46] usb 1-1: SerialNumber: syz [ 239.518403][ T46] usb 1-1: config 0 descriptor?? [ 239.541668][ T46] pvrusb2: Hardware description: Terratec Grabster AV400 [ 239.559913][ T46] pvrusb2: ********** [ 239.572144][ T46] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 239.595509][ T46] pvrusb2: Important functionality might not be entirely working. [ 239.613877][ T46] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 239.627402][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.641319][ T46] pvrusb2: ********** [ 239.653687][ T5231] Bluetooth: hci1: command tx timeout [ 239.657187][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.661760][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'. [ 239.689123][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 239.759834][ T1114] hsr_slave_0: left promiscuous mode [ 239.769498][ T1114] hsr_slave_1: left promiscuous mode [ 239.775927][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.785139][ T8033] AppArmor: change_hat: Invalid input '0x000000000–' [ 239.785149][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.800903][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.808910][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.824305][ T2039] pvrusb2: Invalid write control endpoint [ 239.838290][ T46] usb 1-1: USB disconnect, device number 69 [ 239.864172][ T1114] veth1_macvtap: left promiscuous mode [ 239.869717][ T1114] veth0_macvtap: left promiscuous mode [ 239.918418][ T1114] veth1_vlan: left promiscuous mode [ 239.918554][ T1114] veth0_vlan: left promiscuous mode [ 239.966898][ T2039] pvrusb2: Invalid write control endpoint [ 239.966948][ T2039] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 239.966981][ T2039] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 239.966993][ T2039] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 239.967012][ T2039] pvrusb2: Device being rendered inoperable [ 239.969563][ T2039] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 240.052305][ T2039] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 240.076524][ T2039] pvrusb2: Attached sub-driver cx25840 [ 240.076577][ T2039] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 240.076591][ T2039] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 240.722725][ T8056] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 240.746825][ T8056] kvm: pic: non byte read [ 240.751901][ T8056] kvm: pic: level sensitive irq not supported [ 240.752034][ T8056] kvm: pic: non byte read [ 240.785955][ T8056] kvm: pic: level sensitive irq not supported [ 240.786084][ T8056] kvm: pic: non byte read [ 240.800610][ T8056] kvm: pic: level sensitive irq not supported [ 240.800723][ T8056] kvm: pic: non byte read [ 241.036719][ T5283] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 241.070027][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 241.132752][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 241.215760][ T5283] usb 1-1: Using ep0 maxpacket: 32 [ 241.243703][ T5283] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.272247][ T5283] usb 1-1: config 9 has an invalid interface number: 102 but max is 0 [ 241.280766][ T5283] usb 1-1: config 9 has no interface number 0 [ 241.287538][ T5283] usb 1-1: config 9 interface 102 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 241.299444][ T5283] usb 1-1: config 9 interface 102 has no altsetting 0 [ 241.312718][ T5283] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=ce.38 [ 241.322451][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.331293][ T5283] usb 1-1: Product: syz [ 241.340833][ T5231] Bluetooth: hci3: command tx timeout [ 241.349251][ T5283] usb 1-1: Manufacturer: syz [ 241.359433][ T5283] usb 1-1: SerialNumber: syz [ 241.701723][ T5283] usb 1-1: USB disconnect, device number 70 [ 241.831685][ T8050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.857743][ T8053] syzkaller1: entered promiscuous mode [ 241.864268][ T8053] syzkaller1: entered allmulticast mode [ 241.876077][ T5248] tipc: Resetting bearer [ 241.920469][ T5248] tipc: Disabling bearer [ 242.072751][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.080719][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.088792][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.096717][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.104621][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.111879][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.121693][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.129517][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.137171][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.144569][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 242.155386][ T7115] usb 4-1: USB disconnect, device number 59 [ 242.161343][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 242.162748][ T7923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.189491][ T7115] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 242.273623][ T5231] Bluetooth: hci2: unexpected subevent 0x03 length: 244 > 9 [ 242.323512][ T7923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.414733][ T7923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.446014][ T7923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.575244][ T8065] loop2: detected capacity change from 0 to 7 [ 242.613707][ T8065] Dev loop2: unable to read RDB block 7 [ 242.619403][ T8065] loop2: unable to read partition table [ 242.653973][ T8065] loop2: partition table beyond EOD, truncated [ 242.678134][ T8065] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.883569][ T935] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 242.919236][ T1114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.940888][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.960114][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.018767][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.029480][ T7945] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.039273][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.054555][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.062540][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.079118][ T935] usb 1-1: Using ep0 maxpacket: 32 [ 243.087523][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.101800][ T7945] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.114120][ T935] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 243.133733][ T935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.166261][ T1114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.168076][ T935] usb 1-1: Product: syz [ 243.190283][ T935] usb 1-1: Manufacturer: syz [ 243.195664][ T7945] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.202594][ T935] usb 1-1: SerialNumber: syz [ 243.209442][ T935] usb 1-1: config 0 descriptor?? [ 243.210527][ T7945] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.224370][ T935] cdc_ether 1-1:0.0: More than one union descriptor, skipping ... [ 243.233411][ T935] usb 1-1: bad CDC descriptors [ 243.238999][ T935] usb 1-1: unsupported MDLM descriptors [ 243.266884][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.293416][ T1114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.317262][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.324424][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.389283][ T1114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.405080][ T5284] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 243.415402][ T2505] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.422545][ T2505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.568546][ T5284] usb 4-1: config 1 interface 0 altsetting 231 bulk endpoint 0x1 has invalid maxpacket 32 [ 243.579420][ T5284] usb 4-1: config 1 interface 0 has no altsetting 0 [ 243.608938][ T935] usb 1-1: USB disconnect, device number 71 [ 243.620091][ T5284] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 243.670247][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.702059][ T5284] usb 4-1: Product: à Œ [ 243.731274][ T5284] usb 4-1: Manufacturer: ȗ⩪㞄밽屠莅ã©é½Ÿà­¾á—žæ´«ëœ à¶“ç—ǽ馊䚭讇ã•ã£¸ê—Œã“›á½‹æ¥„銹ꋥ껗⊻矤كç®è¤Ÿá„†è¨€æ™”飧쳾慧핀匥忋呑듄쯮ဈ톉薓䆻翳 [ 243.771819][ T5284] usb 4-1: SerialNumber: ц [ 243.792249][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 243.798305][ T8078] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.826683][ T1114] bridge_slave_1: left allmulticast mode [ 243.832916][ T1114] bridge_slave_1: left promiscuous mode [ 243.848565][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.861562][ T1114] bridge_slave_0: left allmulticast mode [ 243.874725][ T1114] bridge_slave_0: left promiscuous mode [ 243.883105][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.049322][ T5284] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 231 proto 1 vid 0x0525 pid 0xA4A8 [ 244.070677][ T5284] usb 4-1: USB disconnect, device number 60 [ 244.112034][ T5284] usblp0: removed [ 244.409106][ T1114] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 244.635564][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.688306][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.713672][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.739947][ T1114] bond0 (unregistering): Released all slaves [ 244.790041][ T1114] bond1 (unregistering): Released all slaves [ 244.833833][ T30] audit: type=1326 audit(1729180214.912:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9220b7dff9 code=0x7ffc0000 [ 244.860606][ T30] audit: type=1326 audit(1729180214.912:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9220b7dff9 code=0x7ffc0000 [ 244.923161][ T30] audit: type=1326 audit(1729180214.922:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9220b7dbfb code=0x7ffc0000 [ 244.945155][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.973836][ T30] audit: type=1326 audit(1729180214.922:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9220b7dff9 code=0x7ffc0000 [ 245.044743][ T30] audit: type=1326 audit(1729180214.922:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9220b7dbfb code=0x7ffc0000 [ 245.069244][ T30] audit: type=1326 audit(1729180214.922:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9220b7dff9 code=0x7ffc0000 [ 245.092201][ T1114] tipc: Disabling bearer [ 245.110085][ T1114] tipc: Left network mode [ 245.171317][ T30] audit: type=1326 audit(1729180214.922:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9220b7dff9 code=0x7ffc0000 [ 245.204630][ T5245] Bluetooth: hci0: command tx timeout [ 245.265290][ T30] audit: type=1326 audit(1729180214.922:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9220b7dff9 code=0x7ffc0000 [ 245.294812][ T30] audit: type=1326 audit(1729180214.922:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9220b7dff9 code=0x7ffc0000 [ 245.324675][ T30] audit: type=1326 audit(1729180214.922:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9220b7dff9 code=0x7ffc0000 [ 245.372882][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.381026][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.388984][ T8077] bridge_slave_0: entered allmulticast mode [ 245.397133][ T8077] bridge_slave_0: entered promiscuous mode [ 245.457117][ T7945] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.487625][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.509559][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.534532][ T8077] bridge_slave_1: entered allmulticast mode [ 245.542318][ T8077] bridge_slave_1: entered promiscuous mode [ 245.617140][ T8139] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 245.644567][ T8139] kvm: pic: non byte read [ 245.649736][ T8139] kvm: pic: level sensitive irq not supported [ 245.649813][ T8139] kvm: pic: non byte read [ 245.663974][ T8139] kvm: pic: level sensitive irq not supported [ 245.664084][ T8139] kvm: pic: non byte read [ 245.672721][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.706147][ T8139] kvm: pic: level sensitive irq not supported [ 245.706254][ T8139] kvm: pic: non byte read [ 245.712627][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.712711][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.750164][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.771557][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.859631][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.866832][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.880062][ T1114] hsr_slave_0: left promiscuous mode [ 245.886994][ T1114] hsr_slave_1: left promiscuous mode [ 245.901613][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.911491][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.924726][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.932280][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.943815][ T5230] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 245.964154][ T1114] veth1_macvtap: left promiscuous mode [ 245.969793][ T1114] veth0_macvtap: left promiscuous mode [ 245.976460][ T1114] veth1_vlan: left promiscuous mode [ 245.989857][ T1114] veth0_vlan: left promiscuous mode [ 246.113347][ T5230] usb 4-1: Using ep0 maxpacket: 32 [ 246.127069][ T5230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.139815][ T5230] usb 4-1: config 9 has an invalid interface number: 102 but max is 0 [ 246.149001][ T5230] usb 4-1: config 9 has no interface number 0 [ 246.155733][ T5230] usb 4-1: config 9 interface 102 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 246.167501][ T5230] usb 4-1: config 9 interface 102 has no altsetting 0 [ 246.177558][ T5230] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=ce.38 [ 246.187357][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.196097][ T5230] usb 4-1: Product: syz [ 246.200554][ T5230] usb 4-1: Manufacturer: syz [ 246.205896][ T5230] usb 4-1: SerialNumber: syz [ 246.459881][ T5230] usb 4-1: USB disconnect, device number 61 [ 246.866802][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 246.909980][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 247.258179][ T5245] Bluetooth: hci0: command tx timeout [ 247.438866][ T8077] team0: Port device team_slave_0 added [ 247.481156][ T8077] team0: Port device team_slave_1 added [ 247.566834][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.584927][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.625724][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.651818][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.660547][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.689764][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.811962][ T7923] veth0_vlan: entered promiscuous mode [ 247.894388][ T7116] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 247.901019][ T7945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.925172][ T8077] hsr_slave_0: entered promiscuous mode [ 247.949607][ T8077] hsr_slave_1: entered promiscuous mode [ 247.956407][ T8077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.975385][ T8077] Cannot create hsr debugfs directory [ 248.055784][ T7116] usb 4-1: Using ep0 maxpacket: 32 [ 248.065977][ T8190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 248.090350][ T7116] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 248.107345][ T7116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.116234][ T7116] usb 4-1: Product: syz [ 248.120426][ T7116] usb 4-1: Manufacturer: syz [ 248.126001][ T7116] usb 4-1: SerialNumber: syz [ 248.146802][ T7116] usb 4-1: config 0 descriptor?? [ 248.165440][ T7116] cdc_ether 4-1:0.0: More than one union descriptor, skipping ... [ 248.183376][ T7116] usb 4-1: bad CDC descriptors [ 248.189033][ T7116] usb 4-1: unsupported MDLM descriptors [ 248.207134][ T7923] veth1_vlan: entered promiscuous mode [ 248.408611][ T7923] veth0_macvtap: entered promiscuous mode [ 248.526461][ T7923] veth1_macvtap: entered promiscuous mode [ 248.601854][ T7945] veth0_vlan: entered promiscuous mode [ 248.611557][ T5284] usb 4-1: USB disconnect, device number 62 [ 248.669097][ T7945] veth1_vlan: entered promiscuous mode [ 248.694630][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.706265][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.724449][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.760033][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.773054][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.786147][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.804411][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.824621][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.857305][ T7923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.871234][ T7923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.883233][ T7923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.892071][ T7923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.042707][ T7945] veth0_macvtap: entered promiscuous mode [ 249.077282][ T7945] veth1_macvtap: entered promiscuous mode [ 249.197226][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.233308][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.249377][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.273529][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.291170][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.323081][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.323406][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.344960][ T5245] Bluetooth: hci0: command tx timeout [ 249.355379][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.378794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.420312][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.443418][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.460447][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.475459][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.488973][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.560631][ T7945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.571529][ T7945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.581792][ T7945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.593070][ T7945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.624184][ T7116] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 249.672927][ T2505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.681371][ T2505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.692231][ T8077] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.704313][ T7115] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 249.721554][ T8077] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.731876][ T8077] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.776727][ T8077] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.787929][ T7116] usb 1-1: Using ep0 maxpacket: 8 [ 249.801857][ T8208] fuse: Bad value for 'rootmode' [ 249.809800][ T7116] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 249.821226][ T7116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.851932][ T7116] usb 1-1: Product: syz [ 249.881598][ T7116] usb 1-1: Manufacturer: syz [ 249.886876][ T7115] usb 4-1: Using ep0 maxpacket: 8 [ 249.906742][ T7115] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 249.930988][ T7116] usb 1-1: SerialNumber: syz [ 249.944248][ T7115] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 249.961527][ T7116] usb 1-1: config 0 descriptor?? [ 249.971202][ T7115] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 249.983042][ T2505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.996060][ T2505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.003612][ T7115] usb 4-1: config 250 has no interface number 0 [ 250.020275][ T7115] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 250.045318][ T7115] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 250.059473][ T8208] FAULT_INJECTION: forcing a failure. [ 250.059473][ T8208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.074386][ T7115] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 250.087832][ T7115] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 250.110496][ T7115] usb 4-1: config 250 interface 228 has no altsetting 0 [ 250.112216][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.2.636 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 250.128111][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.138200][ T8208] Call Trace: [ 250.141497][ T8208] [ 250.144449][ T8208] dump_stack_lvl+0x241/0x360 [ 250.149166][ T8208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.154418][ T8208] ? __pfx__printk+0x10/0x10 [ 250.159038][ T8208] ? __pfx_lock_release+0x10/0x10 [ 250.164119][ T8208] ? __lock_acquire+0x1384/0x2050 [ 250.169189][ T8208] should_fail_ex+0x3b0/0x4e0 [ 250.173914][ T8208] _copy_from_user+0x2f/0xe0 [ 250.178563][ T8208] kstrtouint_from_user+0xc6/0x190 [ 250.183713][ T8208] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 250.189473][ T8208] ? __pfx_lock_acquire+0x10/0x10 [ 250.194542][ T8208] proc_fail_nth_write+0xaa/0x2d0 [ 250.199605][ T8208] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 250.205536][ T8208] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.211222][ T8208] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.216912][ T8208] vfs_write+0x29c/0xc90 [ 250.221194][ T8208] ? __pfx_vfs_write+0x10/0x10 [ 250.225986][ T8208] ? __fget_files+0x3f3/0x470 [ 250.230708][ T8208] ? fdget_pos+0x24e/0x320 [ 250.235158][ T8208] ksys_write+0x183/0x2b0 [ 250.239536][ T8208] ? __pfx_ksys_write+0x10/0x10 [ 250.244427][ T8208] ? do_syscall_64+0x100/0x230 [ 250.249229][ T8208] ? do_syscall_64+0xb6/0x230 [ 250.253949][ T8208] do_syscall_64+0xf3/0x230 [ 250.258489][ T8208] ? clear_bhb_loop+0x35/0x90 [ 250.263224][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.269190][ T8208] RIP: 0033:0x7fc699b7cadf [ 250.273640][ T8208] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 250.280986][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.293261][ T8208] RSP: 002b:00007fc69aa5c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.293296][ T8208] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc699b7cadf [ 250.293315][ T8208] RDX: 0000000000000001 RSI: 00007fc69aa5c0a0 RDI: 0000000000000007 [ 250.293331][ T8208] RBP: 00007fc69aa5c090 R08: 0000000000000000 R09: 0000000000000000 [ 250.332240][ T8208] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 250.340218][ T8208] R13: 0000000000000000 R14: 00007fc699d35f80 R15: 00007fc699e5fa28 [ 250.348211][ T8208] [ 250.367126][ T7115] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 250.383896][ T7115] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 250.404023][ T7116] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 250.413393][ T7115] usb 4-1: Product: syz [ 250.417754][ T2505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.417847][ T7115] usb 4-1: SerialNumber: syz [ 