last executing test programs: 14.540672575s ago: executing program 2 (id=2515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x3b3004, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000340)=r5, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000002300)={&(0x7f0000002180), 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x18, 0x140d, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004084}, 0x20000004) write$FUSE_LSEEK(r2, &(0x7f00000021c0)={0x18, 0x0, r4, {0x7}}, 0x18) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002140)={0x20, 0x0, r7, {0x0, 0x0, 0x80003ff}}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4004000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe8000000000000000000000000000002001000000000000000000000000000200000000000000000000001000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000240009000000000000000000040000000000000008000000000000000200000000000000e400060000000000000000000000000000000000fe8000000000000000000000000000aa4e2400084e2300080200a0002f000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fe80000000000000000000000000001f000004d6fe0000007f0000010000000000000000000000000300000000000000050000000000000009000000000000000008000000000000a963000000000000060000000000000015000000000000000300000000000000ffffffff000000009d000000000000000800000000000000ffffff7f0000000006000000000000008ab600002abd700000350000020004010000000000000000080018000000008014000d00ac1414bb0000000000000000000000000500190032000000650008"], 0x440}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x7}, 0x8) getsockname(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f0000000080)=0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x360bbbd080157e79, &(0x7f0000000000)) 13.532141374s ago: executing program 2 (id=2525): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x2131c100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0x208e24b) syz_usb_control_io(r3, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x20, 0x30, 0x87, {0x87, 0xe, "9e7dd764623ccc53f6f7b3bb8a9503f3829a2fd955904dde26a58d7cd81c1317b2fc6c78e96dc8b3f86ccc0c1954ee772332ade077c280602cbc8dcbbf39f09de6ab437082be79c023899bb6d78bf5ab494b1d419011e258074e284558cdd1b3d32783658243e2d951d59cb7634666e081d2e69a15ca945a044026b9f0139b162886a51d7c"}}, &(0x7f00000004c0)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "f38c4fa5d579482b17544a6047434d8574448010f106e313a67b315d0c276eb1b91860b52eaf7da15ff11c8067bd9b5d5897ca4fc26033f24b3d05dd76b77e02d0362d44d95def3f0c3d5a00073cbfdd6d236d5a593db8c76bc386da681c71d83e6c38c80944025fcbd2d998a6837e90469359f23f75310e41d91ed13631828c13183a838b73a82cd1116800fe1464c5cd38d35da3fb1b0d7b6447"}}, &(0x7f0000000100)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x32, 0xf, 0x9, 0x40, 0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x7, 0x5, "8235cf5d", "a11c02e4"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x1, 0x1, 0x7, 0x9, 0x8}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000b80)=ANY=[@ANYBLOB="000a5d0010004c85ef759b0b8d6b374eeae84a670b0fe10fcd2ef3efec06f5dc623cb395983fa16fc26dac5e26479c7d550674377e7e78dce59b3542abcd0644d6ec1a06d5e6cfa289a11aa482dff85a465331f237701b7cf9216e4a2a3272bd870621def4feec0bc440fe89e2a4506f4bd96bbbc1a769ce"], &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "b6c7"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @random="6d7d62dce283"}, &(0x7f0000000980)={0x40, 0x19, 0x2, "fa07"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xa9}, &(0x7f0000000a00)={0x40, 0x1c, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x4d}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x1}}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 13.053976271s ago: executing program 2 (id=2530): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a00177fffffff040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 6.830799077s ago: executing program 4 (id=2556): socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev2(r2, &(0x7f0000000000), 0x0, 0x1, 0x3, 0x4) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_generic(0x10, 0x3, 0x10) 6.754337927s ago: executing program 1 (id=2557): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x480}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.257920302s ago: executing program 3 (id=2559): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000004", @ANYRES32], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.089493493s ago: executing program 3 (id=2561): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaeaaaaaaaaaaaa07000000cd60e400ff0038"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f86dd", 0x5ea}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004040}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80015b18, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(twofish-generic)\x00'}, 0x58) syz_emit_ethernet(0x12c8, &(0x7f00000019c0)={@broadcast, @random="caf6e222e6aa", @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x2}}, {@mpls_mc={0x8848, {[{0x5}, {0x800}, {0x4, 0x0, 0x1}, {0x2}, {0x7}, {0x1, 0x0, 0x1}, {0x3}, {0xff, 0x0, 0x1}], @ipv4=@gre={{0x1f, 0x4, 0x2, 0x2, 0x1292, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@timestamp={0x44, 0x8, 0xff, 0x0, 0x0, [0x8]}, @noop, @cipso={0x86, 0x5d, 0x2, [{0x6, 0xf, "449ed60c4dff9f30e8ad4a0431"}, {0x0, 0x8, "274594436637"}, {0x0, 0xd, "ad91c3580af1d00ca8b8f6"}, {0x7, 0x6, "6d711097"}, {0x7, 0x12, "1616cc58d8fa25e1d128ba8df0a3448f"}, {0x0, 0x8, "3f9c3798a37b"}, {0x1, 0x6, "82288b36"}, {0x2, 0xd, "aefad3f2f4a5d072a94448"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x2, [0xf, 0x8], "e26c9844b19c16428b8ed3e3d4a90c86c26142ab1a00c3ccb149bfe63e7ab26a9f67aa83d091c1169ef9f43ddba4e0794ac93ceba46fdfa45536b4098ad430218ce5a501b641f7387a6760fc082c8a67efaa5252d42f7fa728198d466997954474c8029c579d415fc29a30298a514bf577344826ef7188cdc86931beb9a578d3583848347a173c827eca68ec8389e226427e319cc0f5b7190b690eac64d82d0f9955d6db8a244a0a7299ebb9bdf5bbacca6ecd00ab369688e7a2b23b495dd2d5de3ef9068054d6e41f5d524ff1fe5d684f3bed4ac3ad9818c7b5da362edd0bd0f7c99464b7ee1ee03be6a727083bedc8efd46129eff924b756de64858718ef3933fb2e95c7c53fcc1bc4a2c33ab0af408e4f5d3b66ca3c35272fc86625b1ee7acc0d60fc1adcb3e3d9d120994daeb23aa258fe97174931cc36a1fa92fcd096491231dc16bc6355b7746a469c7ded831737682c05f4b10c2e13d7c2b3333a0692eb94689d08f7d677e52086bd7f3ce7afc96b22421e3f406236805d78e103fa6f6ad803562e9fa4e29c06da023771c24310d248911893b6e4a5648994c31d569ae12ffbc013dd3428e54c0a7318c40fa54ef79fbc5601a08de4fb30b21699b8339259947cbc5945b4cd8678bf8848fd02bd8b88fd38a2c72ffa98235f773793a1cf86e33e82e484106774469e8f38cfdbdd9f818b8872f1b5c9f9e0149819d3bcbd5072d2ee490f3b83afb65faa69ea18f4c0ecd1d957e2a0a53e0ee2fab8512bc77e1454131da37cb750baff8327ff95ff4abe0ff7eecea788aa43cadd95a841999caf9ed6a573e99b8a299c9b329ac623649c47ee660f7403b42a766362a66683d0addda10bf398bce6bb965c40c0c9f32e3f829eccc488c0a506c43731a6871773eef2d3e056df5b2bbe381dc27d4439a7c3a7c50e44f918510f65d668934e28b5d4fed20fcc304b066091c14e8546443381d0ef93855c427292730bad08836d5093f65a986163281424ba04618e2f68da7f83ee44260e1efe443264011c553b06c00215742546fa6384a7e9595ed51f0123a3343afd90797520ab76bc486931b47a0cafd37c634fb4b29e0a54c69d2a8b511d0885d1f7dd36ea00bc7c3ec956edc66d26b03b02fdf88e00e05821a066b5c8d802ab366a329186e9dd8ef8f75e93ae76fe15ce0a8e30d24c06ca5e9715fac69f98fb5ccac80010b0b48b6ccdc252f9630c2e322a39a678642613a334b5e10b13a8dd401bc7854de1484bbb8cd6542a5a5f51af9d59e13e5473e96c48df160b053c05ac8c8156beba09b30c8f7616bd7f0b1bc5b8635eed8d525a80cab754bbc8b0df3de0080eb994cbc7e070daadd18ac8c60a6a7dc82f12aff25cd1ee9092b1369bfa98e4868d06befed1f9086c31ae239327c214f9007ca426442c288397d896cb58cbaa83f748c540f33f051bc137806962e2dc84e9396f86619660d070d10e5060605e7f67c837c38858f7bf070e764e3a9f7d56f57349ba7ffb54dfebff0feddf369a2158053774f9f0274af44bbc86bc9ddf792f1521ac6ad697e01e36e8efca98036e456a66d9871be887cdb5e9a836e0797e5fba199fa3608eae23d3baefced8694788721c783e6bb3ca351e314b59f86b8284d00948e0bad6956421492df838489dac1bea1b2a05e58fb4e1abafef4817aaf259eda3792ff4125dace61a90c96d8ed551eff8c0049b64325cd4a477fac6c4a516d48c90d49e1a306f568c4ecb0f848d674455797445dc8366918c7a56c3a2bfaac93b430aa0cc14f6bc688c3f14235ed7e537756ce2fc8269e862fca4d10a14b8974a86387286ecb1ca06c6a4556ff8f4e6770acfe7f3c7cb6970b38975833a6c2ac6f2f1337743f6539c5c599dc2885a74650fba0114e200733533d9991fc8425e964a19f24aed2985ba1636130024a6d269159b8a11edcd0a6452194cb50d4fbf2c76b2a63aa5d53abb9f1416647e1c375868fa4d551b4983f6f1ccd0f74769cb3e19a5207ca337ca67b68b8af26b615f013f3e4d850b6237183887681ae9b2e648b34000ac2e4ddd0779b748275ba7e459713b82ee7669da1845c96fe5f2fc65932d76e5a677da3914bf3f7f14a5ed618f186728c9748fc00529a7ac4dd80050b09e598a50e2bf6c3e18fcac815cc85ed5cbb9215e4c1f128220f09e01b1b13165022cc19dc53249264204b28b9ee08078bb61e64411b477d570436d8581a8e74349f85f79a5fd666308970f0289f96afbbffb5d642567897a5f70529e3e2c81b892373e98ed78cccb00dd5d91688d8352d54f35b3816e92e89df3bafd39932d3400766cfae2fb1e6bc5b099b47e441247846d71ae481b23755a1c6a0cd8c8d6b653bcda38542b37632c8cee29fc7fddc52e40ef15c860be86059504ba078c0ecad8d61f6bbcf35101b03bf6ad85508b6d649bc8cd6117f513e7f336a8e1754688b9ffeaa5c13159a8f0ae10f7580f75a3fee1411ac5a826930d2bc104e5ae35424aeffc8ceabebdb93d72445869c21c7bb684e83f328d6e5c8630a79fdb496cd705c0cc7f0b3239a24c8d7e7453a0aaf2699d91f4fa99d7c02009c857a2736c114c597b16b36740c5a080c7faecc5fd61b78ed5e2e0378ae1b9cc39cead5234ae0660c7715be2cf16ba7394b1752464f7257534c002d5dbc870d2e8724a00d80a8b48d621654c74588df363b2f11f0b3703e76a33c64c6bd1f43a34d320a90b0538b8e4b4a59bb880cef7dff3664c2de67155d1bc39c7606b3dc6acb66b5b1527df208bdd3e4d1ad5bc19952861daf6246662e80c39c658a31bfdf103fd447c01200ad66da39cd29427fe57b5c519cdae83075506ef45274a75c1a55860234d8e491f5de4529010dd1f971d2c6644b07581977408ef21d6f540a68d2e0a500ad0bcb730178c0f95e814cf570346c0a2dd1387ae42e9e54a7e6bbb727170b833d7684e4408ce33ae96ffa01e6e44030385787522f0a6736d6a6d4dce9ffb3d769cba41dfb8a24c75a3dd664e96960b28006828bf13916d65ef0658754562a7896724e612f9f34bfb1ecd225d8752ca78936b718ce7d5dc22e59bfa78e45ad962543063600f312caf7369033dbdcc8ba5cb00951c0a1b2e1617f020961d1fe805bf1dafedbe35059361499a571544eeadeb7614d40d4cd036b8c97716cfbc8e0ef69ad25dcb0757311d54b5b16f47108c016f91b91e89c7112cb1920a2f7d9ccf216b5d40a93226a854d763eaa2d83de97bcf3834254410161673245124b9740f884ca00330fb402386303654127e96be6e6c8585922f81227ddb4a7839788c485cddfe2d6f73428e3b2d7cb2cb80e55c32b9a96909b1f5c7bbc1c1a4031d7a454d7475010daf632dabdcb1a5376118b92c21a380114611a9fcd3850529e003e32dc034a7ca45ca0fb17c85cdc8e60d99f304b5db0d93cb0c1c27967afffbbfdcc4ede7883f4e15a2c26562f565aa583a19e306464146bb0d6940a2d1eb10013aac2bc80777edeb44d08a84d10c4184df2b355270f09410cd0433310da1151df839334c36395ac029c3ab2c2a07eec7c512de04062317732925588889d2195316c4ba54465eba4147df249085717caa8340763d1a79719292e51a841a56fdee65c89c5a1673735fe6d32f094db2feb09875eb35ac3df754e33f83223a5157fb97de7942f3282f01164a7b32ff3e52463bcb6332041cb49b8d03fcd2d413eecd74a551168ebb99c2d2e653deee0a48cdefc6e5e97df02f85586e516adfb0886ce875e452ba0c20dbf9bdcc2a884be983e0f7b56e7690af90497b6ceff63d811ae5014149beaa4142610cbc4604be03fe4454390fd82eb3bc7f0f103302f1a321f5f45bc3bee98ebc5febcf8e3968f63801a2d4ebdb98e553da4b2900ca34b3cbeb0312484b643b8f2f9a2691b95f6c8db064aac0330b167ca5c4bd241185e0511cf6753f14374fc7e792299646555ebe1e165ad65e628dd0593800bbaea55a826aa0f064fc4f7e05f3db8072995f45abd9dbdc71686243a917af4b45d809410ca732484800b495287138f435928262e3fd076f33607cf0402ec7dc86627ddb2267a729a3dc36435def6467e775ad51d74943de853cd2ccb0d9460ba503a77f57563c67e81a7931530b89a4a67c5e4646db54fa69e4e98e4359d407456401d832dfbef5e2dee9d23ecc76f71fba7723dd4c9eabab52709f08fd23cd61492139494cb9ca3b1d8791e1675cc0b66b63095c4d1697dbd404fa37b83270d5b8196cd966c2d67cb52163f50457d1f6c8b0414cbef0b9ed55df2f47ac5731a090b41f48519d4b32008221b83f0b27b289bbdd1a6afffcbc805af35c312735fb815757986a4ade614e4c4dd2a0e3bdd1c7f02939ad9ff3615490604c09270d8d13ae7c3ee40d2812abc2236d6dc3db754dc6d0071e85374e6b1828be4ec9c17d07abd578a7b75bb6911abe3820525862f8df275e62dee4431d4ec9d5420ae9813e729bb6a0e69ef4f8b032b284084f5858025717cd4171142511cd15928fabdef8d459de245496ed9113eba48ed4070783b64714fe43f0f9fe93846042c849cc33a94497839db53967ec3272ef5102bb6c92ef291031a2472c4c0cea4fb9c6a066f3d0f2d2326852e7f5e0f3f4845df921a19c4cd11b304c0d65b2ac707147c8344aca264e0039779796219153689d355f94b3639d8bad2460b43fa1c84f3e29a42cddd30fc5c3baa50e16524701b66e64778f593a3f35bafa339f281ec9e387057abb153dbfe83ec690208fe730b8c6ed803c2ca28fce5c1ec13fc8322ae7ecfa2e18ecfd94c44c85bbe00f51775f07d36569f38f028eba181feb1770210d0607526192ff5342e1929b53bdb0c37c82e0831e75927d5706573c5a4a61cf4e2761990fff4a158972c9ba3a3f4d86c43d615ab757e69487f76a8254196b6b5b69845fd8afbb27e7cd3042f074c5a9b0be7984818dda6223f10c339d0bb8faf60563ebea46657719bdc05d9f1873f45f43ffad39ab46cc9b4d3c763939c7fccac1faf9d47c0bc6fd0f36e0a47e236891023f572717c4faab8ce7369e1fb421cae75799ddff1c67c6caabf295a6fe8805a98dad882aeaa7a197bf9f45cf84b8d66e88d051f61b11bbebdc5d29a47fefc0ac3747c77a05f7ac3d1ef5d8cce618d1497b0cc88dcaeec1cedf407a7ed459dd70a8d84982ecf95144a6781711378772e15e2afed43d6e63dc0766f18bfb2df2d5f7308c0e32f2b59771f3e85de4bd5190315dc10283ba9003c97aaac70d3d449cee32a02e848263f58af17988080f03cbe936d25f0e414a191129ba756cc4cd5348acbd3b8da06a041bf917337fae2bee31153b217378571ca23ee6211407524e08bb03b787d68b3fce8e7231a71fd35717588c5dffddba2d61271ac70ece034d77420ed2c0fcc0fca2bb40e6476d34c4ab83eeabb4793313791aa98e70b7dc367946c2ee30bfaff317b8dce45fc4296c9c5d9f5a5c53f9898da0933a54e1b1f710251d22114c5dc8518e0a9915c7b7f4f6026e167a3f6e43d33f872b35844d30dd2e706619781222821ee142ce1283819d85ab5948b0b4f753bdca5f12eef6d658ee84381372285e10a68e0f55dfb4f850b345cace1a317b279282cf8d9c843e106d8964915116aec40843dcf2f42a3fca061f9dc348cee9b06b01caff6816d631532961619cfc6338fd402a967acad4a5aa3fbc8fd081fda06fb7c8f6fb310c724f8bcd9ecb7fae59fd8948f1622fb4e817ba4dcd114954fa08cdc0b86b5d34b1cfb072f187d425"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xfc01, 0x8, 0x7], "40461626628866bd3f22648c27654a7c7050b7d050d8be08281ad509e627f8a036ffc7da5a361ea2abf1e4a228e90f5b94a8f50d2e01a6c9f74b1e19321026cb567a725e3b4cff6ba5c9bb2d8ccde043be1517c4dfcbd3bb112f26b09600ea477497998d4f18e95c7ea6aa"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8000, 0x844c, 0x55d7], "ef3f871736cf65d21714890b97148d7561c87c3951724a75012f2766cfc57903c929883b588950c20531b871af4468f3f088cc9b85478c626934520e882ece482803c4968535fe1de688463ecf3106d4467391d6cfbb37466a842fbeb43ca1e64e6a2bae4a00bc81346a8b7f6a64abe4ea56c6afb3bbe65dc4834f854264f50e7f2c383a69dbb5c5fa251c14fef18a4bfec3e9786fab161f81a63308c3e225015e198fe829396c1aedffb66224a90cfe50e8dc549b366b757b3ac9ceac443945702400cef32936e5ec8ca95e4c7dd35a76f1fc23a4f540576ece810de9fa73d5142ad3e131c9e16da4c4cdf6eca798af94c7d360d6"}, {0x8, 0x88be, 0x1, {{0x7, 0x1, 0xc, 0x0, 0x1, 0x3, 0x1, 0xca}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1, 0xcf}, 0x2, {0x80000, 0x2008, 0x3, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "4c53a11ebdabe4c758ad4f51ed51c1134e0b0874299d988f9dddb573e92547468453cc84a1e3cddfc8ef311924909707d4b89fa0c25262c1196bdfc9b009ed9a4b9180ee6c4cc7e5b3a28c04d7a61885805c97868935b069594978b40fa9c8ed2412"}}}}}}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x12060000) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x200500, 0x0) unshare(0x4000a00) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x288, 0xffffffff, 0x130, 0x0, 0x0, 0x98, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0xffffff00, 'veth1\x00', 'veth0_to_team\x00', {0x7f}, {0xff}, 0x33, 0x2, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @rand_addr=0x64010102, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a0006000802110000010000180011800400040004000400060004"], 0x40}}, 0x800) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) tkill(0x0, 0x7) 5.739633304s ago: executing program 1 (id=2563): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x108, 0x0, 0x148, 0x220, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'pimreg0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x5a8c, 0xb, 0x0, 0x0, 0x0, 0x5b}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x801}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x0, "bfe1"}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="f62ff95aeb15"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xae7e, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4000, 0x47, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080001400000000208000240000000130500"], 0x80}}, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x4, 0x8000, 0x81, 0x9, 0xfffffff7, 0x0, 0x1]}) 5.243385923s ago: executing program 0 (id=2565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x40000001) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x1) syz_io_uring_setup(0x516f, &(0x7f0000000200)={0x0, 0xbd0d, 0x2, 0x3}, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000080), 0x0, 0x0) unshare(0x20000400) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0xd00}, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 4.576086214s ago: executing program 1 (id=2566): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x64000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x0, 0x0, 0xd, "501b2616b1298b16c1523f82cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r3, 0x0, 0x8000002b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r8, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7ff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4c000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(r9, 0x0, 0x0, 0x0) 4.176554555s ago: executing program 0 (id=2567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0xf75bc000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0xea60}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, 0x0) 4.026596947s ago: executing program 4 (id=2568): write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0x8000000000000d2, 0x20, 0x9, 0x20, 0x200000000a}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfec8) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0xc9ff, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.699944918s ago: executing program 4 (id=2569): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x11, 0x3, [{0x0, 0x3, 'c'}, {0x5, 0x8, "c0c0396c23b8"}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1, 0x7}, {@dev}, {@broadcast, 0x8000}, {@empty}, {@multicast1}, {@private}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev}, {@rand_addr=0x64010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d000000000000010902240001000000000900000921000000012205000905810300000000"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001e80)="a4", 0x1}], 0x1}}], 0x1, 0x1) 2.686257907s ago: executing program 0 (id=2570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000fde1000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.317805438s ago: executing program 0 (id=2571): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="980221b422406230761e375360cc790b5fd5ebf4059959bc8bc8af3384e0902a4fe02d5ad29a751b0238479ed846405aa63130c3f73a660a38c463bdb497800432872e327828c7e21b6ae0159ce77dc13e2913ff9407da49086096fed1e840d762fa46c02a632a5819a6eb69a59780c2b1a777dcc4b579292cc39fcc5196fbe29b36fa4c49d1d2f12494412ad4b480025662d2b094b4900ccb8e4f882618f50523672ead05479ae51a19d837802e1522f248c456bdf7", @ANYRES16=r1, @ANYRES32, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00'], 0x24}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r4 = socket$isdn(0x22, 0x3, 0x23) sendto$isdn(r4, &(0x7f0000000780)=ANY=[], 0x2b, 0x40400c0, &(0x7f00000001c0)={0x22, 0x1, 0xe7, 0xb5}, 0x6) socket$netlink(0x10, 0x3, 0x14) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000ff9700000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x40404c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008084) gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000000380), 0x0, 0x8) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) listen(r7, 0x80080400) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 2.005019125s ago: executing program 2 (id=2531): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 32) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) (async) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) (async) accept4$alg(r1, 0x0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)={0x0, 0x21, 0xe6, {0xe6, 0x1, "e066e4b7372a3a0d2adfec5765f14139cf756e3d91a949b6fdf87b212f01d4c3d4b20ab64b8f2be425a6de980e9613425d946d8790ea8085d63c4774db1e10a60f50fdada204eb76fdc0b5161a92b8d66ee0d868ce451df64016a58e4efd5f5ed44f639d23e74900a641b1e2140badc84ba8fa86719828c1417aac95b40c0de4df9158f6ffe87f884590892955d2e6c396a28d75601e402ebad33640fa70fcd49516128daa2766d9077bbe135c55ca2a520e932fe261e59c6683d8f07f357abd2b619e1afe8e0c207e11cdfe5fd8a20f0616134ef9c19f3d8f657a4191343c4e041593a6"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000180)={0x40, 0xa, 0x8, "2651a930d670b83e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x81}}) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000740)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) close(r2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000500)={0x0, 0x0, 0x53, "658e5d3789468b571ee2f48eee8ba2dc120567e74b12c8ae0e5da4d3844813d8eb99df9476704199ff812fcbc40b31e1530c35ef178f2ad10550209d947055d443522f8c5df5c66f8efea50dd3932e2985e06b"}, 0x0, 0x0, 0x0, 0x0}) 2.003471855s ago: executing program 3 (id=2572): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x40000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x42, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_usb_connect$cdc_ecm(0x2, 0x4d, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) fcntl$getown(0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.freeze\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) mkdir(&(0x7f00000000c0)='./control/file0\x00', 0x110) open(&(0x7f0000000080)='./control/file0\x00', 0x4001, 0x2) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000ffe00000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="da"], 0x20}}, 0x0) 1.740255515s ago: executing program 4 (id=2573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000001900000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff020400000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 1.589749159s ago: executing program 4 (id=2574): syz_open_dev$video(&(0x7f0000000140), 0x5, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='i=Ov:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff') r1 = inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xb4000000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_complete(0x0) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f6cbd026fbfca0000003b00070100820975fc000000027c000004"], 0x2c}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1000000000000166, 0x0, 0x0) r7 = dup(r3) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0xe, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000dc0)="66900f30c4c2792e9b00800000440f20c0350b000000440f22c04e0fc7a91deb000046edb9800000c00f3235004000000f3066baf80cb840aacd89ef66bafc0cb81c4db2e0efc40165f38202000000410f01cb", 0x53}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x90c42, 0x0) 1.339096687s ago: executing program 0 (id=2575): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a00100000004000000060ec97000fc83c00fe8000000000000000000000010000aaff02000000000000000000000000000111"], 0xffe) 1.26982971s ago: executing program 1 (id=2576): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x400000000000000}, 0x0) 1.081187478s ago: executing program 3 (id=2577): r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) bind(r0, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000001800)={&(0x7f00000000c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="48b15c5ed4c9115b486c123233ba791c2f065631d5cde45097b6bef427e05a2063661da159faf01d4de06d07d26eb4ed882c578cdad2b47841a255d4c198b8b58cde6c5a7b377908da6e88f4da047b044c8d1a1e3a977f1657d7dda836c4205afb6473afb6b86bb58b8b729992aa128780f3b0b0a34d0eff17efe0e7e46c110f9a9fb0ccea6ba733a6fc5386a6d1b47062074add748ed9f25accd612a32b5f1a3948ecfbad8cae60cd81505ae4e2cf4bd33420c589", 0xb5}, {&(0x7f0000001200)="70894f8a2c8b1a59b21228bfa5ff27d82125104f125317087b745cb3403120e402bca453b9501ac8456f34857f1b452ad2745ca7cf229b469563c9e4f0961ff379804945e89f8fa924074fe070b7ff892acbf2f13b4ee170bce6", 0x5a}, {&(0x7f0000001280)="0da8e6712fa4b3fe8a1bee96baa9a9c78a92fc4bda06a7bd18003aa1b511a40d2b49682c268cf5d8366b813009e720bb6e5d3592e399735f8ae91ce8d1dc25b66142a2b5be8573521da5ae85690e32fc437a8741f595515bc5cc9d3cf87267f75010b812d704e296e922d1442e8bb4662d11055a2db4a24c5cbc37b7e861c061323b8debde5acc093a464c6ad1ca97b634d80bf6d4ce28bb18af50d0178f5128ea9f091b1ff1c15303e745852e145e6859fc3b037dd98ededf94ccc8d32d33ec48f33cef2597ca3038279995a390a3bdac955354bf2a35d006265fc0", 0xdc}], 0x4, &(0x7f00000013c0)=[{0xc8, 0x101, 0x4, "774e5138da91d432aeb58a6d9c9d268eeb94d5f856fad4568d514ba43cb062ba946b0b0a82f2bea3a0ea1b7e7b07adae80ff5341ced185b08f3f848d150793febe5698e707e3b946691dd2f13e03a3d7d7cae0a06b5c651afdf37f878cc19dfd4031cd4530b1efc7bd8b0fc8f0b92ecb3ad5b4dc9be400e094123d00eabd31b6e630045a9acb62e76d5d987fdfd6504bd6abfe9bbb65871aa553a7af02763a041149162442dcf8db3b15fc73d335d0853f92da84"}, {0xc0, 0x113, 0x5f94, "b443c6450a94a02b948db9846b658a683835deb8ac7658142ae465bdfaf0ee2f6c789f189f937c9a3842ac3d9ce5a88aa0df810531969fef202ad2ce612f205fa8aca83ae133111e4999e7c10b37ff4b8372fe64138a8c1f3edaf8c82840e89da6feb8fbfafb2faf775bf44f047ac20fdf68bec224de87a2a7c0d23457c776c66e88c64dedcada62b4e034e4292e4553ba62ccf77ad839e29d1c3626a33281fcd23080db1464a428bf7178"}, {0xd0, 0x10c, 0x4, "98ad2ebbb47bef434abad0905e86626f92dcdfec43a7a8d532f187e516fea8f7ab4f9a842574b70cbccc06b4e5bb77d4e44f3837402362012320fa1af24af83e3a7ef1d382e725537633c5fce8b6ec48a9bd8c257824d8cab979b0a326abbe961a4cb202996f4f6d8e37ce97c3ea45e5be7bb342df86b11ab628a617ce38014bda216879930fb578e231125b6a76373909a295c4ee528de71080f07737fed125813c2c3e3b5b3bc4f37c857a98d066be10c5909d1868d7a8bd0db070d431"}, {0x28, 0x104, 0x10001, "57b2700b7b6fb932dc62d1f5a23b7d273673fc"}, {0xa8, 0x4, 0x5, "f4a02a288ec44f39b95cb58ec756f4282a5432a1b6efcdfb21db82a4ea79079a0e24af5f83c9ad36bb299ec4490d125e300b12fed2606c014b3aa693898a6fedf9b8ee60c9228bc228188fe486ada620422091d2d8cebfc302c05f4155ee3f4aa339c0fcc68db9c43b16f08d4ce8a197cdb6ccdcbbfa8c1035568fb0ea7d0a3ef20ea50478e532e170c09a4439356a5329715f8b11"}, {0xf0, 0x114, 0x100000, "86ef1edb4cc8e03ab7750b964b6fa56e843a856941f33f695abb35343e7d0965c5acd1baf7c0c6a04f5bb4ba59507ddc1625f07502d662c796ec7a2910ecd138c1887061814cc3092fb6b33733753d110ea9520634a056d25bddcfe31c37be7f0f5dddbdd75213d398ed01098afa082ab747cc9e4702e29d9d2c6e55ad24244f61512d4bc14a255545b3cae2c55d320237022a897f6b12f0148bb895d9ac1dd6ed608640a1e67469ebe643ec3be573912842673fc2e9cc4b10e058dd27fb568535fa9740388c123ecd3e6d09a55662d16e2b814135b47f60aa5ddc46"}], 0x418}, 0xb5a3cbfa64c5eb9b) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000001840)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000018c0)=[0xf, 0x7]) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001900), 0x28000, 0x0) sendmsg$nl_route(r3, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)=@ipmr_delroute={0x2c, 0x19, 0x918, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x14, 0x80, 0xfe, 0x1, 0xfd, 0x8, 0x3800}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_NH_ID={0x8, 0x1e, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r5, &(0x7f0000001a80), 0x0, 0x2, &(0x7f0000001ac0)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000002080)={@mcast2, 0x0}, &(0x7f00000020c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002180)={'ip6tnl0\x00', &(0x7f0000002100)={'ip6tnl0\x00', 0x0, 0x4, 0x81, 0xf6, 0x5, 0x70, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x20, 0x700, 0x7fff, 0x1}}) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000003100)={@mcast2, 0x0}, &(0x7f0000003140)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003cc0)={'syztnl1\x00', &(0x7f0000003c40)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x6, 0x4a6, 0x3e, @local, @empty, 0x20, 0x8000, 0x9, 0x8}}) sendmmsg$inet(r4, &(0x7f0000003d80)=[{{&(0x7f0000001b40)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001b80)="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", 0xfc}, {&(0x7f0000001c80)="de87685469f3290c654acc3dc37ec158230e4f66d0634d49e8940afa9ca249c98ffed84a8556f7e2a20153fe8deb56eca8ff0a39425bf3190ab3cc91cac5bdbb987885d3d8a7cd0bbb37208011b329663b5b3a0d067f9c4604fe4dab4fb365d1283e6e29a6b3f31f8539a896b69aa15129576749be7d27ae109f6bac8594dfb3517fa14042335f1d", 0x88}, {&(0x7f0000001d40)="49355e18c9bfe7a8dff98d3c259445a20643e1369cc8f2920ded82e4608f9910049a9af820da07348b84557d7d5e20922699a6b2b99bab81d67e8f6dd8c06603e4539cfa53de4cdb2b441a3b82055f71078002c8745b233d484ec2ee1108497060f6545fe73b816460346b8365ed8b03f60fc9d191f94e7b678925c343d40e4051106fa5e26eb0d9d1f2cf2f174d32360151287a407ac99f66b1cf18c06e93f0740cedb993060e15c0ccf72fd8bdb29d73eb1f8c4f0b475a1da118dcfb9438aa07b691581fcea82eae1b1eb0e5d5c2f975b7ea6b25c58da0e5c576ba137a113a68b4785cef4087dd80344d7081e15b832caee159d51152b96a5fb08c85f5", 0xfe}, {&(0x7f0000001e40)="2908a145fa5718dc04a998336dc0c52f3167e6f4a322904b351797fe2998d9ad2de1516a817161756d0320334f31b1ad9c452bd30bbc7ac3980d9c1f935ce2dea1c651d97505c89a0586ec616baf259f5c59eac7a54fc8f6721d77cad6df92f2408eb1fc0d870560d1cf5573fd5b6b5ceeece838c7efe8c6640d2c6dbcbb5a41d7cdb18dfae090078c00d3f39b5e38db48f3162d175eb2e1ee", 0x99}, {&(0x7f0000001f00)="41a00dcb886cc1161670cb0c4de0ea05f0134ea9bbdb1524f0172619aa58f402c2c379826076fa302bc782e29e5d9b81295fc8f371271a36a737fd97a2452b152fa200bdf479428f3414f4704912c0a2a7840cd60afe42ecee19d162d62b3012823559111705cd02d41c8cfcc652c99738c1fd395fe7c33abd7f2bf184d2b4546b8d41d6e35bce2250de2f97cbd15e9bfc7744296092b37aa9ef9b08286122a56cf8c768473e96552b72063841c0bbacbeff086773817aa35817450bce64a49b4069f95afd7522a9af4d2ec283ae420c0f79e5d6d4762b79ef9f95f2e2b630", 0xdf}], 0x5, &(0x7f00000021c0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0x27, 0x90, [@rand_addr=0x64010102, @loopback, @multicast1, @local, @empty, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @multicast2, @rand_addr=0x64010100]}, @end, @ssrr={0x89, 0x2b, 0xf9, [@private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0x8, 0x8b, 0x0, 0x5, [0x80000000]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x32, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback]}, @ssrr={0x89, 0x1f, 0xe1, [@local, @multicast1, @multicast1, @loopback, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp={0x44, 0x8, 0xc5, 0x0, 0x5, [0x7]}, @cipso={0x86, 0x22, 0x3, [{0x2, 0x11, "018670cf5698e20400f0257649a013"}, {0x5, 0xb, "45b1192e99326f14c6"}]}, @end, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x10, 0x0, 0x7, [0xffffffff, 0x8000, 0x4, 0x9, 0x0, 0xffff0000]}, @timestamp_addr={0x44, 0x2c, 0x8d, 0x1, 0x2, [{@broadcast, 0x7}, {@multicast1, 0xcd7}, {@multicast2, 0xee}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@multicast1, 0x10}]}, @generic={0x89, 0xd, "cb794321e89a61f7b5d1b1"}, @timestamp={0x44, 0x18, 0x40, 0x0, 0x1, [0xa, 0x4, 0x6, 0x0, 0x7fff]}, @noop, @lsrr={0x83, 0xb, 0x8, [@empty, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @local}}}], 0x1c8}}, {{&(0x7f00000023c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002400)="35dcbb13", 0x4}, {&(0x7f0000002440)="20391e9bad3dd93c14070bba3973046cab577f049a34a87a5e48f83c8e3a329740190abcfcb0bfb64a3fa99486bbfc38bef23d28c97fdcef1bdc4af97f8b1e45b4e570afdc1154bc3d126fbc1472915d21ff40f052bfe4ff7ba0c5c024e53eaf05791db525b6c83ecfb72a90d7d87ca4b1b432968d6ac7ef3bc31e5327d0d8193a2c21b4e16d713a51e470d52ed3ceeba2e9b3924dcf6806672bc03687234b9f6edafd5e2457d2d1b0882da676e971444cff737085e29e32e1d0f0ec17fe60f746050f35603cca33af20c53170216d72abd4f3d167a3969dca0623b6aa67f0e6eb1a1163e1", 0xe5}, {&(0x7f0000002540)="462860a1110c56afd6461da9479d546fa24e8a1fcb69ebdcd017e77eeeb52247b6cba9d82c06e2c14cb94b7ba046689b207dcdd7fad3d7de8758c424edc14660a03ff5e48ca33d289a2999207ab7ad0ad90558284f45cd76f1bf102599f70297297ed89dfb9748b3c9102ab32e1bb0391d48feb4fffd6ea6d016208fc2f8a7017ec88f6affd97027d4b5686c6fe419fa2523416b1ff3b5e4564c2fd07e95fb1decfbc6f263d58be5f58f69f07c25673db394065870", 0xb5}, {&(0x7f0000002600)="bd5388cce87ffb27adedfced5a67edd2c9d59d3fe2640bc6aa990b8ec8946d689454c624ae27eb5a5db55091b829d6eba86b7cccce3877a51a9dce8f10f4f2faaef5bc20e8889b08a0a8bbcc5b0b74f7b413a76f1ceeafd999f09a6e74fb53513681ab560448dad08745364f53ad0ca38e36955a9555ae3b7a054f9dfe8e7eff2a07bceb", 0x84}, {&(0x7f00000026c0)="ee2b273871d2d2380d163d02a80d004aeccc40c9926be6e0a240438011fea0b9e8eb51ebe3ae44479fac567f2d15719906cd0639eb35077c69ede8abd7f10857c44128023828036a1afd4f1abac36b72054a77041da53171b041de71651d2e9a6339ceb8c7261b2c73d69475f84f5b8517f936f4467e811b40cb653e4601d1e1a44f23511acb01eded83fe44da8bcd7e77c872ae21d39917f24ce78ac3f6aba3db7dd529e26744381f1dc6eb538f7516271d7c09786291431118c91f5e3a3f72c889", 0xc2}, {&(0x7f00000027c0)="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", 0xfd}, {&(0x7f00000028c0)="4eed7738a081b99c83a17c265d90e3e38d2f639de96b2e7188eb793df0314e39abdd7975b86ff25530d1b56af86d565fa5c54fd4f417cea15825fcd871f10aeb7724a04cbe266a3a2e0f04a3fb2ad047b4b266b0208f3dc2ad29b8ba36b01b39ed4dba6d37cf97bed21bc94f81", 0x6d}], 0x7, &(0x7f00000029c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x60}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x50}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002a40)="e148cf9f7a80d2cf450df83075698108c6f698530ed1c778a1859a505aebfe8bd5b324c55475a54c55943e74b313cf808858c0b5cfbd09f75a3022ccfbcd0a75b9774c27f08700548354a50d1d5e517245371973447482e06cf301ca191971284273df97b686676402900023e145e6c56ea28c3a162aedef692e429edfc7bb6d6546cc49aeaaaee57b1ce79b2d46b93e066241b09e5221d3c2cfc55c4332e800d4ad33402250bda3dee46d9bdf6b5d176f4c1a547b696c7cba35b816de84a57aa0d88e2d6f28332695", 0xc9}, {&(0x7f0000002b40)="a8992d143c2ced1b15f30be0992f8b1fa9", 0x11}], 0x2, &(0x7f0000002bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x80, 0x0, 0x7, {[@generic={0x83, 0x5, "4deed0"}, @timestamp_addr={0x44, 0x44, 0x70, 0x1, 0x3, [{@multicast1, 0x3}, {@local, 0xffffff26}, {@rand_addr=0x64010101, 0x8}, {@multicast1, 0xbb8}, {@loopback, 0x7}, {@remote, 0xffffffff}, {@multicast2, 0x9978}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x80000001}]}, @ssrr={0x89, 0x27, 0x8a, [@rand_addr=0x64010100, @rand_addr=0x64010100, @empty, @private=0xa010102, @multicast1, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0xf8}}, {{&(0x7f0000002cc0)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf6e0}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x94, 0x4, "5af4"}, @lsrr={0x83, 0xb, 0x5a, [@local, @rand_addr=0x64010102]}]}}}, @ip_retopts={{0x12c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x99, 0x1, 0x2, [{@broadcast, 0x8}, {@empty, 0x1a}, {@remote, 0xffff514b}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xe}, {@local, 