250.437471][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.449297][ T2505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.457902][ T7115] hub 4-1:250.228: bad descriptor, ignoring hub [ 250.474039][ T7115] hub 4-1:250.228: probe with driver hub failed with error -5 [ 250.523556][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.530732][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.578554][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.585729][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.594877][ T7116] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 250.665626][ T7115] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 63 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 250.718370][ T8227] FAULT_INJECTION: forcing a failure. [ 250.718370][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 250.731702][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.4.640 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 250.742337][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.752432][ T8227] Call Trace: [ 250.755751][ T8227] [ 250.758717][ T8227] dump_stack_lvl+0x241/0x360 [ 250.763451][ T8227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.768698][ T8227] ? __pfx__printk+0x10/0x10 [ 250.772018][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.773320][ T8227] should_fail_ex+0x3b0/0x4e0 [ 250.784832][ T8227] ? skb_clone+0x20c/0x390 [ 250.789295][ T8227] should_failslab+0xac/0x100 [ 250.794022][ T8227] ? skb_clone+0x20c/0x390 [ 250.798494][ T8227] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 250.803922][ T8227] skb_clone+0x20c/0x390 [ 250.808210][ T8227] ? dev_queue_xmit_nit+0x220/0xc10 [ 250.813464][ T8227] dev_queue_xmit_nit+0x419/0xc10 [ 250.818536][ T8227] ? dev_queue_xmit_nit+0x2b/0xc10 [ 250.823694][ T8227] ? validate_xmit_skb+0x9f9/0x1120 [ 250.828936][ T8227] dev_hard_start_xmit+0x15f/0x7e0 [ 250.834089][ T8227] ? __pfx_validate_xmit_skb+0x10/0x10 [ 250.839606][ T8227] __dev_queue_xmit+0x1b11/0x3ed0 [ 250.844494][ T8077] veth0_vlan: entered promiscuous mode [ 250.844650][ T8227] ? kasan_save_track+0x51/0x80 [ 250.855077][ T8227] ? do_syscall_64+0xf3/0x230 [ 250.859807][ T8227] ? __dev_queue_xmit+0x2da/0x3ed0 [ 250.864969][ T8227] ? __pfx___dev_queue_xmit+0x10/0x10 [ 250.867674][ T8077] veth1_vlan: entered promiscuous mode [ 250.870367][ T8227] ? __copy_skb_header+0x437/0x5b0 [ 250.880941][ T8227] ? __asan_memcpy+0x40/0x70 [ 250.885548][ T8227] ? __copy_skb_header+0x437/0x5b0 [ 250.890687][ T8227] ? __skb_clone+0x454/0x6c0 [ 250.895295][ T8227] ? skb_clone+0x240/0x390 [ 250.899733][ T8227] __netlink_deliver_tap+0x54d/0x7c0 [ 250.905043][ T8227] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.910256][ T8227] netlink_deliver_tap+0x19d/0x1b0 [ 250.915374][ T8227] netlink_unicast+0x7c4/0x990 [ 250.920163][ T8227] ? __pfx_netlink_unicast+0x10/0x10 [ 250.925463][ T8227] ? __virt_addr_valid+0x183/0x530 [ 250.930594][ T8227] ? __check_object_size+0x48e/0x900 [ 250.935903][ T8227] netlink_sendmsg+0x8e4/0xcb0 [ 250.940696][ T8227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.945999][ T8227] ? aa_sock_msg_perm+0x91/0x160 [ 250.950945][ T8227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.956234][ T8227] __sock_sendmsg+0x221/0x270 [ 250.960927][ T8227] ____sys_sendmsg+0x52a/0x7e0 [ 250.965705][ T8227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.971017][ T8227] __sys_sendmsg+0x292/0x380 [ 250.975623][ T8227] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.980755][ T8227] ? __pfx_vfs_write+0x10/0x10 [ 250.985547][ T8227] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.991899][ T8227] ? do_syscall_64+0x100/0x230 [ 250.996685][ T8227] ? do_syscall_64+0xb6/0x230 [ 251.001380][ T8227] do_syscall_64+0xf3/0x230 [ 251.005898][ T8227] ? clear_bhb_loop+0x35/0x90 [ 251.010586][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.016496][ T8227] RIP: 0033:0x7f2cb4d7dff9 [ 251.020916][ T8227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.040533][ T8227] RSP: 002b:00007f2cb5c45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.048961][ T8227] RAX: ffffffffffffffda RBX: 00007f2cb4f35f80 RCX: 00007f2cb4d7dff9 [ 251.056938][ T8227] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 251.064913][ T8227] RBP: 00007f2cb5c45090 R08: 0000000000000000 R09: 0000000000000000 [ 251.072894][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.080870][ T8227] R13: 0000000000000000 R14: 00007f2cb4f35f80 R15: 00007f2cb505fa28 [ 251.088859][ T8227] [ 251.128330][ T7115] usb 1-1: USB disconnect, device number 72 [ 251.148692][ T8077] veth0_macvtap: entered promiscuous mode [ 251.176029][ T8077] veth1_macvtap: entered promiscuous mode [ 251.239848][ T8227] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 251.260739][ T8227] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.311122][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.322417][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.345270][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.397505][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.407981][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.426846][ T5245] Bluetooth: hci0: command tx timeout [ 251.436161][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.507043][ C0] usblp0: nonzero read bulk status received: -71 [ 251.521751][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.539391][ T7116] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 251.655440][ T8239] tipc: Enabling of bearer rejected, failed to enable media [ 251.659412][ T8247] loop2: detected capacity change from 0 to 7 [ 251.678380][ T8247] Dev loop2: unable to read RDB block 7 [ 251.685992][ T8247] loop2: unable to read partition table [ 251.692177][ T8247] loop2: partition table beyond EOD, truncated [ 251.699077][ T8247] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.707524][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.712852][ T7116] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.718988][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.743391][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.750390][ T7116] usb 3-1: config 0 has no interfaces? [ 251.753929][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.770035][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.772471][ T7116] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 251.780589][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.780610][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.780628][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.782042][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.806657][ T7116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.813882][ T8077] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.844587][ T8077] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.853460][ T8077] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.853974][ T7115] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 251.862843][ T8077] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.961635][ T7116] usb 3-1: Product: syz [ 251.988049][ T7116] usb 3-1: Manufacturer: syz [ 252.001172][ T7116] usb 3-1: SerialNumber: syz [ 252.029880][ T7116] usb 3-1: config 0 descriptor?? [ 252.107828][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.140185][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.210417][ T7115] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.232831][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.249054][ T7115] usb 1-1: config 0 has no interfaces? [ 252.264262][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.313125][ T7115] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 252.334606][ T7115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.361642][ T7115] usb 1-1: Product: syz [ 252.379802][ T7115] usb 1-1: Manufacturer: syz [ 252.406343][ T7115] usb 1-1: SerialNumber: syz [ 252.460010][ T7115] usb 1-1: config 0 descriptor?? [ 252.586187][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.605087][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.651296][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 252.651317][ T30] audit: type=1400 audit(1729180222.712:186): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: USB disconnect, device number 63 [ 253.057303][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.074315][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.215518][ T30] audit: type=1400 audit(1729180223.292:187): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usblp0: removed [ 253.383347][ T7115] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 253.642260][ T7115] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.727163][ T7115] usb 2-1: config 0 has no interfaces? [ 253.808842][ T7115] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 253.870049][ T7115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.931336][ T7115] usb 2-1: Product: syz [ 253.965629][ T7115] usb 2-1: Manufacturer: syz [ 253.985657][ T7115] usb 2-1: SerialNumber: syz [ 254.084703][ T7115] usb 2-1: config 0 descriptor?? [ 254.163378][ T5283] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 254.354261][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 254.372794][ T5283] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 254.373138][ T25] usb 3-1: USB disconnect, device number 55 [ 254.389832][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.400891][ T5283] usb 4-1: Product: syz [ 254.414548][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.437085][ T5283] usb 4-1: Manufacturer: syz [ 254.445046][ T5283] usb 4-1: SerialNumber: syz [ 254.465137][ T5283] usb 4-1: config 0 descriptor?? [ 254.472322][ T5283] cdc_ether 4-1:0.0: More than one union descriptor, skipping ... [ 254.511142][ T5283] usb 4-1: bad CDC descriptors [ 254.519693][ T5283] usb 4-1: unsupported MDLM descriptors [ 254.571273][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.601112][ T30] audit: type=1400 audit(1729180224.682:188): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: USB disconnect, device number 64 [ 254.919261][ T25] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 255.063765][ T25] usb 3-1: device descriptor read/64, error -71 [ 255.233962][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 255.303896][ T8277] ALSA: seq fatal error: cannot create timer (-19) [ 255.313410][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 255.445346][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.688'. [ 255.466259][ T25] usb 3-1: device descriptor read/64, error -71 [ 255.519962][ T5283] usb 1-1: USB disconnect, device number 73 [ 255.578294][ T25] usb usb3-port1: attempt power cycle [ 255.815982][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825727][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.923491][ T25] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 255.995320][ T25] usb 3-1: device descriptor read/8, error -71 [ 256.243385][ T25] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 256.252843][ T8292] FAULT_INJECTION: forcing a failure. [ 256.252843][ T8292] name failslab, interval 1, probability 0, space 0, times 0 [ 256.302611][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.4.691 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 256.313279][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.323379][ T8292] Call Trace: [ 256.326684][ T8292] [ 256.329636][ T8292] dump_stack_lvl+0x241/0x360 [ 256.334363][ T8292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.339602][ T8292] ? __pfx__printk+0x10/0x10 [ 256.344232][ T8292] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 256.349745][ T8292] ? __pfx___might_resched+0x10/0x10 [ 256.355053][ T8292] ? netlink_unicast+0x7c4/0x990 [ 256.360037][ T8292] should_fail_ex+0x3b0/0x4e0 [ 256.364739][ T8292] should_failslab+0xac/0x100 [ 256.369433][ T8292] ? rtnl_newlink+0xf2/0x20a0 [ 256.374128][ T8292] __kmalloc_cache_noprof+0x6c/0x2c0 [ 256.379447][ T8292] rtnl_newlink+0xf2/0x20a0 [ 256.383987][ T8292] ? __mutex_trylock_common+0x183/0x2e0 [ 256.389565][ T8292] ? __pfx___might_resched+0x10/0x10 [ 256.394881][ T8292] ? __pfx_rtnl_newlink+0x10/0x10 [ 256.399918][ T8292] ? __pfx___mutex_trylock_common+0x10/0x10 [ 256.405820][ T8292] ? rcu_is_watching+0x15/0xb0 [ 256.410584][ T8292] ? trace_contention_end+0x3c/0x120 [ 256.415881][ T8292] ? __mutex_lock+0x2ef/0xd70 [ 256.420564][ T8292] ? rcu_read_unlock+0x87/0xa0 [ 256.425352][ T8292] ? __dev_queue_xmit+0x171d/0x3ed0 [ 256.430558][ T8292] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 256.435683][ T8292] ? __pfx_lock_release+0x10/0x10 [ 256.440723][ T8292] ? __pfx___mutex_lock+0x10/0x10 [ 256.445767][ T8292] ? __pfx_rtnl_newlink+0x10/0x10 [ 256.450794][ T8292] rtnetlink_rcv_msg+0x73f/0xcf0 [ 256.455773][ T8292] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 256.460897][ T8292] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.466363][ T8292] ? ref_tracker_free+0x643/0x7e0 [ 256.471401][ T8292] netlink_rcv_skb+0x1e3/0x430 [ 256.476172][ T8292] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.481648][ T8292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.486967][ T8292] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.492166][ T8292] netlink_unicast+0x7f6/0x990 [ 256.496945][ T8292] ? __pfx_netlink_unicast+0x10/0x10 [ 256.502238][ T8292] ? __virt_addr_valid+0x183/0x530 [ 256.507361][ T8292] ? __check_object_size+0x48e/0x900 [ 256.512658][ T8292] netlink_sendmsg+0x8e4/0xcb0 [ 256.517428][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.522715][ T8292] ? aa_sock_msg_perm+0x91/0x160 [ 256.527686][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.532981][ T8292] __sock_sendmsg+0x221/0x270 [ 256.537671][ T8292] ____sys_sendmsg+0x52a/0x7e0 [ 256.542440][ T8292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.547751][ T8292] __sys_sendmsg+0x292/0x380 [ 256.552348][ T8292] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.557477][ T8292] ? __pfx_vfs_write+0x10/0x10 [ 256.562270][ T8292] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.568613][ T8292] ? do_syscall_64+0x100/0x230 [ 256.573402][ T8292] ? do_syscall_64+0xb6/0x230 [ 256.578099][ T8292] do_syscall_64+0xf3/0x230 [ 256.582605][ T8292] ? clear_bhb_loop+0x35/0x90 [ 256.587287][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.593204][ T8292] RIP: 0033:0x7f2cb4d7dff9 [ 256.597635][ T8292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.617237][ T8292] RSP: 002b:00007f2cb5c45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.625654][ T8292] RAX: ffffffffffffffda RBX: 00007f2cb4f35f80 RCX: 00007f2cb4d7dff9 [ 256.633628][ T8292] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 256.641601][ T8292] RBP: 00007f2cb5c45090 R08: 0000000000000000 R09: 0000000000000000 [ 256.649572][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.657540][ T8292] R13: 0000000000000000 R14: 00007f2cb4f35f80 R15: 00007f2cb505fa28 [ 256.665517][ T8292] [ 256.714296][ T8294] netlink: 'syz.3.692': attribute type 32 has an invalid length. [ 256.735328][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 256.753954][ T25] usb 3-1: device descriptor read/8, error -71 [ 256.771244][ T8294] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 256.820742][ T7116] usb 2-1: USB disconnect, device number 63 [ 256.864677][ T25] usb usb3-port1: unable to enumerate USB device [ 256.878914][ T8303] loop2: detected capacity change from 0 to 7 [ 256.886376][ T8303] Dev loop2: unable to read RDB block 7 [ 256.891973][ T8303] loop2: unable to read partition table [ 256.898381][ T8303] loop2: partition table beyond EOD, truncated [ 256.944022][ T8303] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.984564][ T8305] futex_wake_op: syz.0.689 tries to shift op by -1; fix this program [ 257.163876][ T7116] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 257.316300][ T7116] usb 2-1: Using ep0 maxpacket: 16 [ 257.336077][ T7116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.352175][ T7116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.353617][ T5286] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 257.390585][ T7116] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.390633][ T7116] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.390659][ T7116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.397556][ T7116] usb 2-1: config 0 descriptor?? [ 257.415820][ T8315] tty tty26: ldisc open failed (-12), clearing slot 25 [ 257.527391][ T5286] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 257.546902][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.593004][ T5286] usb 5-1: config 0 descriptor?? [ 257.866531][ T7116] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 257.905508][ T7116] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 257.928093][ T7116] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 257.943498][ T935] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 257.943879][ T7116] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 257.977581][ T7116] microsoft 0003:045E:07DA.0013: item 0 4 0 8 parsing failed [ 257.996743][ T7116] microsoft 0003:045E:07DA.0013: parse failed [ 258.003099][ T7116] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 258.098313][ T5283] usb 2-1: USB disconnect, device number 64 [ 258.123407][ T935] usb 3-1: Using ep0 maxpacket: 32 [ 258.128601][ T25] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 258.179869][ T935] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 258.190167][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.198273][ T935] usb 3-1: Product: syz [ 258.202593][ T935] usb 3-1: Manufacturer: syz [ 258.220380][ T935] usb 3-1: SerialNumber: syz [ 258.227871][ T935] usb 3-1: config 0 descriptor?? [ 258.265640][ T935] cdc_ether 3-1:0.0: More than one union descriptor, skipping ... [ 258.280412][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.291558][ T935] usb 3-1: bad CDC descriptors [ 258.292164][ T25] usb 4-1: config 0 has no interfaces? [ 258.314435][ T935] usb 3-1: unsupported MDLM descriptors [ 258.351061][ T25] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 258.391633][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.423985][ T25] usb 4-1: Product: syz [ 258.428195][ T25] usb 4-1: Manufacturer: syz [ 258.459277][ T25] usb 4-1: SerialNumber: syz [ 258.506517][ T25] usb 4-1: config 0 descriptor?? [ 258.526718][ T8335] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.543588][ T8335] FAULT_INJECTION: forcing a failure. [ 258.543588][ T8335] name failslab, interval 1, probability 0, space 0, times 0 [ 258.571811][ T8335] CPU: 0 UID: 0 PID: 8335 Comm: syz.0.703 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 258.583875][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.583895][ T8335] Call Trace: [ 258.583905][ T8335] [ 258.583916][ T8335] dump_stack_lvl+0x241/0x360 [ 258.583946][ T8335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.583964][ T8335] ? __pfx__printk+0x10/0x10 [ 258.583983][ T8335] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 258.584008][ T8335] ? __pfx___might_resched+0x10/0x10 [ 258.584035][ T8335] should_fail_ex+0x3b0/0x4e0 [ 258.584064][ T8335] should_failslab+0xac/0x100 [ 258.584084][ T8335] ? __alloc_skb+0x1c3/0x440 [ 258.584102][ T8335] kmem_cache_alloc_node_noprof+0x71/0x320 [ 258.584129][ T8335] __alloc_skb+0x1c3/0x440 [ 258.584149][ T8335] ? __pfx___alloc_skb+0x10/0x10 [ 258.584170][ T8335] ? netlink_ack_tlv_len+0x6e/0x200 [ 258.584188][ T8335] netlink_ack+0x13f/0xa30 [ 258.584203][ T8335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.584237][ T8335] netlink_rcv_skb+0x262/0x430 [ 258.584254][ T8335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.584291][ T8335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.584318][ T8335] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.584335][ T8335] netlink_unicast+0x7f6/0x990 [ 258.584362][ T8335] ? __pfx_netlink_unicast+0x10/0x10 [ 258.584392][ T8335] ? __virt_addr_valid+0x183/0x530 [ 258.584409][ T8335] ? __check_object_size+0x48e/0x900 [ 258.584429][ T8335] netlink_sendmsg+0x8e4/0xcb0 [ 258.584449][ T8335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.584465][ T8335] ? aa_sock_msg_perm+0x91/0x160 [ 258.584485][ T8335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.584498][ T8335] __sock_sendmsg+0x221/0x270 [ 258.584520][ T8335] ____sys_sendmsg+0x52a/0x7e0 [ 258.584540][ T8335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.584565][ T8335] __sys_sendmsg+0x292/0x380 [ 258.584582][ T8335] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.584604][ T8335] ? __pfx_vfs_write+0x10/0x10 [ 258.584632][ T8335] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.584660][ T8335] ? do_syscall_64+0x100/0x230 [ 258.584676][ T8335] ? do_syscall_64+0xb6/0x230 [ 258.584692][ T8335] do_syscall_64+0xf3/0x230 [ 258.584706][ T8335] ? clear_bhb_loop+0x35/0x90 [ 258.584723][ T8335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.584744][ T8335] RIP: 0033:0x7f6c0c77dff9 [ 258.584758][ T8335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.584771][ T8335] RSP: 002b:00007f6c0d657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.584789][ T8335] RAX: ffffffffffffffda RBX: 00007f6c0c935f80 RCX: 00007f6c0c77dff9 [ 258.584800][ T8335] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 258.584810][ T8335] RBP: 00007f6c0d657090 R08: 0000000000000000 R09: 0000000000000000 [ 258.584819][ T8335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.584829][ T8335] R13: 0000000000000000 R14: 00007f6c0c935f80 R15: 00007f6c0ca5fa28 [ 258.584847][ T8335] [ 258.742063][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.749498][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.798929][ T30] audit: type=1400 audit(1729180228.842:189): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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vlan2: entered promiscuous mode [ 258.899322][ T8339] vlan2: entered allmulticast mode [ 258.899515][ T8339] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 258.899636][ T8339] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 258.903108][ T8339] team0: Port device vlan2 added [ 259.055571][ T935] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 259.073658][ T8341] loop2: detected capacity change from 0 to 7 [ 259.084300][ T8341] Dev loop2: unable to read RDB block 7 [ 259.092115][ T5230] usb 3-1: USB disconnect, device number 60 [ 259.114613][ T8341] loop2: unable to read partition table [ 259.361418][ T8341] loop2: partition table beyond EOD, truncated [ 259.369219][ T8341] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 259.416555][ T935] usb 2-1: Using ep0 maxpacket: 16 [ 