0xcb}, {@rand_addr=0x64010102, 0x1}]}, @ssrr={0x89, 0xb, 0x7d, [@broadcast, @dev={0xac, 0x14, 0x14, 0x24}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x2, [{@local, 0x1}, {@rand_addr=0x64010100, 0x3}, {@loopback, 0x5}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}, @rr={0x7, 0x1f, 0xe4, [@rand_addr=0x64010101, @empty, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x5a, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@remote, 0x9e21}, {@rand_addr=0x64010102, 0x8}]}, @rr={0x7, 0x1f, 0xfa, [@local, @rand_addr=0x64010100, @multicast1, @multicast1, @rand_addr=0x64010101, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x4, 0x31}, @timestamp_prespec={0x44, 0x34, 0x30, 0x3, 0x4, [{@multicast1, 0x38}, {@private=0xa010100, 0x6}, {@local, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x8}, {@local, 0x80000001}]}, @timestamp={0x44, 0x1c, 0x97, 0x0, 0x6, [0x10, 0x7b, 0x4, 0x7, 0x3, 0x9]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb1, [@broadcast, @loopback, @multicast1, @local]}, @cipso={0x86, 0x5e, 0x3, [{0x2, 0x6, "cd074a63"}, {0x5, 0x9, "563b06dc99f2b3"}, {0x6, 0xb, "3abe8737a24bc2f226"}, {0x1, 0x9, "2289bb0499c763"}, {0x2, 0x8, "be4375673325"}, {0x2, 0xa, "49f6c2220d44c547"}, {0x0, 0x11, "e1c295bb8c3266fc70066f49032bf8"}, {0x6, 0x3, "a7"}, {0x7, 0x2}, {0x1, 0xd, "0f2f9b1b6809f3a63d8889"}]}, @ssrr={0x89, 0xb, 0x2a, [@broadcast, @local]}]}}}], 0x240}}, {{&(0x7f0000002f80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000002fc0)="835effaff87d37950e6826ef230a802ff3f2bdd727496c44a0bbe0019268dd0e58c27a809487e6ad552220ed5c644ba98ed33473226d4edd4c226046278cc4a769c878a2120ce60fbc93e1d74307ded9e03ae2490806c198affad017fe6f33febe36bf5c79367d878e5f0f3581adafc5f09413d4c7907e7a2e17c404fcd767ee75727c6921f8d4bfd2c4e6d5faaecf0f30b861406ac9916527bd642baadd0d1a603bfd4e3a0924d64f4d4e7addf52df734f9daa6af1992f3df41b4cab1d38a954b428b81750bc50ede255fe6815335d3e4f8b0dee5713b740b8ba406", 0xdc}], 0x1, &(0x7f0000003180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x98}}, {{&(0x7f0000003240)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000003800)=[{&(0x7f0000003280)="ebbd8420ac5348e069376b740d01db530ce29f3b1660407e057fdd604ca940ba6aa086f0756280dcb78f8ed4188d4d9cb9899fc2afbc4f2dea1d427f04171fc09153390af3c1867b2514fa3cf1c6a2b54cf3212b8e55fe8ab00f0eb1f079f97e321c9189ab9b361c9e54d0c9fbbccc36682e3e155275", 0x76}, {&(0x7f0000003300)="103d7e5d855b469e46fe694aba0904999d2350132a6fffb88667a54e6fffb73fa1cc3c8a99f11b077d0e491c82e4d7446732a0237e4513f9b875be8fe8917742a946222cac0beac4ba3d9dae6ebec954fa9c95f8a923340d11ec967f9d6aae43ea2087e2d85a69e10795ef696fd5befc38c10edbf4091b69d295aa75fcf024f1c1d93b8d2f474aeb209ee3f017af78500e15f049a9c0b878fbc26dd09a090190a7c2f974dbad586ee3c3cf1e596c7d42a0244539ef256f66437c094e7512795aef249d3c3e7c71a63ab893b56d9377775662e23ae419", 0xd6}, {&(0x7f0000003400)="6292cc6e421a030cc2505e11b4ff19989daffec3c820f7feed5ad451c0210bf6c3fb51233d492884638c5ddc940f3d47081f5034bf11dd97a8ed782d9d59b5d245bca00916833a1624b1b02260f0ac674b57396144c747be1bfb544f9deef26f6b83bc99eb06cf182604640a5440c2", 0x6f}, {&(0x7f0000003480)="77f029fb41d40e6ee091d7b6c8d1d59dd9abbcf8d379d0ebe3462300293b08218f5a4319c7d6de00c997a20b3d6c9de132f4f14bc9c1469f343bda8b6e9fa57aa225dbd5952d35e4c73135be12229be62f78d7deb51e34751cbb95c3614933312311bbbed24fa8d8be2230828761dc2c3593537945efa9567023776a5d4a4ed8fd7bd3bd6b3050367bce21dd1fd31ca0a712559999c0638219345b056ead8f0ee6154fab526e", 0xa6}, {&(0x7f0000003540)="3a64c1e2b9d3b4103e42cda0d55f3904140b2ac191e6395ed100f5d8b7587b19aa784e99dc09b8db9f62a92f2016ad0597ee2fadefdd387e26843c973552157752d8ade4ce92daac37ebf4d7556f0c754ecd", 0x52}, {&(0x7f00000035c0)="f8161ff3b58a5ba0e221c13140bc6f00de1a1c80c7000c7e536cf43bd876fdc63b1f57e2af5595f6cae4165246db8691e056918f1183bb94126899bab2aa894bb5ba6317cc35b2fb626a1e794ed443e45d3462339d1e7fdc4f6291d21cfa7850bf4955ed412bd852b42d1e3ff0a3d44ddfb3cf8dbfffa9f3d78bb0198b118a1d51459b0b", 0x84}, {&(0x7f0000003680)="06fd844a7a3fe13df3f4c3d5eea0c47e456bde65c2190dfebeb60cb7568aa6a8aeb0ad2cdaedd400301a60a9ef17df521468f5abff92d3a5a588f10e7cbc846ec41a99292984716e3d9b35ae704b5be4fd5494ba961b1f885270bf256f16d900910351921e48179e1081aaa7c04187495986b1272c51f145817e909e7558e3f3c4b0435d356fd9c6ce804a3a5c3cde0ebe2c40fe56407d0478202e4fdb91a597b56ccb9992958d494282db296e65ea6cbaa8", 0xb2}, {&(0x7f0000003740)="42f343d1e819b8d5565941d69067b837a9a51af4ce71534f1d9c4ed900c77472ba119d0b8bd4248c2fdff38e4b2ff46989e4cb4eee99f411e515a5a93e9773413f19dedd6f6f0d13a787d587f4a0225324c97d28fe833a8c561b11f9a632c02405ad80e26e96e9b0c335f2b42a32109b812c2f99a5e584", 0x77}, {&(0x7f00000037c0)="c5dd23cc69c19d4e1d34623d7165ade92ffbec2718dc821a3481d1be8461f50174171a8bbca094e2bcbc1699b1812db78c3533cf63db743bf2a4f217d17b08af", 0x40}], 0x9}}, {{&(0x7f00000038c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000003900)="8bed33ab18368ecfe043f8b952fdb4586960306bac08de1c3b521595673a46eb77a4d95a0e30fbceb185c0c6ae62716287c1437d267b0102adabfd1fbfcf20cddf2427c2d6ac9551a3ca2dafb0e305b58607b32a120bed6509d9783c31fbc2f8b42f2a127c26a754ec8c3c5e46fa3f6bccdf86ab066d467ca3677b0c708d54eaba1dc5aabf3400fe1e96631ce8f08d5bd4fead1433e2629a06c208177463c4ac0ef94992dd17d0ca86cf43114217bb052c96f97cefe2fad2c6ba0e93790a420c5965729cfde732cb316457dd07869c40a4ed0c3785c66dc9d6b1a808729c6405fb81d1d6b17feb875146ac", 0xeb}, {&(0x7f0000003a00)="99927de972f9a8b1a96d5c22b15e4a1140f773", 0x13}, {&(0x7f0000003a40)="df8fc757d6d6bea85fbfd5d87e5f92d93309440a8b65b1bdd3eb26dddddbce6e07e2b74f67963712e9fcf4dd06972d2bcacd566ae58a8651c900f590ab9f5f53ffd022c14435f457a571f74c1fd169a940674a0aa987bdf25ff4413b245fcd82aa5d454aa1e7e8376971f918383133a232aa7583e59224f1ca1193d1005929c82ee296b4e18ed435b4eb94cc2dad619793d8ecd55578d739ac4fa8c5047a18a2e2a536b1b8a210e1173bd737661f96551db23b5dfa65c2d15c720b258e1161486a88d70cb8dc60b7d1117e844b72434f0b6df44573b839ded1a7a9f0656d6b34360801f91ff1c3", 0xe7}, {&(0x7f0000003b40)="5c890aa902b44448689b4b863961262b243513a9180c9f8e3638a29de78e82177a0294c1df584a1c002c05c005ba9486d7b15a999314aaf28ea6008ddac8d75ea8c772bf978a84a093387d1e226c46b95fd0514289d21ee19fd2739524ea65e686e2b462648e716790182dd72cbe807e5d833a537c81dfcf362a4da24010ef134caa9c54cb7a8a8979819db77c4f71b05c71bd128c41d32d792709a658d2543c741b9243", 0xa4}], 0x4, &(0x7f0000003d00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x97c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @multicast2}}}, @ip_ttl={{0x14}}], 0x50}}], 0x7, 0x0) connect(r5, &(0x7f0000003f40)=@generic={0x25, "0d2507ef9961fdf2b0306199c424d367065ddd407ce832905c9d0d4031c77b9f67d119db17bb6458a8954c653c64a4494496490a6f28e47f291a1a80df4bdcb9c43c3284c84ffbf425f46ffca6ddf9a4d84a431d38be67efec7f8b7d5656dbe2cd2cb08b24d9c290ff5f14fb16f129856ac3d25c42d8e017d4ca654b668d"}, 0x80) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000003fc0)={0x8f, 0x0, 0x4}) socket$inet6_mptcp(0xa, 0x1, 0x106) statx(r3, &(0x7f0000004040)='./file0\x00', 0x4000, 0x800, &(0x7f0000004080)) timer_create(0x0, &(0x7f0000004180)={0x0, 0xf, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000041c0)=0x0) timer_settime(r10, 0x1, &(0x7f0000004200)={{0x0, 0x3938700}}, &(0x7f0000004240)) r11 = io_uring_setup(0x48e6, &(0x7f0000004280)={0x0, 0x9d07, 0x4, 0x3, 0x270, 0x0, r3}) io_uring_enter(r11, 0xb0d, 0xfdf5, 0x12, &(0x7f0000004300), 0x8) truncate(&(0x7f0000004340)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000004380)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) sendmsg$kcm(r12, &(0x7f00000046c0)={&(0x7f00000043c0)=@can={0x1d, r6}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004440)="d77a5d08582c80831f80083db1801e00a713b7d262805c2cc2dbdd7fd5b98177576d659ac908897d5a14c6d80174b863a3c2daf90f47b07e4adc07913618529313e07cca8f7a0021087e221a2f91c6c5b7db7071754ee37d563aecd906ff8145b33c2d3274a6f0c09d3263344e8dd48c8a0ee5faa6681148bd2b241f992f5c4319362b91cb5b0cd420950b419442194ec223ae286e51ea8164aed974b6489e32c0eb09ceb868103e6aa9b49fc5e3cd015e534fb8422c48c2892bc3f0a36276030334032376f5e06dacd9c07521b7f3a2ca3c4d3bab4b1079186172114850f520c501e745d9d1a619468fbdef5d7e2383e5b72d73", 0xf4}], 0x1, &(0x7f0000004580)=[{0x30, 0x111, 0x6, "54c2f06a87f1a4e2c4422487aaf031e8467603e652d159cd63"}, {0x20, 0x112, 0x8, "293d62295972660159974980d7"}, {0xc0, 0x10b, 0xff, "e28c8c2d080d408772509cbca1eb312a95cae18b34b3c697af36f2b7de9f890b580c1bfc0be06c934f943d7b06d97a0cdb17dfbb3ab98b1f9d358bfcecba564ffbb447f4d3c1bced1226ac7b21e8146886ea696ba7518afea88d3ab20be058a77b4b61b85fdf881b9737ee2a158a495678d45242415c81f2c06017f4cfed02e9218e9a0b7ec72c62fab7616be3bdcb63b0b7a463f822872b35580dc33c6a871b3b90450bccaf66831b91bccf81aca7d3"}], 0x110}, 0x20004000) 760.038638ms ago: executing program 0 (id=2578): syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="53a67efdacfa4ab18431c9e24e323439a70a20d97410e9559f832ff32ebd21a0941f33f17da9ff837ce52508d87c9b15a4b658786ceb5c8b2bd173b3d95b1627c1c8cae65161a267eb7b93f4817960ba8d04a85c286132bef8cde53ff22a21c34fcb3734d37b4afb868eddfcf0125c5ae73db565db7cc224d28bab43f099d1e2e19353ca0513073fd2f4b451ebd390", 0x8f}, {&(0x7f0000000200)="690b8626f162df6fb6d7c4da14db33eb50317a56f1dec2ce32d22d06a4d28e29a2a24a4c6db342d3339ed5737a4281bf50bd1722eb3d0acf2242d72b59787800d4116347579ec969c7ede250c30c4f576a548e92938431ceb310d47ad8b16303c17007a2b98d336610e5a66256b606b877ca3d0c1e714ff0f29526be5bfa6b329203d9a02e82b3b8e6b09f73bed3f531f4c1850980747c0ccaa4f9dffd9cddefe22a263d2d8fd88555e7e75eb4d206", 0xaf}, {&(0x7f00000002c0)}], 0x3, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1e}}}}], 0x40}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="ca4501faa0ec43f67d1e550a5980cd54754cd82842f19b4728b2355a382130cfd085aa1fc85288f22a", 0x29}], 0x1, &(0x7f0000000500)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20000001) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000640)="f8e8e51d7f803a6bd2b4e55e231c811c19b932236a323d281ae3a65b71be6e6430ac211090dbd00f39719e8623130856184254535a03d816726b76aa7727d53e086acc4dc55e", 0x46}, {&(0x7f00000006c0)="c2b5bd6aa7484c9ef62e676a46f229a2f55edda386186ff22370f9994d052c7e1baf723dba5c5a6b40f74cf74b8034abeda3912eb2618b8bb29a8cfb0a592ea0eca8788dcb557b52e104972d2fd64ecf39076291558d8627ee442e2aebaa25a013e3c84e8aad411e19f6945b7b916904f3152044ac5446ace16777dddde21638706208a11fb4d2324eb805cdb90bd7d70ab10134b72b4972df7bf8bb1bfdd006f95cde08bbb7ebb031502e8ece7081ba2bc51d9416494127091252785f1f4e29ba2b5c0e650185c2ae99adc94042ce10bd552aba75bd2805c186d20bbcaf82797d6eb722762f6dd5e8aa66ba74d1146498904929cac1", 0xf6}, {&(0x7f0000000580)="c7e07dcdc1bdab23bf3ce823da90ff317aedeff7bbf8d54fd8f554b1ee4f656dc59123", 0x23}, {&(0x7f00000007c0)="99e52560b62b1eeb7c6f6eca3311572c50f996894ecfc6d702b0cd846857131a4b744c840f17ce4ca2f149a740bdd35e5d9e3ce6dd3c28370f1921c519d76913ccde336d3e41c45410e6ea27705e0d1604e9a257681e3d25c041f1c25dc14841b64b3804e5ac741f4f106e5e4c9a4440cf762d30dcb750ed089ccf33368281b8b8feff8993222b0b0d25b20c569b41f1c3bfbfe2254b", 0x96}, {&(0x7f0000000880)="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", 0x1000}], 0x5}}, {{&(0x7f0000001900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x3, {0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001980)="417b79768f5eb61dac4ece7bb5b53f6012e18d5ac2f01d772e882fa8033801832f9b9a933ff7d8fec97dca39535a5dac68feae5e2d3d32a399252b07fa858c9e1212738a3ed0b02e0e54338ec35906951bb3e45bd9bb24e65a975eda856ffeee6d6ed46ba6c6dc2f403bbf3cd06775aba7679e17725e22926895b44c77f6efe0c84fc1421341d0cb8bb117472a1a98ef42", 