259.452840][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.463897][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.473818][ T935] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 259.482967][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.522291][ T935] usb 2-1: config 0 descriptor?? [ 259.588844][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.696'. [ 259.600365][ T8309] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.699718][ T8347] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 259.719470][ T8347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.708'. [ 259.937082][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 260.135922][ T5286] pegasus 5-1:0.0: setup Pegasus II specific registers [ 260.158309][ T8338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.190356][ T8338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.210666][ T935] usbhid 2-1:0.0: can't add hid device: -71 [ 260.216772][ T935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 260.242980][ T935] usb 2-1: USB disconnect, device number 65 [ 260.283645][ T5288] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 260.301258][ T5286] pegasus 5-1:0.0: can't locate MII phy, using default [ 260.380946][ T5286] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 6a:2a:7e:b6:2d:4b [ 260.413758][ T5288] usb 1-1: device descriptor read/64, error -71 [ 260.444053][ T5286] usb 5-1: USB disconnect, device number 51 [ 260.533481][ T5283] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 260.704138][ T5288] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 260.711899][ T5283] usb 3-1: Using ep0 maxpacket: 16 [ 260.736473][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 260.752738][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 260.775794][ T5283] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice= 8.55 [ 260.813433][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.821495][ T5283] usb 3-1: Product: syz [ 260.863516][ T5283] usb 3-1: Manufacturer: syz [ 260.868295][ T5283] usb 3-1: SerialNumber: syz [ 260.883328][ T5288] usb 1-1: device descriptor read/64, error -71 [ 260.902060][ T5283] usb 3-1: config 0 descriptor?? [ 260.924864][ T5283] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 260.994347][ T5288] usb usb1-port1: attempt power cycle [ 261.066952][ T7115] usb 4-1: USB disconnect, device number 65 [ 261.146365][ T935] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 261.345096][ T935] usb 2-1: Using ep0 maxpacket: 16 [ 261.352543][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 261.365754][ T5288] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 261.374127][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 261.396172][ T935] usb 2-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice= 8.55 [ 261.413451][ T935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.413805][ T5288] usb 1-1: device descriptor read/8, error -71 [ 261.428638][ T5283] usb 3-1: qt2_attach - failed to power on unit: -71 [ 261.435425][ T935] usb 2-1: Product: syz [ 261.443382][ T5283] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 261.451663][ T935] usb 2-1: Manufacturer: syz [ 261.461856][ T935] usb 2-1: SerialNumber: syz [ 261.478793][ T5283] usb 3-1: USB disconnect, device number 61 [ 261.487133][ T935] usb 2-1: config 0 descriptor?? [ 261.498066][ T935] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 261.703409][ T5288] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 261.757131][ T5288] usb 1-1: device descriptor read/8, error -71 [ 261.903688][ T5288] usb usb1-port1: unable to enumerate USB device [ 261.976793][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 262.153891][ T7115] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 262.316901][ T7115] usb 5-1: Using ep0 maxpacket: 8 [ 262.350051][ T7115] usb 5-1: New USB device found, idVendor=13d3, idProduct=3335, bcdDevice=b9.77 [ 262.375930][ T7115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.401026][ T7115] usb 5-1: config 0 descriptor?? [ 262.441549][ T7115] r8712u: register rtl8712_netdev_ops to netdev_ops [ 262.441580][ T7115] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 262.580421][ T8398] kvm: pic: non byte read [ 262.581218][ T8398] kvm: pic: non byte read [ 262.681150][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.715'. [ 262.763967][ T7115] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 262.770654][ T7115] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 262.789667][ T935] usb 2-1: qt2_attach - failed to power on unit: -71 [ 262.790655][ T7115] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 262.824642][ T935] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 262.870158][ T7115] usb 5-1: USB disconnect, device number 52 [ 262.878961][ T935] usb 2-1: USB disconnect, device number 66 [ 262.918166][ T8418] netlink: 220 bytes leftover after parsing attributes in process `syz.1.721'. [ 263.048848][ T30] audit: type=1326 audit(1729180233.132:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.1.722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f069597dff9 code=0x0 [ 263.073831][ T7116] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 263.111891][ T8422] tipc: Started in network mode [ 263.134963][ T8422] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 263.145601][ T8422] tipc: Enabled bearer , priority 22 [ 263.246416][ T7116] usb 3-1: Using ep0 maxpacket: 32 [ 263.260461][ T7116] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 263.270875][ T7116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.284729][ T7116] usb 3-1: Product: syz [ 263.288936][ T7116] usb 3-1: Manufacturer: syz [ 263.298725][ T7116] usb 3-1: SerialNumber: syz [ 263.306891][ T7116] usb 3-1: config 0 descriptor?? [ 263.318705][ T7116] cdc_ether 3-1:0.0: More than one union descriptor, skipping ... [ 263.327586][ T7116] usb 3-1: bad CDC descriptors [ 263.341784][ T7116] usb 3-1: unsupported MDLM descriptors [ 263.512308][ T8432] binder: BC_ACQUIRE_RESULT not supported [ 263.534338][ T7115] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 263.563366][ T8432] binder: 8428:8432 ioctl c0306201 20000480 returned -22 [ 263.570046][ T8433] random: crng reseeded on system resumption [ 263.673492][ T935] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 263.703993][ T7115] usb 4-1: Using ep0 maxpacket: 8 [ 263.712081][ T7115] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 263.729471][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 263.759504][ T7115] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.792475][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.817163][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.829918][ T5283] usb 3-1: USB disconnect, device number 62 [ 263.831501][ T7115] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 263.851308][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 263.868871][ T935] usb 5-1: Using ep0 maxpacket: 8 [ 263.869434][ T7115] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.888266][ T935] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 263.897330][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.911396][ T935] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 263.919394][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.935041][ T935] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 263.956301][ T7115] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 263.962876][ T935] usb 5-1: config 250 has no interface number 0 [ 263.969729][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 263.986920][ T935] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 263.995775][ T7115] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.021220][ T935] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 264.023992][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.051293][ T935] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 264.072011][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.083626][ T935] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 264.083664][ T935] usb 5-1: config 250 interface 228 has no altsetting 0 [ 264.085637][ T935] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 264.121869][ T7115] usb 4-1: string descriptor 0 read error: -22 [ 264.129948][ T7115] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 264.150654][ T7115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.163526][ T935] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 264.192336][ T935] usb 5-1: Product: syz [ 264.199094][ T7115] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 264.203216][ T935] usb 5-1: SerialNumber: syz [ 264.237412][ T935] hub 5-1:250.228: bad descriptor, ignoring hub [ 264.253384][ T935] hub 5-1:250.228: probe with driver hub failed with error -5 [ 264.263918][ T7115] tipc: Node number set to 43690 [ 264.457965][ T935] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 53 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 264.533886][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 264.550382][ T935] usb 4-1: USB disconnect, device number 66 [ 264.563621][ T8437] binder_alloc: 8436: binder_alloc_buf, no vma [ 264.586006][ T8437] binder: 8436:8437 ioctl 401870cc 200001c0 returned -22 [ 264.606833][ T8437] binder: 8436:8437 ioctl 8927 200000c0 returned -22 [ 264.983820][ T935] usb 5-1: USB disconnect, device number 53 [ 265.014138][ T935] usblp1: removed [ 265.095680][ T5288] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 265.274847][ T5288] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.287039][ T5288] usb 4-1: not running at top speed; connect to a high speed hub [ 265.295136][ T935] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 265.314326][ T5288] usb 4-1: config index 0 descriptor too short (expected 1033, got 36) [ 265.322956][ T5288] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 128 [ 265.332974][ T5288] usb 4-1: can't read configurations, error -22 [ 265.471388][ T935] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 265.481341][ T5288] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 265.534671][ T935] usb 2-1: config 0 has no interface number 0 [ 265.540874][ T935] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 265.585798][ T935] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 265.598838][ T935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.607561][ T935] usb 2-1: Product: syz [ 265.620020][ T935] usb 2-1: Manufacturer: syz [ 265.625441][ T935] usb 2-1: SerialNumber: syz [ 265.641802][ T935] usb 2-1: config 0 descriptor?? [ 265.653888][ T8446] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 265.705953][ T935] as10x_usb: device has been detected [ 265.722668][ T5288] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.751269][ T935] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 265.763799][ T5288] usb 4-1: not running at top speed; connect to a high speed hub [ 265.789279][ T5288] usb 4-1: config index 0 descriptor too short (expected 1033, got 36) [ 265.817889][ T5288] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 128 [ 265.828415][ T935] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 265.852984][ T5288] usb 4-1: can't read configurations, error -22 [ 265.863049][ T5288] usb usb4-port1: attempt power cycle [ 265.920219][ T935] as10x_usb: error during firmware upload part1 [ 265.932089][ T935] Registered device PCTV Systems picoStick (74e) [ 265.940134][ T935] usb 2-1: USB disconnect, device number 67 [ 266.021698][ T935] Unregistered device PCTV Systems picoStick (74e) [ 266.026205][ T935] as10x_usb: device has been disconnected [ 266.153366][ T5230] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 266.313388][ T5288] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 266.337497][ T5288] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.349774][ T5288] usb 4-1: not running at top speed; connect to a high speed hub [ 266.361713][ T5288] usb 4-1: config index 0 descriptor too short (expected 1033, got 36) [ 266.375571][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.404665][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.414565][ T5288] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 128 [ 266.424893][ T5230] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 266.438778][ T5288] usb 4-1: can't read configurations, error -22 [ 266.447115][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.477949][ T5230] usb 5-1: config 0 descriptor?? [ 266.584297][ T5288] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 266.626951][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 266.638235][ T5288] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.643831][ T8466] netlink: 3 bytes leftover after parsing attributes in process `syz.1.738'. [ 266.657146][ T5288] usb 4-1: not running at top speed; connect to a high speed hub [ 266.677868][ T5288] usb 4-1: config index 0 descriptor too short (expected 1033, got 36) [ 266.701385][ T5288] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 128 [ 266.743389][ T5288] usb 4-1: can't read configurations, error -22 [ 266.753741][ T5288] usb usb4-port1: unable to enumerate USB device [ 266.765302][ T8459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.823679][ T8459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.833869][ T7115] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 266.874190][ T5230] usbhid 5-1:0.0: can't add hid device: -71 [ 266.883393][ T5230] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 266.909263][ T5230] usb 5-1: USB disconnect, device number 54 [ 266.988984][ T7115] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 267.014038][ T7115] usb 1-1: config 7 has no interface number 0 [ 267.021190][ T7115] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 267.043883][ T7115] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 267.063933][ T7115] usb 1-1: config 7 interface 252 has no altsetting 0 [ 267.086219][ T7115] usb 1-1: string descriptor 0 read error: -22 [ 267.092527][ T7115] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 267.123783][ T7115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.166826][ T7115] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 267.384909][ T5288] usb 1-1: USB disconnect, device number 78 [ 267.924436][ T7115] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 268.049453][ T8495] program syz.3.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.083826][ T7115] usb 5-1: Using ep0 maxpacket: 32 [ 268.100723][ T7115] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 268.110295][ T7115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.113427][ T5288] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 268.139360][ T7115] usb 5-1: Product: syz [ 268.179241][ T7115] usb 5-1: Manufacturer: syz [ 268.203343][ T7115] usb 5-1: SerialNumber: syz [ 268.229278][ T7115] usb 5-1: config 0 descriptor?? [ 268.249174][ T7115] cdc_ether 5-1:0.0: More than one union descriptor, skipping ... [ 268.270444][ T7115] usb 5-1: bad CDC descriptors [ 268.283400][ T5288] usb 2-1: Using ep0 maxpacket: 8 [ 268.284259][ T7115] usb 5-1: unsupported MDLM descriptors [ 268.295457][ T5288] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 268.305179][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.322477][ T5288] usb 2-1: Product: syz [ 268.330018][ T5288] usb 2-1: Manufacturer: syz [ 268.343029][ T5288] usb 2-1: SerialNumber: syz [ 268.369058][ T5288] usb 2-1: config 0 descriptor?? [ 268.398770][ T5288] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 268.634688][ T935] usb 5-1: USB disconnect, device number 55 [ 268.773434][ T5288] gspca_m5602: Failed to find a sensor [ 268.788681][ T5288] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 268.819024][ T5288] usb 2-1: USB disconnect, device number 68 [ 269.284089][ T5288] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 269.316655][ T8520] loop2: detected capacity change from 0 to 7 [ 269.349970][ T8520] Dev loop2: unable to read RDB block 7 [ 269.372234][ T8520] loop2: unable to read partition table [ 269.395215][ T8520] loop2: partition table beyond EOD, truncated [ 269.409757][ T8520] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 269.520280][ T5288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.589670][ T5288] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.636957][ T5288] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 269.685799][ T5288] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.704283][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.737937][ T5288] usb 3-1: Product: syz [ 269.762649][ T5288] usb 3-1: Manufacturer: syz [ 269.769900][ T5288] usb 3-1: SerialNumber: syz [ 269.819102][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 269.875187][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 269.907986][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 269.936155][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 269.962951][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 269.969525][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 269.978761][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 270.005219][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 270.032480][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 270.042436][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 270.074634][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 270.187898][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 270.227707][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 270.303389][ T5230] usb 12-1: SetAddress Request (2) to port 0 [ 270.322841][ T5230] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 270.504010][ T25] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 270.654101][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 270.665281][ T25] usb 2-1: config 0 has no interfaces? [ 270.678667][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.688249][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.699550][ T25] usb 2-1: Product: syz [ 270.706282][ T25] usb 2-1: Manufacturer: syz [ 270.711322][ T25] usb 2-1: SerialNumber: syz [ 270.719924][ T25] usb 2-1: config 0 descriptor?? [ 270.770208][ T8544] loop2: detected capacity change from 0 to 7 [ 270.781389][ T8544] Dev loop2: unable to read RDB block 7 [ 270.789159][ T8544] loop2: unable to read partition table [ 270.796057][ T8544] loop2: partition table beyond EOD, truncated [ 270.802699][ T8544] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.937196][ T8539] vhci_hcd: connection reset by peer [ 270.944213][ T12] vhci_hcd: stop threads [ 270.948502][ T12] vhci_hcd: release socket [ 270.955417][ T12] vhci_hcd: disconnect device [ 271.464303][ T7115] usb 2-1: USB disconnect, device number 69 [ 271.579620][ T8563] loop2: detected capacity change from 0 to 7 [ 271.586630][ T8563] Dev loop2: unable to read RDB block 7 [ 271.593049][ T8563] loop2: unable to read partition table [ 271.628715][ T8563] loop2: partition table beyond EOD, truncated [ 271.644174][ T8563] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.833584][ T5283] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 271.967356][ T5288] cdc_ncm 3-1:1.0: bind() failure [ 271.995452][ T5288] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 272.003994][ T5288] cdc_ncm 3-1:1.1: bind() failure [ 272.042956][ T5283] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.056576][ T5283] usb 5-1: not running at top speed; connect to a high speed hub [ 272.089728][ T5288] usb 3-1: USB disconnect, device number 63 [ 272.099095][ T5283] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 272.129610][ T5283] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 111 [ 272.166661][ T8577] veth3: entered allmulticast mode [ 272.168836][ T5283] usb 5-1: can't read configurations, error -22 [ 272.210813][ T8582] fuse: Unknown parameter 'rootode' [ 272.333357][ T5283] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 272.456540][ T5288] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 272.517043][ T5283] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.523961][ T7115] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 272.525675][ T5283] usb 5-1: not running at top speed; connect to a high speed hub [ 272.540690][ T5283] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 272.550886][ T5283] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 111 [ 272.563273][ T5286] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 272.586949][ T5283] usb 5-1: can't read configurations, error -22 [ 272.594393][ T5283] usb usb5-port1: attempt power cycle [ 272.631022][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 272.639684][ T5288] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 272.649431][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.657507][ T5288] usb 3-1: Product: syz [ 272.661887][ T5288] usb 3-1: Manufacturer: syz [ 272.669039][ T5288] usb 3-1: SerialNumber: syz [ 272.681014][ T5288] usb 3-1: config 0 descriptor?? [ 272.688578][ T7115] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 272.691629][ T5288] usb 3-1: active config #0 != 1 ?? [ 272.703998][ T7115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.717717][ T7115] usb 4-1: Product: syz [ 272.721926][ T7115] usb 4-1: Manufacturer: syz [ 272.729871][ T7115] usb 4-1: SerialNumber: syz [ 272.739725][ T7115] usb 4-1: config 0 descriptor?? [ 272.752779][ T7115] ch341 4-1:0.0: ch341-uart converter detected [ 272.754954][ T5286] usb 1-1: config 0 has no interfaces? [ 272.766317][ T5286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.776099][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.784223][ T5286] usb 1-1: Product: syz [ 272.788522][ T5286] usb 1-1: Manufacturer: syz [ 272.796090][ T5286] usb 1-1: config 0 descriptor?? [ 272.812270][ T8612] fuse: Bad value for 'group_id' [ 272.818248][ T8612] fuse: Bad value for 'group_id' [ 272.933454][ T5283] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 272.958089][ T7115] usb 4-1: failed to receive control message: -121 [ 272.965328][ T7115] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 272.966757][ T5283] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.988156][ T5283] usb 5-1: not running at top speed; connect to a high speed hub [ 272.997322][ T5283] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 273.009339][ T5283] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 111 [ 273.019625][ T5283] usb 5-1: can't read configurations, error -22 [ 273.030035][ T8594] [ 273.032388][ T8594] ===================================================== [ 273.039311][ T8594] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 273.046771][ T8594] 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 Not tainted [ 273.053872][ T8594] ----------------------------------------------------- [ 273.060796][ T8594] syz.0.776/8594 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 273.068335][ T8594] ffff8880275f90c0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 273.077051][ T8594] [ 273.077051][ T8594] and this task is already holding: [ 273.084404][ T8594] ffff88807ba4f028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 273.094162][ T8594] which would create a new lock dependency: [ 273.100064][ T8594] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 273.108169][ T8594] [ 273.108169][ T8594] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 273.117609][ T8594] (&dev->event_lock#2){..