0x91}, {&(0x7f0000001a40)="29780e9dfc08c322a3b883a31baac81e31c7bdbdac302365298bee0a15593b5c1004bc9a66f6bfa1bb46ba317c4550e653830df1c83eb3633a026f91da4459452f5745673eafe5ebe877626f3ab85968bc102c17c14295301d33f02c705714a469b84976a29818583741b9d4266d4d92345a8d56ba785047e8d35cb3267bfbea5f422a54c7111db5160114e9e37bb9088c22319dde5c061f419da9c3fea16df998bf70a055782863a9a7efa8b8034c4240e0686db37b9d36d3fb594ec59c", 0xbe}, {&(0x7f0000001b00)="4df232a436e30ed502d7c9c9203f31aa6ee5850ac027b3ee258fd33e5345945f4030fe49babae2086d6b1f25e41aceb6dc1182ea0afd72d5313d8ab50ee3c5faf1fe7333c33e58dca5dff3908886978b8ad80ac4fe08db5bca6ef4d5a0", 0x5d}, {&(0x7f0000001b80)="7ea46826879d6a6c4c5ec0be58cfd4ae1a5d62ef7ca8f4350f197b27211364470a2965cab214de759c21e9a94bf16d68fb9f067cf0f0a5ceb1a7c574853e8ae2d8cfd190e1a2b54a13079495a8dcbe670a1d7285e0860a50fef03f1c100fefa0166b2d8ba1cd032fc892dcf644c3a4dd769f218a0b0fa94982e0ab63b3b7a900944c8f087edd79f797a2945a944d47dae50a5d5ac9e17c00f5b416f71649bf", 0x9f}, {&(0x7f0000001c40)="c41971564905e48d9bca3e12261d146a9f8172b298c41463eaab567a0121c7e6140d3a692becf0a9bf6fd9e6858b373efa7c13f30d3c651ad41ed343480ce980aaa71512f8f862d0509d28982195ab1f0dc8675102b2e23afba674e46052b07133a123d88d4a5ab9dc62a90b93f67caee5a4e5c46dd1e2f706275c6f4133d0adc5f8a4c820eb24efe1cbe86427a617d5b517e1fa3ff90d8c6455650a1be577999c0f4012935e5255c3703ca47051a0967c02b346cb41391e1dedd004ecc224a58469458142500a306c846cf66372ad08336b3f0407069f596c20508af3fb23deddd06ff7f821abf11b64bd1c74b92dac0ed19eaefbade8c312ec6e38b7ff245cadf6732219bebac9da8345a87d1a299c583d6ab93e1c6197b416c5287268476931b09e27c89ad9fe4665655f07245365c4701459aac895b3a760dcd27f44fcd89372a5769cb52b0dd2d76a16832875563325454be6f352b195ec33e7f66e88ddc344ab7527048aac031be6a58fcf38357cf3c9d6c6b2da2ef72fa83d6ad3277af79f5ec8ccda3d021ceb422b251d445397d0f6179e5229afa4efaeae5e18a48b0878553ad6e5d8011ceddcfc96a6be815d9b171b6e5dcc462a635d6d43eff608bc049f1eb218a0f9dc75bca5b30720879500113ab6516a86578e98d13e6d9c13d2e5801d7aa4278902b812bdf3ee9b2a5bcec115c6aac87165a1a247fe4c89ff3def7453f80eb57c59bbc82ca0c11d97e28d7d7d7318aef9e5ea93344994855627f90a6ee806af3e8ef8da6a06e90869f33dc048704b7b8461fa1d0e5f9b70e26d424d8e51416a290d3cae24ad654f5a325d54217792694205e92129b2cac53970a57b8e50ca81ed7bd4ff5a050bd8285e36f6443a3c6774575a96e8c757b54c43b65df4c2b75c999dd1162dc9a21221f70a936c0432f51120f02f8a370f9eeefbace2ee100122794ccd88d0440938b25470ca57edb91fd3a891d13d4f4618f1238073a566c916a9a9d36ef063c09ddcaca2c80cf0950fa62139e5fed884b4e67f39c93125da404b5240f2bf775642512ab4e0c01688318cde68c22ea36b8737399be0557318ff8be1a24512999ee20501f1354094322cd26a2abfb4efc466a100270ebfce7d481a7e52e1f6a7f79cb8c266fe127487601c5fde83cd662ac8e53a6334b8691c3c96e81e1691c78d477eb40bf0483b39057d157b756524d1c1fd51a67f6edf315b44c54a929e43dc661e77da5eb9abb262350441fd72c34d750ad8fd5ebfdf133aaedabcb99d0c1abc7abd571008bc586a03fa7aa39672c67ba6949c802f223040c8e98b07b3b2ac65d21440f8c8e262b2b86680b47f3ecce7fcf6ffe6f15c786523ef8e37600c877b94e5ec573a5840f70ed85111d9c48b3a947b0a6a95e72d972c9263650a1b1dd74cb7755168844f89e43b00ee50d81ce24bca80efb6a5ef894d79bb6459d461ede5d251b74fb2405e29ef3f0f88028fa79f09a00fe858342b094827cf72bb104bfba11161c5113904a0a816242063430a6f9e428478b69c1163d4729c76bb015423b3fb78fa63328ea2378b6615dd518c856e295fe957f0b65e38dea815274168a48acf24f2868d2b412e597fdb33c9328e17814946c05af1f12edeac045ccbb669489845cf0a5a979ba9f7cb19387dfd2abc0be6614a27827840a89f50fbc221ae03e9bdf8c28c7245b10ab4ba7d78e6d5778fcf499363502d8c65dab98b17f44532ed44202dc4edbd7e8576feb8c2d4be4b42e01af1b4d995dfef7eda7cd6ad319f0e776fc8dd3fb71dc1ed9d19b90bd3f999646169a6c8d6b2c4d0325a10cf36bc95d7dd6fc4c331df4af8b39fec53106646f61d18c9e908fd5e2f73489f6b5342d2ad007d68db4c422d25a8f770f7ca356a4387a0518556e19bd69b76a69534247f029b00e728f0cb97a03fe243398ebf9450ec1362be6f447c9effb4c0578d76a369f31b84c32089f89298d98ee368cb998ff370cfa8a993104f26d2cf82f4f51593bdce207750d0b1ab122e24b1f0cc7d51afeb47f080bac08992a680fcb236ad54219b4fa598f4b50ec322bdbf735483579d2a1ed0389043a9f896e4965db0d5497afcf598546f89d89e060022cd4391ac23336873c77937238318743c92165b4a9d725cb8d4108285f1a1f87d42ce203e999f08a528422475a04a7f8b1f13f16246c31b5e2e5666440fff410dc636a2863455d5e8b3c016ab053b1a8139fdbd814e5d10d7c2590e37f3fe8334e75eac68952d14956db0a83840c5cebcae4086d3c7d62a36c157d0ecaeb858f25fb41335a78a8a35a1ab2ff074a1cf280cdf76e4032c718cadaf5405a08f5b60612e868cc228478d0b47596b4ea8248a857a2d5ea02c756f50c0b830b369dd3f21377a8e4a5ae0834bc26c286713834865ec4578b4e179e9280b21d567e432056adb9596ab1251aedd769cca36058a614a427876dd2b555ffe910f1fdcc2c872aedffa1c09d5ede7c6321b8d346abd696a668960b67ecb031cbf44515c00169ef99dfcbc94c5f5d4f87cafd381b3c2a6802b8b180025114e5633f7def219315503afe23bf5a91349eb943120cf26f4873fb37bc2b4f843926639361464c810d9cc7cded7730337a5b6b2d8e8b4caabb5d4f6d51b31726dccb22f9d4552fad1a1b648a4e73c6e9f00e885270346bf888faef48cf0a56c4ebb14eca4e39061f4e08e53d693fccc1679890bdec74e40fbafa233db860a2a0393d0396d0162bea0efbff0beb4fff2b1cb51ec9654a65afe1163a03a158e3283d04ee363ac0aab4d1107fa3d328b179fe92ea5aa2089283bc07c0e4589b22fd57237d50934a4c4e8f32ce3d26ce6acd3fff30ee136f1ac44bd68c473b8eb2a4c3eb778de2ebc591bae36e7b7384cfd6e4bbedc49d7f7ddfdc8d5a6f21e58e46a8dc8ae8b73f53e7235fa048229421ef54ade9adcf075d6b08f06d8f95d37eb4268b9756dd027d048c1cad1609ef61d6b0b0c9e5cba2dd805a2f027c77b4ad0bb0bb63937c989ac47ed83f5346fbb3917950fd7a43e8fd186f1b5a8aaeaab57cdce564fca360388cc4ec5517bc0467a55017b2a98a91eaae32ddd4cd525f00da4d8d39743d2c6d175e20d4f9c70b41fc071437871aec7307b4f2f46c3868b2928722221d8450cff4c5ec676d6e2a01968247c7ed4d84ddad459f17dde405ffda34d9882aa4aafe5889cee029b07b1f9bde1ba904057ddc94e6e6e5a4272985b1c24c0ab3f959fceec65f5e252bd12cbad980124a046413fa1819a7c5f6c1ac6e79757dfb2b0bc2ae268a36a3c9d30a99347046578c178809fbc78737a6054987ef4dbeeb9b9b23d495e6e00f5023225d2099ad503a23ae53ab3285431171dc12088ca51efb8bb4377fe40ece45c4140a5b488650db87d4c52c8190f0d3594cd886ec906b59757c0278aa198e3a094bea1b862876f995df70f0c02401330b9890dbc3ab23ffc722e84afaabc24482828b35b8aab7ff79d71874ad8e36bcde321eb72a0e1bec3a899d23297d32dfff42b2910f84a241f04948efb5253677b4feed47c112061643941ba63acc710db0c75772c58774af88baa942ad0ca88a532b58d8d1a2792a2157db80e5e2c0e41654a276d1056ffe5ef9ee04f052ff7e1f0959bfc7c64d0abf18e51a97bd7aeea83b9b0153c01003cd8f7eb5f76e8f4efcd061cca1d0d9a1d866173cca04adf600d27977103bd24aa66f6fbb222e1b8e02c7f638a817903bffb5693709ae08c7d158b0cdf651428e795b80b4ca5320b3c40abce6d6213d902f7f0814dcc9c3850548a176608a6f62a6d074f2d629af61b8cd7265a2dd058976aa5b9dadd63df094d2594195a966c6cd577d174d771376e19e4336994c27509a4e45f0b3f0d532607fab6fb49451f4d952f8b88da42bed857c1f98060c28027a7d1e3534cce14aef6a4f050a7aaca7f0f1d6f98af81ed01e8b04e4ac39b4a10ca008da2796d3b3cc4f226d0068bd55ad391cde85421b29a6a8dbd4a8fe99c0ce53bfca7c6db1198fa58ba177a503c1e85c6e842265a170de726064897e74caf216093d96111f0a5e88be7d65b5e6578e6d5cfe226e2bd78bc2a4b571d4252c479525bf094749fcbacda1764af22bf44ff9dd72dedfa4ca643fc2364be17c4e5127820afb7e2d03be6d3f3d2d3dad5518297acfac146fd8de9d27ef354c15fa968b765be2e589d29405ee0c12f3172927ca458e12e0e7afccb6ead5f6a4a4f28b04c761161bccd78afbe98bbcfa17bf255f7ad791a4d42e7f38f698001ffdc770ebcb92c21bee35397f97a5c08cf5cde1fb7dee6945ffecd3703602a03e7a63cae94cd1954d3ca15299b0bd9f64393e782524b6686e43b1e5db064c7b2c44f7ef4a6c364bc8221a7c5939eb594b408a1a173364ffb2e576086cfd5cc38dbb5765f3f29940a373524835e525fc0e2e0d75ab68b63a4e9b7225b751901feee017bf69ee32e0e352422c2e4985cae1d2841625aa1611f8c568f6147d693c980cdb1d3504653059be4d060f3115f65be539cdcfdd79798abd19e41029e10e06df85bb3f6644d44a0a70ab4804482b0796cc59f646a889fe638caa8a3e9623a32f06de80f15f3c2bb8c8f88d74d12739331e4e0bc991b446cf80d247d2cfacfa8a473e2d7457915539d97720bf67126f82a4a7e5eea1cc617d96f2abe54a72c6067c783d991bb4973694cf2cc1dbbc170547cb47f09a48a8c42e3fa5d04a09c6c4c38cce25d8a73d90b421914abae0cd212e5ae7f2f9da77a5b7869be14fe7815dcb07285c7831e0fdc4e0576207d76025bc593cfd7d816f7391ed5d2a916fb0af2aad8e85905d0df267b1481461f8dd449d50cc386384fc1d08eb07f2f27454b2a0d7d5f02683d312450e81c5f51e4059e5277bb926cad1da9ccf7673ca947b16e75fd6fd739a88851b92929d9fa6f45e5de3182d98a300218643400d862c4033de518fb54fefd3fb2e4a4c0089984fa77ef0ac03d02ed0f62d08cab3c0c2a3878445d016b51fd14a8dfe11750ffd5a4f9270a8fd106c012e08669f1fe4b3285a19301e41c1874", 0xe00}, {&(0x7f0000002c40)="13bb7a987652ab312ff7f90d18bfcc5296e01038b30285633c4c6a69fab191d2aac551f1b52eb9169b3084bd8cdd27e0a54914ded8947b537a2cb442ea80394741bfcd628d760e95d14a7bb383adfbb72409142740476b34ab9aa4f9d6a94ec804324a63e56e1907548fb9d779408123700df726732bbd631d1ccd67ccbde16699d992c5606b48f639b2d3857879f5219b2c85d63e1416646969fbca5a8c0b5cb56f521c82ceb466b0bca31aeaeb8734fcc3639f7cd993b970b7962648a141bbf9ab74ba50faf3cf85006478b059cd0739786e4595fe70c19dc64609", 0xdc}, {&(0x7f0000002d40)="0524903cd0f1c0757b77af40b82e375bc3741824fad354b636c3586f62a5a175ca21f0fdd479", 0x26}, {&(0x7f0000002d80)="5a989391a137fcb61e3e936408362e2846e0dfb9613d9b151ff3689025f8a2c5", 0x20}], 0x8, &(0x7f0000002e40)=[{0x90, 0x110, 0x1, "f967af73228f6ba0eb7eb0ebde5cace8bd881230b1109d6a1bc769ef3a2f8d232d03af61221ba042036698b9d9c68b8863a01856a4a604930c8071ed002df1490d89240c342ecd398e2b24ae125d68a47ec662f2a4c132e6503426c20eacebadc16b2c229ffac6adffea8fe72aae71dc94f0eedc64ff5484bd22"}, {0xe0, 0x136, 0x4, "1e1c762c4e150ca802797bf3816017ba4a2933c21d6dff7165df62ce393b58002d6c0b9604215be67a3b713d1688f01fc6c3af7c4e2b11ce7d03ae78bf84326484a03dbf0340a7b9749f82b105524b3fb4a5e83ceeda7cf72b2c80f63f974e04cd2c94e18a494312f68d13953b3920bba2083f3467a66080f64a1b376f23e78481cc2571d26b2e42caebc6033e17517eadd5f654bd0198797ed64201658cdbbf5325fcbc79e2e7f2d8e476d06cdb4befc5b00b82515638d73ed1d163a32fe607e53d0de1991155added73f0286"}, {0x110, 0x103, 0x9, "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"}, {0xd8, 0x103, 0x8, "1e5f338f964331dc2cb67a8f164191003bb8dca8e8842e6e09fb468ff9e46ac2d77cb3fb7e46a085398eb7a15a9cfadd6dd18c8779b0be264cc3b8ec77a25024ada002c794404d2c8e9e2cf248a6689e1bed3e9a6a791f1f9db20044620a9c7a8fe77d2ae5ad5873ccd54416ead9dca05ddfdf2ac5b68ef5da30baf41be9e7685da60b6635084b698579134d84dc2f13959c19ba9044f77627ceecb90d649371d401e43e357bad2a78c0ae83eb85a8c3e16c771c765fe1ce9724746d7f27a3872e9a3d"}, {0x100, 0x116, 0x6161, "edc95bcf17c182586271ec287c19b2a93e58a188309a158f0061ca738a24618841161f20194c93d8a8a09b12414174d95f8e892bac9307839ba0477c2cf3920236b0b13d6c3a86992e4ef40dec849366c8939cfb0d81eae7ebe33868de5a3a2eb3c8a3c02e5223d78fc68fe02c6e5d809cb8946cb7bda0bf5e1966cb4fe252aa5479bee63fbbf209b399a61a58a8f1eda0a8be1a7760ffc4eaa87e166c0952a2020223b214433f25da23609fda46813b9a4b06c4dfce24e08e19312191842a0180bc855070f128629170869060e87066824427ad8c41b0b0be310cc6a0c9cb7d2252a0a8cce3831a09ed661fd51336"}], 0x458}}], 0x2, 0x82) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/disk', 0x141b82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1ff, 0x12) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc04}}, 0x20}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x2, [0x0, 0x0]}) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r8}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}}) 618.264914ms ago: executing program 2 (id=2579): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x5, 0x20], 0x6, 0x3}}}}, {{@ip={@multicast2=0xe0000020, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x12ee6d772310561e, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x40}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 464.468929ms ago: executing program 4 (id=2580): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xf7, 0xc, 0x8}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x9c) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x24, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x234e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_clone(0x40000000, 0x0, 0x51, 0x0, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) r8 