-.}-{2:2} [ 273.117644][ T8594] [ 273.117644][ T8594] ... which became SOFTIRQ-irq-safe at: [ 273.130520][ T8594] lock_acquire+0x1ed/0x550 [ 273.135118][ T8594] _raw_spin_lock_irqsave+0xd5/0x120 [ 273.140490][ T8594] input_inject_event+0xc5/0x340 [ 273.145512][ T8594] kd_sound_helper+0x101/0x210 [ 273.150365][ T8594] input_handler_for_each_handle+0x103/0x1d0 [ 273.156437][ T8594] call_timer_fn+0x18e/0x650 [ 273.161116][ T8594] __run_timer_base+0x66a/0x8e0 [ 273.166050][ T8594] run_timer_softirq+0xb7/0x170 [ 273.170984][ T8594] handle_softirqs+0x2c5/0x980 [ 273.175939][ T8594] __irq_exit_rcu+0xf4/0x1c0 [ 273.180643][ T8594] irq_exit_rcu+0x9/0x30 [ 273.184973][ T8594] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.190778][ T8594] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.196838][ T8594] console_flush_all+0x996/0xeb0 [ 273.201879][ T8594] console_unlock+0x14f/0x3b0 [ 273.206667][ T8594] vprintk_emit+0x730/0xa10 [ 273.211254][ T8594] _printk+0xd5/0x120 [ 273.215309][ T8594] cx25840_probe+0x1931/0x3520 [ 273.220150][ T8594] i2c_device_probe+0x73c/0xa70 [ 273.225095][ T8594] really_probe+0x2b8/0xad0 [ 273.225919][ T5283] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 273.229687][ T8594] __driver_probe_device+0x1a2/0x390 [ 273.242591][ T8594] driver_probe_device+0x50/0x430 [ 273.247704][ T8594] __device_attach_driver+0x2d6/0x530 [ 273.253177][ T8594] bus_for_each_drv+0x24e/0x2e0 [ 273.258141][ T8594] __device_attach+0x333/0x520 [ 273.263009][ T8594] bus_probe_device+0x189/0x260 [ 273.267976][ T8594] device_add+0x856/0xbf0 [ 273.272407][ T8594] i2c_new_client_device+0xa11/0x1050 [ 273.277499][ T5283] usb 5-1: unable to get BOS descriptor or descriptor too short [ 273.277876][ T8594] v4l2_i2c_new_subdev_board+0xa1/0x240 [ 273.291177][ T8594] v4l2_i2c_new_subdev+0xe4/0x150 [ 273.293645][ T5283] usb 5-1: not running at top speed; connect to a high speed hub [ 273.296303][ T8594] pvr2_hdw_initialize+0xee9/0x3d10 [ 273.309311][ T8594] pvr2_context_thread_func+0x4b3/0xb50 [ 273.314047][ T5283] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 273.314957][ T8594] kthread+0x2f0/0x390 [ 273.326847][ T8594] ret_from_fork+0x4b/0x80 [ 273.331384][ T8594] ret_from_fork_asm+0x1a/0x30 [ 273.333711][ T5283] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 111 [ 273.336248][ T8594] [ 273.336248][ T8594] to a SOFTIRQ-irq-unsafe lock: [ 273.351840][ T8594] (tasklist_lock){.+.+}-{2:2} [ 273.351870][ T8594] [ 273.351870][ T8594] ... which became SOFTIRQ-irq-unsafe at: [ 273.364484][ T8594] ... [ 273.364492][ T8594] lock_acquire+0x1ed/0x550 [ 273.371655][ T8594] _raw_read_lock+0x36/0x50 [ 273.376249][ T8594] __do_wait+0x12d/0x850 [ 273.380579][ T8594] do_wait+0x1e9/0x560 [ 273.384734][ T8594] kernel_wait+0xe9/0x240 [ 273.389145][ T8594] call_usermodehelper_exec_work+0xbd/0x230 [ 273.395127][ T8594] process_scheduled_works+0xa63/0x1850 [ 273.400758][ T8594] worker_thread+0x870/0xd30 [ 273.405435][ T8594] kthread+0x2f0/0x390 [ 273.409604][ T8594] ret_from_fork+0x4b/0x80 [ 273.414114][ T8594] ret_from_fork_asm+0x1a/0x30 [ 273.418971][ T8594] [ 273.418971][ T8594] other info that might help us debug this: [ 273.418971][ T8594] [ 273.429195][ T8594] Chain exists of: [ 273.429195][ T8594] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 273.429195][ T8594] [ 273.442776][ T8594] Possible interrupt unsafe locking scenario: [ 273.442776][ T8594] [ 273.451089][ T8594] CPU0 CPU1 [ 273.456450][ T8594] ---- ---- [ 273.461827][ T8594] lock(tasklist_lock); [ 273.466080][ T8594] local_irq_disable(); [ 273.472918][ T8594] lock(&dev->event_lock#2); [ 273.480125][ T8594] lock(&client->buffer_lock); [ 273.487490][ T8594] [ 273.491021][ T8594] lock(&dev->event_lock#2); [ 273.495881][ T8594] [ 273.495881][ T8594] *** DEADLOCK *** [ 273.495881][ T8594] [ 273.504019][ T8594] 7 locks held by syz.0.776/8594: [ 273.509037][ T8594] #0: ffff88802924f110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 273.518194][ T8594] #1: ffff8881482db230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 273.528317][ T8594] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 273.537992][ T8594] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 273.547585][ T8594] #4: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x6f/0x300 [ 273.556734][ T8594] #5: ffff88807ba4f028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 273.566922][ T8594] #6: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 273.575993][ T8594] [ 273.575993][ T8594] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 273.586393][ T8594] -> (&dev->event_lock#2){..-.}-{2:2} { [ 273.592058][ T8594] IN-SOFTIRQ-W at: [ 273.596148][ T8594] lock_acquire+0x1ed/0x550 [ 273.602508][ T8594] _raw_spin_lock_irqsave+0xd5/0x120 [ 273.609635][ T8594] input_inject_event+0xc5/0x340 [ 273.616399][ T8594] kd_sound_helper+0x101/0x210 [ 273.622984][ T8594] input_handler_for_each_handle+0x103/0x1d0 [ 273.630805][ T8594] call_timer_fn+0x18e/0x650 [ 273.637231][ T8594] __run_timer_base+0x66a/0x8e0 [ 273.643908][ T8594] run_timer_softirq+0xb7/0x170 [ 273.650589][ T8594] handle_softirqs+0x2c5/0x980 [ 273.657267][ T8594] __irq_exit_rcu+0xf4/0x1c0 [ 273.663688][ T8594] irq_exit_rcu+0x9/0x30 [ 273.669762][ T8594] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.677225][ T8594] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.685028][ T8594] console_flush_all+0x996/0xeb0 [ 273.691793][ T8594] console_unlock+0x14f/0x3b0 [ 273.698296][ T8594] vprintk_emit+0x730/0xa10 [ 273.704624][ T8594] _printk+0xd5/0x120 [ 273.710451][ T8594] cx25840_probe+0x1931/0x3520 [ 273.717035][ T8594] i2c_device_probe+0x73c/0xa70 [ 273.723715][ T8594] really_probe+0x2b8/0xad0 [ 273.730044][ T8594] __driver_probe_device+0x1a2/0x390 [ 273.737147][ T8594] driver_probe_device+0x50/0x430 [ 273.743997][ T8594] __device_attach_driver+0x2d6/0x530 [ 273.751199][ T8594] bus_for_each_drv+0x24e/0x2e0 [ 273.757880][ T8594] __device_attach+0x333/0x520 [ 273.764464][ T8594] bus_probe_device+0x189/0x260 [ 273.771152][ T8594] device_add+0x856/0xbf0 [ 273.777320][ T8594] i2c_new_client_device+0xa11/0x1050 [ 273.784531][ T8594] v4l2_i2c_new_subdev_board+0xa1/0x240 [ 273.791907][ T8594] v4l2_i2c_new_subdev+0xe4/0x150 [ 273.798765][ T8594] pvr2_hdw_initialize+0xee9/0x3d10 [ 273.805797][ T8594] pvr2_context_thread_func+0x4b3/0xb50 [ 273.813200][ T8594] kthread+0x2f0/0x390 [ 273.819111][ T8594] ret_from_fork+0x4b/0x80 [ 273.825363][ T8594] ret_from_fork_asm+0x1a/0x30 [ 273.831962][ T8594] INITIAL USE at: [ 273.835944][ T8594] lock_acquire+0x1ed/0x550 [ 273.842193][ T8594] _raw_spin_lock_irqsave+0xd5/0x120 [ 273.849227][ T8594] input_inject_event+0xc5/0x340 [ 273.855907][ T8594] kbd_led_trigger_activate+0xb8/0x100 [ 273.863738][ T8594] led_trigger_set+0x582/0x9c0 [ 273.870256][ T8594] led_trigger_set_default+0x229/0x260 [ 273.877465][ T8594] led_classdev_register_ext+0x6e6/0x8a0 [ 273.884847][ T8594] input_leds_connect+0x489/0x630 [ 273.891619][ T8594] input_register_device+0xd3b/0x1110 [ 273.898738][ T8594] atkbd_connect+0x752/0xa00 [ 273.905085][ T8594] serio_driver_probe+0x7f/0xa0 [ 273.911690][ T8594] really_probe+0x2b8/0xad0 [ 273.917935][ T8594] __driver_probe_device+0x1a2/0x390 [ 273.924971][ T8594] driver_probe_device+0x50/0x430 [ 273.931741][ T8594] __driver_attach+0x45f/0x710 [ 273.938256][ T8594] bus_for_each_dev+0x239/0x2b0 [ 273.944854][ T8594] serio_handle_event+0x1c7/0x920 [ 273.951617][ T8594] process_scheduled_works+0xa63/0x1850 [ 273.958904][ T8594] worker_thread+0x870/0xd30 [ 273.965235][ T8594] kthread+0x2f0/0x390 [ 273.971035][ T8594] ret_from_fork+0x4b/0x80 [ 273.977207][ T8594] ret_from_fork_asm+0x1a/0x30 [ 273.983716][ T8594] } [ 273.986300][ T8594] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 273.995424][ T8594] -> (&client->buffer_lock){....}-{2:2} { [ 274.001170][ T8594] INITIAL USE at: [ 274.005062][ T8594] lock_acquire+0x1ed/0x550 [ 274.011144][ T8594] _raw_spin_lock+0x2e/0x40 [ 274.017212][ T8594] evdev_pass_values+0xf2/0xad0 [ 274.023630][ T8594] evdev_events+0x1c2/0x300 [ 274.029699][ T8594] input_pass_values+0x286/0x860 [ 274.036196][ T8594] input_event_dispose+0x30f/0x600 [ 274.042874][ T8594] input_handle_event+0xa71/0xbe0 [ 274.049467][ T8594] input_inject_event+0x22f/0x340 [ 274.056057][ T8594] evdev_write+0x5fd/0x790 [ 274.062033][ T8594] vfs_write+0x29c/0xc90 [ 274.067836][ T8594] ksys_write+0x183/0x2b0 [ 274.073728][ T8594] do_syscall_64+0xf3/0x230 [ 274.079797][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.087263][ T8594] } [ 274.089754][ T8594] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 274.097923][ T8594] ... acquired at: [ 274.101723][ T8594] lock_acquire+0x1ed/0x550 [ 274.106410][ T8594] _raw_spin_lock+0x2e/0x40 [ 274.111092][ T8594] evdev_pass_values+0xf2/0xad0 [ 274.116113][ T8594] evdev_events+0x1c2/0x300 [ 274.120792][ T8594] input_pass_values+0x286/0x860 [ 274.125917][ T8594] input_event_dispose+0x30f/0x600 [ 274.131212][ T8594] input_handle_event+0xa71/0xbe0 [ 274.136416][ T8594] input_inject_event+0x22f/0x340 [ 274.141620][ T8594] evdev_write+0x5fd/0x790 [ 274.146300][ T8594] vfs_write+0x29c/0xc90 [ 274.150719][ T8594] ksys_write+0x183/0x2b0 [ 274.155219][ T8594] do_syscall_64+0xf3/0x230 [ 274.159890][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.165962][ T8594] [ 274.168279][ T8594] [ 274.168279][ T8594] the dependencies between the lock to be acquired [ 274.168288][ T8594] and SOFTIRQ-irq-unsafe lock: [ 274.181784][ T8594] -> (tasklist_lock){.+.