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) mount_setattr(r9, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5}, 0x20) fcntl$setown(r4, 0x8, r7) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000015000100040000000000000020010000000000000000000000000001ac1414aa000000000000008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ba6b6e000200000008001f00000000000c0015000000000000000000"], 0x64}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 317.892471ms ago: executing program 2 (id=2581): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e1f, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2400000000000000fdff000007"], 0x28}, 0x0) 296.514049ms ago: executing program 1 (id=2582): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001"], 0x58}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700008408000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000038000380340000800800034000000002280002802400028008000180fffffffb08000180fffffffb08"], 0xf8}}, 0x0) 221.417808ms ago: executing program 3 (id=2583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6], [0x0, 0x1]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x54}}, {0x4}}]}]}, 0xac}}, 0x0) 61.774807ms ago: executing program 1 (id=2584): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4f}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x40449d0}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="780df56e", 0x4}], 0x1}, 0x0) 0s ago: executing program 3 (id=2585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000004000100736974300000000000000000000000001400010073697430000000020000000000000000080002400000000008000140000000000900020073797a310000000009000100"], 0xa8}}, 0x0) kernel console output (not intermixed with test programs): 79] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 550.067322][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 550.081409][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 550.105683][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.132463][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.147494][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 550.164678][ T5279] usb 1-1: string descriptor 0 read error: -22 [ 550.172313][ T5279] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 550.185359][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.211907][ T5279] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 550.308709][T14930] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2179'. [ 550.933760][ T5285] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 551.096121][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 551.116615][ T5285] usb 3-1: config 0 has no interfaces? [ 551.123380][ T5285] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 551.136526][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.154643][ T5285] usb 3-1: config 0 descriptor?? [ 551.618729][T14947] input: syz1 as /devices/virtual/input/input52 [ 552.225726][T13621] usb 1-1: USB disconnect, device number 87 [ 552.230789][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.252778][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.267829][T14950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2180'. [ 552.698805][ T5279] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 552.873714][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 552.880963][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 552.893727][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.908831][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.920749][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.932028][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 552.944797][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 552.952226][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.964020][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.978085][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.989372][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.002036][ T5279] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 553.009702][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 553.030672][ T5279] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.042535][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.053919][ T5279] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 553.068235][ T5279] usb 1-1: string descriptor 0 read error: -22 [ 553.075065][ T5279] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 553.084320][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.110864][ T5279] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 553.313884][T14955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.337332][T14955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.471400][T14959] netlink: 'syz.1.2186': attribute type 10 has an invalid length. [ 553.641561][T14964] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 ! [ 553.792627][T14968] program syz.4.2189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.948321][T14974] loop2: detected capacity change from 0 to 7 [ 553.961778][T14974] Dev loop2: unable to read RDB block 7 [ 553.973120][T14974] loop2: unable to read partition table [ 553.989390][T14974] loop2: partition table beyond EOD, truncated [ 554.001195][T14974] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 554.084690][T13621] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 554.098400][T14978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2192'. [ 554.263943][T13621] usb 5-1: Using ep0 maxpacket: 16 [ 554.279856][T13621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.301866][T13621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.321918][T13621] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 554.339843][T13621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.396351][T13621] usb 5-1: config 0 descriptor?? [ 554.551432][ T5279] usb 3-1: USB disconnect, device number 83 [ 554.806147][T13621] ntrig 0003:1B96:0008.0023: unbalanced collection at end of report description [ 554.881381][T13621] ntrig 0003:1B96:0008.0023: parse failed [ 554.897641][T13621] ntrig 0003:1B96:0008.0023: probe with driver ntrig failed with error -22 [ 555.083821][ T5291] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 555.138784][T14993] FAULT_INJECTION: forcing a failure. [ 555.138784][T14993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.167139][T14993] CPU: 1 UID: 0 PID: 14993 Comm: syz.3.2198 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 555.167146][T14968] IPVS: Scheduler module ip_vs_ not found [ 555.167167][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 555.193655][T14993] Call Trace: [ 555.196925][T14993] [ 555.199841][T14993] dump_stack_lvl+0x241/0x360 [ 555.204507][T14993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.209686][T14993] ? __pfx__printk+0x10/0x10 [ 555.214266][T14993] ? __pfx_lock_release+0x10/0x10 [ 555.219282][T14993] should_fail_ex+0x3b0/0x4e0 [ 555.223960][T14993] _copy_from_iter+0x1ed/0x1d60 [ 555.228803][T14993] ? _copy_from_iter+0x257/0x1d60 [ 555.233811][T14993] ? __virt_addr_valid+0x183/0x530 [ 555.238908][T14993] ? skb_set_owner_w+0x238/0x3e0 [ 555.243832][T14993] ? __pfx_lock_release+0x10/0x10 [ 555.248843][T14993] ? __pfx__copy_from_iter+0x10/0x10 [ 555.254114][T14993] ? __pfx__copy_from_iter+0x10/0x10 [ 555.259386][T14993] ? page_copy_sane+0x154/0x260 [ 555.264224][T14993] copy_page_from_iter+0x7a/0x100 [ 555.269231][T14993] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 555.275033][T14993] packet_sendmsg+0x435c/0x6860 [ 555.279894][T14993] ? aa_sk_perm+0x96d/0xab0 [ 555.284380][T14993] ? __pfx_packet_sendmsg+0x10/0x10 [ 555.289565][T14993] ? __pfx_lock_release+0x10/0x10 [ 555.294578][T14993] ? aa_sock_msg_perm+0x91/0x160 [ 555.299498][T14993] ? __pfx_packet_sendmsg+0x10/0x10 [ 555.304681][T14993] __sock_sendmsg+0x221/0x270 [ 555.309345][T14993] ____sys_sendmsg+0x52a/0x7e0 [ 555.314099][T14993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.319376][T14993] __sys_sendmsg+0x292/0x380 [ 555.323971][T14993] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.329076][T14993] ? __pfx_vfs_write+0x10/0x10 [ 555.333847][T14993] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 555.340162][T14993] ? do_syscall_64+0x100/0x230 [ 555.344908][T14993] ? do_syscall_64+0xb6/0x230 [ 555.349565][T14993] do_syscall_64+0xf3/0x230 [ 555.354052][T14993] ? clear_bhb_loop+0x35/0x90 [ 555.358711][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.364593][T14993] RIP: 0033:0x7f52a8b7dff9 [ 555.368989][T14993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.388582][T14993] RSP: 002b:00007f52a99bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.396986][T14993] RAX: ffffffffffffffda RBX: 00007f52a8d35f80 RCX: 00007f52a8b7dff9 [ 555.404940][T14993] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 555.412891][T14993] RBP: 00007f52a99bc090 R08: 0000000000000000 R09: 0000000000000000 [ 555.420842][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.428798][T14993] R13: 0000000000000000 R14: 00007f52a8d35f80 R15: 00007f52a8e5fa28 [ 555.436763][T14993] [ 555.453685][ T5305] usb 5-1: USB disconnect, device number 90 [ 555.514314][T14983] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 555.544606][ T5279] IPVS: starting estimator thread 0... [ 555.584362][ T5303] usb 1-1: USB disconnect, device number 88 [ 555.623872][ T5291] usb 3-1: Using ep0 maxpacket: 32 [ 555.641292][T14995] IPVS: using max 16 ests per chain, 38400 per kthread [ 555.699810][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.711106][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.721186][ T5291] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 555.730507][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.774510][ T5291] usb 3-1: config 0 descriptor?? [ 555.791810][ T5291] hub 3-1:0.0: USB hub found [ 555.949092][ T954] IPVS: stop unused estimator thread 0... [ 555.993269][ T5291] hub 3-1:0.0: 1 port detected [ 556.117430][T15012] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 556.533917][ T5305] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 556.802061][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.813932][ T5305] usb 2-1: device descriptor read/64, error -71 [ 556.850324][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.043804][ T5303] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 557.059375][ T5305] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 557.133691][ T5279] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 557.203716][ T5303] usb 4-1: Using ep0 maxpacket: 32 [ 557.213844][ T5305] usb 2-1: device descriptor read/64, error -71 [ 557.244651][ T5303] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=d6.3f [ 557.253872][ T5303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.272824][ T5303] usb 4-1: Product: syz [ 557.279924][ T5303] usb 4-1: Manufacturer: syz [ 557.285115][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 557.294475][ T5303] usb 4-1: SerialNumber: syz [ 557.304207][ T5279] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 557.322636][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.331556][ T5303] usb 4-1: config 0 descriptor?? [ 557.344066][ T5305] usb usb2-port1: attempt power cycle [ 557.367217][ T5279] usb 1-1: Product: syz [ 557.372029][ T5279] usb 1-1: Manufacturer: syz [ 557.378958][ T5279] usb 1-1: SerialNumber: syz [ 557.394195][ T5279] usb 1-1: config 0 descriptor?? [ 557.566485][T15027] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 557.606526][ T5279] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 557.667070][ T5279] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 557.704688][ T5305] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 557.728462][ T5279] usb 1-1: USB disconnect, device number 89 [ 557.754378][ T5305] usb 2-1: device descriptor read/8, error -71 [ 557.784843][ T5303] usb 4-1: USB disconnect, device number 79 [ 557.924423][ T8] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 557.993813][ T5305] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 558.030186][ T5305] usb 2-1: device descriptor read/8, error -71 [ 558.103708][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 558.127685][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 558.153485][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.155765][ T5305] usb usb2-port1: unable to enumerate USB device [ 558.167418][ T8] usb 5-1: config 0 descriptor?? [ 558.184438][ T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 558.317067][T13621] usb 3-1: USB disconnect, device number 84 [ 558.376474][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.397744][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.418043][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.439976][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.450060][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.461377][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.478334][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.488561][T15055] tipc: Enabling of bearer rejected, failed to enable media [ 558.488730][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.506852][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.518200][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.555926][ T4672] bcm5974 5-1:0.0: could not read from device [ 558.601635][ T4672] bcm5974 5-1:0.0: could not read from device [ 558.608865][ T8] usb 5-1: USB disconnect, device number 91 [ 558.630546][T12272] udevd[12272]: Error opening device "/dev/input/event4": No such file or directory [ 558.642185][T12272] udevd[12272]: Unable to EVIOCGABS device "/dev/input/event4" [ 558.662134][T12272] udevd[12272]: Unable to EVIOCGABS device "/dev/input/event4" [ 558.683269][T12272] udevd[12272]: Unable to EVIOCGABS device "/dev/input/event4" [ 558.699258][T12272] udevd[12272]: Unable to EVIOCGABS device "/dev/input/event4" [ 558.885730][T15069] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 558.894446][T15069] syz_tun: entered promiscuous mode [ 558.914080][T15069] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 559.075693][T15073] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 ! [ 559.271331][T15075] input: syz1 as /devices/virtual/input/input55 [ 559.405614][T15077] binder: 15076:15077 ioctl c018620c 20000340 returned -22 [ 559.466191][T15077] binder: 15076:15077 unknown command 0 [ 559.508267][T15077] binder: 15076:15077 ioctl c0306201 20000a80 returned -22 [ 559.768115][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2231'. [ 559.822963][T15078] syz.0.2223 (15078): drop_caches: 2 [ 559.877837][T15100] input: syz0 as /devices/virtual/input/input56 [ 559.965501][T15103] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 560.049670][ T29] audit: type=1326 audit(1728837250.258:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.181336][ T29] audit: type=1326 audit(1728837250.288:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.250414][ T29] audit: type=1326 audit(1728837250.288:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.282088][ T29] audit: type=1326 audit(1728837250.288:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.387937][ T29] audit: type=1326 audit(1728837250.288:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.425867][ T29] audit: type=1326 audit(1728837250.288:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.448778][T15116] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 560.469068][ T29] audit: type=1326 audit(1728837250.288:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.499086][ T5279] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 560.621956][ T29] audit: type=1326 audit(1728837250.288:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.633695][ T5291] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 560.663751][ T29] audit: type=1326 audit(1728837250.288:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.665367][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.701574][ T29] audit: type=1326 audit(1728837250.288:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.4.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795077dff9 code=0x7ffc0000 [ 560.728344][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.740931][ T5279] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 560.761242][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.782252][ T5279] usb 4-1: config 0 descriptor?? [ 560.787398][ T5291] usb 5-1: device descriptor read/64, error -71 [ 561.033733][ T5291] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 561.173905][ T5291] usb 5-1: device descriptor read/64, error -71 [ 561.284012][ T5291] usb usb5-port1: attempt power cycle [ 561.413761][ T5279] usbhid 4-1:0.0: can't add hid device: -71 [ 561.421275][ T5279] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 561.432510][ T5279] usb 4-1: USB disconnect, device number 80 [ 561.623726][ T5291] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 561.644142][ T5291] usb 5-1: device descriptor read/8, error -71 [ 561.883723][ T5291] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 561.904141][ T5291] usb 5-1: device descriptor read/8, error -71 [ 561.923689][ T8] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 561.923776][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 561.930034][ T8] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 562.015082][ T5291] usb usb5-port1: unable to enumerate USB device [ 562.068317][T15124] IPVS: Scheduler module ip_vs_ not found [ 562.661370][T15135] xt_l2tp: wrong L2TP version: 0 [ 562.776661][T15141] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2247'. [ 562.805820][T15141] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2247'. [ 562.852793][T15141] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2247'. [ 563.013693][ T5285] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 563.048848][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.061985][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.163702][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 563.170624][ T5285] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.188364][ T5285] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.201604][ T5285] usb 1-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 563.219996][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.229737][ T5285] usb 1-1: Product: syz [ 563.240215][ T5285] usb 1-1: Manufacturer: syz [ 563.246297][ T5285] usb 1-1: SerialNumber: syz [ 563.349642][T15151] netlink: 'syz.4.2250': attribute type 10 has an invalid length. [ 563.368656][T15151] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2250'. [ 563.456596][ T5285] usb 1-1: 0:2 : does not exist [ 563.468147][ T5285] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 563.484370][ T5285] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 563.511632][ T5285] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 563.532460][ T5285] usb 1-1: USB disconnect, device number 90 [ 563.578974][T11889] udevd[11889]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.701268][T15157] netlink: 'syz.4.2253': attribute type 10 has an invalid length. [ 563.776283][T15159] block device autoloading is deprecated and will be removed. [ 563.788246][T15159] syz.4.2254: attempt to access beyond end of device [ 563.788246][T15159] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 563.854972][T15159] vlan2: entered allmulticast mode [ 563.860700][T15159] bond0: entered allmulticast mode [ 563.866324][T15159] bond_slave_0: entered allmulticast mode [ 563.872081][T15159] bond_slave_1: entered allmulticast mode [ 563.877973][T15159] syz_tun: entered allmulticast mode [ 563.886190][T15159] bond0: left allmulticast mode [ 563.891090][T15159] bond_slave_0: left allmulticast mode [ 563.896749][T15159] bond_slave_1: left allmulticast mode [ 563.902238][T15159] syz_tun: left allmulticast mode [ 564.003812][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 564.009961][ T8] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 564.024195][ T8] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 564.198789][T15167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2257'. [ 564.211696][T15165] dummy0: entered promiscuous mode [ 564.224855][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'. [ 564.296318][ T5285] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 564.335336][T15171] input: syz1 as /devices/virtual/input/input57 [ 564.431473][T15179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.447548][T15179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.458893][T15179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.470531][T15179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.475728][ T5285] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 564.486978][ T5285] usb 1-1: config 8 has no interface number 0 [ 564.487502][ T5305] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 564.493072][ T5285] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 564.493105][ T5285] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid maxpacket 7744, setting to 64 [ 564.493132][ T5285] usb 1-1: config 8 interface 177 has no altsetting 0 [ 564.530313][ T5285] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 564.539623][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.550850][T15162] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 564.558172][T15162] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 564.666780][ T8] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 564.671914][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.674509][ T4616] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 564.690646][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.710545][ T5305] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 564.720067][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.739105][ T5305] usb 4-1: config 0 descriptor?? [ 564.833934][ T8] usb 3-1: device descriptor read/64, error -71 [ 564.852858][ T5285] usb 1-1: string descriptor 0 read error: -71 [ 564.853697][T14140] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 564.876231][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 565.023896][T14140] usb 5-1: Using ep0 maxpacket: 16 [ 565.037322][T14140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.054485][ T4616] usb 2-1: device not accepting address 81, error -71 [ 565.056749][T14140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.075196][ T8] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 565.087295][T14140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 565.105841][T14140] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 565.125449][T14140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.152150][T14140] usb 5-1: config 0 descriptor?? [ 565.233811][ T8] usb 3-1: device descriptor read/64, error -71 [ 565.344909][ T8] usb usb3-port1: attempt power cycle [ 565.393723][ T5285] ir_toy 1-1:8.177: could not write reset command: -110 [ 565.401069][ T5285] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 565.413695][ T4616] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 565.422232][ T5285] usb 1-1: USB