+}-{2:2} { [ 274.187101][ T8594] HARDIRQ-ON-R at: [ 274.191254][ T8594] lock_acquire+0x1ed/0x550 [ 274.197761][ T8594] _raw_read_lock+0x36/0x50 [ 274.204286][ T8594] __do_wait+0x12d/0x850 [ 274.210537][ T8594] do_wait+0x1e9/0x560 [ 274.216604][ T8594] kernel_wait+0xe9/0x240 [ 274.222929][ T8594] call_usermodehelper_exec_work+0xbd/0x230 [ 274.230831][ T8594] process_scheduled_works+0xa63/0x1850 [ 274.238384][ T8594] worker_thread+0x870/0xd30 [ 274.244981][ T8594] kthread+0x2f0/0x390 [ 274.251054][ T8594] ret_from_fork+0x4b/0x80 [ 274.257482][ T8594] ret_from_fork_asm+0x1a/0x30 [ 274.264706][ T8594] SOFTIRQ-ON-R at: [ 274.268855][ T8594] lock_acquire+0x1ed/0x550 [ 274.275361][ T8594] _raw_read_lock+0x36/0x50 [ 274.281867][ T8594] __do_wait+0x12d/0x850 [ 274.288107][ T8594] do_wait+0x1e9/0x560 [ 274.294173][ T8594] kernel_wait+0xe9/0x240 [ 274.300500][ T8594] call_usermodehelper_exec_work+0xbd/0x230 [ 274.308393][ T8594] process_scheduled_works+0xa63/0x1850 [ 274.315933][ T8594] worker_thread+0x870/0xd30 [ 274.322549][ T8594] kthread+0x2f0/0x390 [ 274.328616][ T8594] ret_from_fork+0x4b/0x80 [ 274.335047][ T8594] ret_from_fork_asm+0x1a/0x30 [ 274.341821][ T8594] INITIAL USE at: [ 274.345898][ T8594] lock_acquire+0x1ed/0x550 [ 274.352316][ T8594] _raw_write_lock_irq+0xd3/0x120 [ 274.359243][ T8594] copy_process+0x2267/0x3d50 [ 274.365833][ T8594] kernel_clone+0x226/0x8f0 [ 274.372265][ T8594] user_mode_thread+0x132/0x1a0 [ 274.379047][ T8594] rest_init+0x23/0x300 [ 274.385124][ T8594] start_kernel+0x47f/0x500 [ 274.391543][ T8594] x86_64_start_reservations+0x2a/0x30 [ 274.398923][ T8594] x86_64_start_kernel+0x9f/0xa0 [ 274.405782][ T8594] common_startup_64+0x13e/0x147 [ 274.412629][ T8594] INITIAL READ USE at: [ 274.417131][ T8594] lock_acquire+0x1ed/0x550 [ 274.423986][ T8594] _raw_read_lock+0x36/0x50 [ 274.430843][ T8594] __do_wait+0x12d/0x850 [ 274.437427][ T8594] do_wait+0x1e9/0x560 [ 274.443841][ T8594] kernel_wait+0xe9/0x240 [ 274.450522][ T8594] call_usermodehelper_exec_work+0xbd/0x230 [ 274.458761][ T8594] process_scheduled_works+0xa63/0x1850 [ 274.466651][ T8594] worker_thread+0x870/0xd30 [ 274.473591][ T8594] kthread+0x2f0/0x390 [ 274.480010][ T8594] ret_from_fork+0x4b/0x80 [ 274.486778][ T8594] ret_from_fork_asm+0x1a/0x30 [ 274.493899][ T8594] } [ 274.496570][ T8594] ... key at: [] tasklist_lock+0x18/0x40 [ 274.504466][ T8594] ... acquired at: [ 274.508443][ T8594] lock_acquire+0x1ed/0x550 [ 274.513129][ T8594] _raw_read_lock+0x36/0x50 [ 274.517832][ T8594] send_sigurg+0x144/0x430 [ 274.522519][ T8594] sk_send_sigurg+0x6e/0x2f0 [ 274.527294][ T8594] tcp_check_urg+0x207/0x740 [ 274.532058][ T8594] tcp_urg+0x15c/0x450 [ 274.536293][ T8594] tcp_rcv_established+0xfaf/0x2020 [ 274.541661][ T8594] tcp_v6_do_rcv+0x5c8/0x13a0 [ 274.546525][ T8594] __release_sock+0x1c8/0x350 [ 274.551374][ T8594] release_sock+0x61/0x1f0 [ 274.555962][ T8594] tcp_sendmsg+0x3a/0x50 [ 274.560372][ T8594] __sock_sendmsg+0xef/0x270 [ 274.565142][ T8594] ____sys_sendmsg+0x52a/0x7e0 [ 274.570081][ T8594] __sys_sendmsg+0x292/0x380 [ 274.574848][ T8594] do_syscall_64+0xf3/0x230 [ 274.579542][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.585611][ T8594] [ 274.587925][ T8594] -> (&f_owner->lock){....}-{2:2} { [ 274.593244][ T8594] INITIAL USE at: [ 274.597239][ T8594] lock_acquire+0x1ed/0x550 [ 274.603490][ T8594] _raw_write_lock_irq+0xd3/0x120 [ 274.610260][ T8594] __f_setown+0x6b/0x380 [ 274.616243][ T8594] f_setown+0x243/0x310 [ 274.622140][ T8594] do_fcntl+0x115/0x1a60 [ 274.628129][ T8594] __se_sys_fcntl+0xd2/0x1e0 [ 274.634461][ T8594] do_syscall_64+0xf3/0x230 [ 274.640699][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.648349][ T8594] INITIAL READ USE at: [ 274.652759][ T8594] lock_acquire+0x1ed/0x550 [ 274.659435][ T8594] _raw_read_lock_irqsave+0xdd/0x130 [ 274.666901][ T8594] send_sigio+0x37/0x390 [ 274.673324][ T8594] kill_fasync+0x256/0x4f0 [ 274.679921][ T8594] sock_wake_async+0x147/0x170 [ 274.686865][ T8594] sk_wake_async+0x183/0x280 [ 274.693640][ T8594] unix_release_sock+0x727/0xd00 [ 274.700760][ T8594] unix_release+0x91/0xc0 [ 274.707265][ T8594] sock_close+0xbc/0x240 [ 274.713679][ T8594] __fput+0x23f/0x880 [ 274.719839][ T8594] task_work_run+0x24f/0x310 [ 274.726612][ T8594] do_exit+0xa2f/0x28e0 [ 274.732935][ T8594] do_group_exit+0x207/0x2c0 [ 274.739706][ T8594] get_signal+0x16a3/0x1740 [ 274.746400][ T8594] arch_do_signal_or_restart+0x96/0x860 [ 274.754144][ T8594] syscall_exit_to_user_mode+0xc9/0x370 [ 274.761874][ T8594] do_syscall_64+0x100/0x230 [ 274.768639][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.776712][ T8594] } [ 274.779295][ T8594] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 274.788242][ T8594] ... acquired at: [ 274.792126][ T8594] lock_acquire+0x1ed/0x550 [ 274.796809][ T8594] _raw_read_lock_irqsave+0xdd/0x130 [ 274.802276][ T8594] send_sigio+0x37/0x390 [ 274.806708][ T8594] kill_fasync+0x256/0x4f0 [ 274.811316][ T8594] sock_wake_async+0x147/0x170 [ 274.816260][ T8594] sk_wake_async+0x183/0x280 [ 274.821030][ T8594] unix_release_sock+0x727/0xd00 [ 274.826152][ T8594] unix_release+0x91/0xc0 [ 274.830658][ T8594] sock_close+0xbc/0x240 [ 274.835073][ T8594] __fput+0x23f/0x880 [ 274.839228][ T8594] task_work_run+0x24f/0x310 [ 274.843989][ T8594] do_exit+0xa2f/0x28e0 [ 274.848403][ T8594] do_group_exit+0x207/0x2c0 [ 274.853198][ T8594] get_signal+0x16a3/0x1740 [ 274.857878][ T8594] arch_do_signal_or_restart+0x96/0x860 [ 274.864045][ T8594] syscall_exit_to_user_mode+0xc9/0x370 [ 274.869767][ T8594] do_syscall_64+0x100/0x230 [ 274.874547][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.880710][ T8594] [ 274.883033][ T8594] -> (&new->fa_lock){....}-{2:2} { [ 274.888171][ T8594] INITIAL USE at: [ 274.892065][ T8594] lock_acquire+0x1ed/0x550 [ 274.898158][ T8594] _raw_write_lock_irq+0xd3/0x120 [ 274.904750][ T8594] fasync_remove_entry+0xff/0x1d0 [ 274.911342][ T8594] sock_fasync+0x87/0x100 [ 274.917234][ T8594] __fput+0x71b/0x880 [ 274.922783][ T8594] task_work_run+0x24f/0x310 [ 274.929033][ T8594] do_exit+0xa2f/0x28e0 [ 274.934755][ T8594] do_group_exit+0x207/0x2c0 [ 274.940915][ T8594] get_signal+0x16a3/0x1740 [ 274.946989][ T8594] arch_do_signal_or_restart+0x96/0x860 [ 274.954110][ T8594] syscall_exit_to_user_mode+0xc9/0x370 [ 274.961226][ T8594] do_syscall_64+0x100/0x230 [ 274.967383][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.974856][ T8594] INITIAL READ USE at: [ 274.979186][ T8594] lock_acquire+0x1ed/0x550 [ 274.985690][ T8594] _raw_read_lock_irqsave+0xdd/0x130 [ 274.992979][ T8594] kill_fasync+0x199/0x4f0 [ 274.999393][ T8594] sock_wake_async+0x147/0x170 [ 275.006171][ T8594] sk_wake_async+0x183/0x280 [ 275.012764][ T8594] unix_release_sock+0x727/0xd00 [ 275.019701][ T8594] unix_release+0x91/0xc0 [ 275.026032][ T8594] sock_close+0xbc/0x240 [ 275.032274][ T8594] __fput+0x23f/0x880 [ 275.038259][ T8594] task_work_run+0x24f/0x310 [ 275.044848][ T8594] do_exit+0xa2f/0x28e0 [ 275.051006][ T8594] do_group_exit+0x207/0x2c0 [ 275.057595][ T8594] get_signal+0x16a3/0x1740 [ 275.064098][ T8594] arch_do_signal_or_restart+0x96/0x860 [ 275.071651][ T8594] syscall_exit_to_user_mode+0xc9/0x370 [ 275.079200][ T8594] do_syscall_64+0x100/0x230 [ 275.085790][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.093711][ T8594] } [ 275.096207][ T8594] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 275.104886][ T8594] ... acquired at: [ 275.108686][ T8594] lock_acquire+0x1ed/0x550 [ 275.113383][ T8594] _raw_read_lock_irqsave+0xdd/0x130 [ 275.118859][ T8594] kill_fasync+0x199/0x4f0 [ 275.123459][ T8594] evdev_pass_values+0x58a/0xad0 [ 275.128580][ T8594] evdev_events+0x1c2/0x300 [ 275.133256][ T8594] input_pass_values+0x286/0x860 [ 275.138365][ T8594] input_event_dispose+0x30f/0x600 [ 275.143656][ T8594] input_handle_event+0xa71/0xbe0 [ 275.148857][ T8594] input_inject_event+0x22f/0x340 [ 275.154058][ T8594] evdev_write+0x5fd/0x790 [ 275.158649][ T8594] vfs_write+0x29c/0xc90 [ 275.163062][ T8594] ksys_write+0x183/0x2b0 [ 275.167560][ T8594] do_syscall_64+0xf3/0x230 [ 275.172232][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.178303][ T8594] [ 275.180619][ T8594] [ 275.180619][ T8594] stack backtrace: [ 275.186501][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz.0.776 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 275.197086][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.207142][ T8594] Call Trace: [ 275.210422][ T8594] [ 275.213360][ T8594] dump_stack_lvl+0x241/0x360 [ 275.218055][ T8594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.223263][ T8594] ? __pfx__printk+0x10/0x10 [ 275.227856][ T8594] ? print_shortest_lock_dependencies+0xf2/0x160 [ 275.234191][ T8594] validate_chain+0x4ebd/0x5920 [ 275.239053][ T8594] ? __pfx_validate_chain+0x10/0x10 [ 275.244259][ T8594] ? rcu_read_lock_sched_held+0x8d/0x130 [ 275.249924][ T8594] ? __pfx_validate_chain+0x10/0x10 [ 275.255127][ T8594] ? register_lock_class+0x102/0x980 [ 275.260439][ T8594] ? __pfx_register_lock_class+0x10/0x10 [ 275.266082][ T8594] ? mark_lock+0x9a/0x360 [ 275.270413][ T8594] __lock_acquire+0x1384/0x2050 [ 275.275282][ T8594] lock_acquire+0x1ed/0x550 [ 275.279790][ T8594] ? kill_fasync+0x199/0x4f0 [ 275.284400][ T8594] ? __pfx_lock_acquire+0x10/0x10 [ 275.289437][ T8594] ? __pfx_lock_acquire+0x10/0x10 [ 275.294483][ T8594] _raw_read_lock_irqsave+0xdd/0x130 [ 275.299776][ T8594] ? kill_fasync+0x199/0x4f0 [ 275.304371][ T8594] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 275.310281][ T8594] ? do_raw_spin_lock+0x14f/0x370 [ 275.315314][ T8594] kill_fasync+0x199/0x4f0 [ 275.319734][ T8594] ? kill_fasync+0x54/0x4f0 [ 275.324247][ T8594] evdev_pass_values+0x58a/0xad0 [ 275.329192][ T8594] ? evdev_pass_values+0x581/0xad0 [ 275.334307][ T8594] evdev_events+0x1c2/0x300 [ 275.338821][ T8594] ? evdev_events+0x6f/0x300 [ 275.343416][ T8594] input_pass_values+0x286/0x860 [ 275.348357][ T8594] ? input_pass_values+0x8f/0x860 [ 275.353386][ T8594] input_event_dispose+0x30f/0x600 [ 275.358512][ T8594] input_handle_event+0xa71/0xbe0 [ 275.363547][ T8594] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 275.369016][ T8594] ? __pfx_input_handle_event+0x10/0x10 [ 275.374584][ T8594] input_inject_event+0x22f/0x340 [ 275.379625][ T8594] ? input_inject_event+0xd6/0x340 [ 275.384737][ T8594] evdev_write+0x5fd/0x790 [ 275.389153][ T8594] ? __pfx_evdev_write+0x10/0x10 [ 275.394094][ T8594] ? bpf_lsm_file_permission+0x9/0x10 [ 275.399476][ T8594] ? security_file_permission+0x74/0x280 [ 275.405102][ T8594] ? rw_verify_area+0x1c3/0x6f0 [ 275.409958][ T8594] ? __pfx_evdev_write+0x10/0x10 [ 275.414897][ T8594] vfs_write+0x29c/0xc90 [ 275.419145][ T8594] ? kmem_cache_free+0x1a2/0x420 [ 275.424093][ T8594] ? __pfx_vfs_write+0x10/0x10 [ 275.428857][ T8594] ? __fget_files+0x29/0x470 [ 275.433452][ T8594] ? __fget_files+0x3f3/0x470 [ 275.438140][ T8594] ? __fget_files+0x29/0x470 [ 275.442732][ T8594] ? fdget_pos+0x19a/0x320 [ 275.447157][ T8594] ksys_write+0x183/0x2b0 [ 275.451491][ T8594] ? __pfx_ksys_write+0x10/0x10 [ 275.456343][ T8594] ? do_syscall_64+0x100/0x230 [ 275.461103][ T8594] ? do_syscall_64+0xb6/0x230 [ 275.465780][ T8594] do_syscall_64+0xf3/0x230 [ 275.470279][ T8594] ? clear_bhb_loop+0x35/0x90 [ 275.474949][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.480931][ T8594] RIP: 0033:0x7f6c0c77dff9 [ 275.485341][ T8594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.504943][ T8594] RSP: 002b:00007f6c0d657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.513360][ T8594] RAX: ffffffffffffffda RBX: 00007f6c0c935f80 RCX: 00007f6c0c77dff9 [ 275.521333][ T8594] RDX: 0000000000001068 RSI: 0000000020000040 RDI: 0000000000000005 [ 275.529300][ T8594] RBP: 00007f6c0c7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 275.537266][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.545237][ T8594] R13: 0000000000000000 R14: 00007f6c0c935f80 R15: 00007f6c0ca5fa28 [ 275.553228][ T8594] [ 275.556303][ T5283] usb 5-1: can't read configurations, error -22 [ 275.556397][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.574304][ T5230] usb 12-1: device descriptor read/8, error -110 [ 275.580760][ T5283] usb usb5-port1: unable to enumerate USB device [ 275.612375][ T5288] usb 3-1: USB disconnect, device number 64 [ 275.790662][ T5283] usb 1-1: USB disconnect, device number 80 [ 275.963882][ T5230] usb usb12-port1: attempt power cycle [ 276.534770][ T5230] usb usb12-port1: unable to enumerate USB device [ 277.126609][ T25] usb 4-1: USB disconnect, device number 71 [ 277.135333][ T25] ch341 4-1:0.0: device disconnected