disconnect, device number 91 [ 565.500319][T15199] netlink: 'syz.0.2266': attribute type 27 has an invalid length. [ 565.561123][T15201] input: syz0 as /devices/virtual/input/input59 [ 565.600223][ T4616] usb 2-1: Using ep0 maxpacket: 32 [ 565.610618][ T4616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.622868][T14140] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 565.631816][ T4616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.656867][ T4616] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 565.660301][T14140] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0024/input/input60 [ 565.666111][ T4616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.692646][T15204] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 565.703861][ T8] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 565.706850][T14140] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 565.739069][ T8] usb 3-1: device descriptor read/8, error -71 [ 565.779215][ T4616] usb 2-1: config 0 descriptor?? [ 565.789281][ T4616] hub 2-1:0.0: USB hub found [ 565.859004][T14140] usb 5-1: USB disconnect, device number 96 [ 565.963796][T15207] IPVS: Scheduler module ip_vs_ not found [ 565.984968][ T8] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 566.001803][ T4616] hub 2-1:0.0: 1 port detected [ 566.008285][ T8] usb 3-1: device descriptor read/8, error -71 [ 566.046917][T15210] SET target dimension over the limit! [ 566.059294][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.068325][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.124074][ T8] usb usb3-port1: unable to enumerate USB device [ 566.433065][T15212] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 566.604026][T15219] netlink: 'syz.4.2273': attribute type 3 has an invalid length. [ 566.872486][T15197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.910070][T15197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.268760][T15234] mmap: syz.4.2278 (15234): VmData 37388288 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 567.679451][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2279'. [ 567.978728][ T8] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 568.237963][T15250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2282'. [ 568.322585][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 568.342686][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 568.370484][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.447039][ T8] usb 1-1: config 0 descriptor?? [ 568.520957][ T8] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 568.527692][ T4616] hub 2-1:0.0: activate --> -90 [ 568.550363][ T4616] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 568.665310][T13621] usb 2-1: USB disconnect, device number 82 [ 568.873456][ T5285] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 569.493252][T15259] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 569.592523][T15243] netlink: 'syz.0.2281': attribute type 25 has an invalid length. [ 569.844963][ T5305] usbhid 4-1:0.0: can't add hid device: -32 [ 569.856010][ T5305] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 569.863169][ T8] gspca_sunplus: reg_w_riv err -71 [ 569.869151][ T8] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 569.933317][ T8] usb 1-1: USB disconnect, device number 92 [ 570.113782][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.158614][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.791179][T15278] tipc: Enabling of bearer rejected, failed to enable media [ 570.803758][ T8] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 570.874398][ T937] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 570.928331][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 570.954532][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 570.976575][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 570.995755][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.028950][ T937] usb 1-1: device descriptor read/64, error -71 [ 571.035953][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.068353][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 571.094563][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.108053][ T8] usb 2-1: config 0 descriptor?? [ 571.118274][ T8] hub 2-1:0.0: USB hub found [ 571.272532][T15284] binder: 15283:15284 ioctl c018620c 20000340 returned -22 [ 571.283913][ T937] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 571.319700][T15284] binder: 15283:15284 unknown command 0 [ 571.332513][T15284] binder: 15283:15284 ioctl c0306201 20000a80 returned -22 [ 571.333358][ T8] hub 2-1:0.0: 1 port detected [ 571.513830][ T937] usb 1-1: device descriptor read/64, error -71 [ 571.624079][ T937] usb usb1-port1: attempt power cycle [ 571.771740][T15291] netlink: 'syz.3.2296': attribute type 1 has an invalid length. [ 572.024266][ T937] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 572.079464][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.124288][ T937] usb 1-1: device descriptor read/8, error -71 [ 572.134166][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.222701][T15295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.453696][ T937] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 572.474346][ T937] usb 1-1: device descriptor read/8, error -71 [ 572.565363][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2301'. [ 572.597491][ T937] usb usb1-port1: unable to enumerate USB device [ 572.913856][T13621] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 573.094651][T13621] usb 5-1: Using ep0 maxpacket: 32 [ 573.123440][T13621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.135105][T13621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.145278][T13621] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 573.154414][T13621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.166002][T13621] usb 5-1: config 0 descriptor?? [ 573.202109][ T5305] usb 2-1: USB disconnect, device number 83 [ 573.313850][ T5285] usb 3-1: device descriptor read/64, error -71 [ 573.570456][ T5285] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 573.652397][T13621] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 573.786289][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 573.799162][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 573.861818][T13621] ft260 0003:0403:6030.0025: chip code: 5e81 abf2 [ 573.906685][ T5285] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3 [ 574.044088][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.052162][ T5285] usb 3-1: Product: syz [ 574.057929][T13621] ft260 0003:0403:6030.0025: failed to retrieve system status [ 574.082604][T13621] ft260 0003:0403:6030.0025: probe with driver ft260 failed with error -5 [ 574.092211][ T5285] usb 3-1: Manufacturer: syz [ 574.101890][ T5285] usb 3-1: SerialNumber: syz [ 574.137639][ T5285] usb 3-1: config 0 descriptor?? [ 574.469325][T15338] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 574.520216][ T5285] usb 3-1: USB disconnect, device number 90 [ 574.893858][ T5305] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 575.063694][ T5305] usb 1-1: Using ep0 maxpacket: 32 [ 575.070406][ T5305] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 575.084985][ T5305] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 575.096624][ T5305] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a1c, bcdDevice=c0.ea [ 575.107070][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.115627][T15349] SET target dimension over the limit! [ 575.122951][ T5305] usb 1-1: Product: syz [ 575.133743][ T5305] usb 1-1: Manufacturer: syz [ 575.138362][ T5305] usb 1-1: SerialNumber: syz [ 575.147167][ T5305] usb 1-1: config 0 descriptor?? [ 575.191934][T15351] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 575.200584][T15351] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2313'. [ 575.210839][T15351] team0: entered promiscuous mode [ 575.216352][T15351] team_slave_0: entered promiscuous mode [ 575.222385][T15351] team_slave_1: entered promiscuous mode [ 575.229684][T15351] bridge0: port 3(team0) entered blocking state [ 575.236331][T15351] bridge0: port 3(team0) entered disabled state [ 575.242765][T15351] team0: entered allmulticast mode [ 575.248662][T15351] team_slave_0: entered allmulticast mode [ 575.254750][T15351] team_slave_1: entered allmulticast mode [ 575.261843][T15351] bridge0: port 3(team0) entered blocking state [ 575.268201][T15351] bridge0: port 3(team0) entered forwarding state [ 575.356888][ T8] usb 1-1: USB disconnect, device number 97 [ 575.528179][T15361] IPVS: Scheduler module ip_vs_ not found [ 575.534455][T15361] FAULT_INJECTION: forcing a failure. [ 575.534455][T15361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.548019][T15361] CPU: 1 UID: 0 PID: 15361 Comm: syz.3.2317 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 575.558795][T15361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 575.568848][T15361] Call Trace: [ 575.572120][T15361] [ 575.575046][T15361] dump_stack_lvl+0x241/0x360 [ 575.579724][T15361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.584914][T15361] ? __pfx__printk+0x10/0x10 [ 575.589507][T15361] ? snprintf+0xda/0x120 [ 575.593745][T15361] should_fail_ex+0x3b0/0x4e0 [ 575.598421][T15361] _copy_to_user+0x2f/0xb0 [ 575.602833][T15361] simple_read_from_buffer+0xca/0x150 [ 575.608208][T15361] proc_fail_nth_read+0x1e9/0x250 [ 575.613232][T15361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 575.618779][T15361] ? rw_verify_area+0x55e/0x6f0 [ 575.623627][T15361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 575.629173][T15361] vfs_read+0x201/0xbc0 [ 575.633327][T15361] ? __pfx_lock_release+0x10/0x10 [ 575.638350][T15361] ? __pfx_vfs_read+0x10/0x10 [ 575.643029][T15361] ? __fget_files+0x3f3/0x470 [ 575.647710][T15361] ? fdget_pos+0x24e/0x320 [ 575.652119][T15361] ksys_read+0x183/0x2b0 [ 575.656354][T15361] ? __pfx_ksys_read+0x10/0x10 [ 575.661111][T15361] ? do_syscall_64+0x100/0x230 [ 575.665866][T15361] ? do_syscall_64+0xb6/0x230 [ 575.670533][T15361] do_syscall_64+0xf3/0x230 [ 575.675026][T15361] ? clear_bhb_loop+0x35/0x90 [ 575.679697][T15361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.685584][T15361] RIP: 0033:0x7f52a8b7ca3c [ 575.689991][T15361] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 575.709588][T15361] RSP: 002b:00007f52a99bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 575.717997][T15361] RAX: ffffffffffffffda RBX: 00007f52a8d35f80 RCX: 00007f52a8b7ca3c [ 575.725969][T15361] RDX: 000000000000000f RSI: 00007f52a99bc0a0 RDI: 0000000000000005 [ 575.733930][T15361] RBP: 00007f52a99bc090 R08: 0000000000000000 R09: 0000000000000000 [ 575.741912][T15361] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.749889][T15361] R13: 0000000000000000 R14: 00007f52a8d35f80 R15: 00007f52a8e5fa28 [ 575.757881][T15361] [ 575.817590][T13621] usb 5-1: USB disconnect, device number 97 [ 575.903759][ T5305] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 575.929381][T15368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2318'. [ 576.033679][ T5305] usb 3-1: device descriptor read/64, error -71 [ 576.112525][T15370] input: syz0 as /devices/virtual/input/input61 [ 576.223803][T13621] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 576.273659][ T5305] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 576.383761][T13621] usb 5-1: Using ep0 maxpacket: 8 [ 576.393682][T13621] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 576.401085][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 576.406242][ T5305] usb 3-1: device descriptor read/64, error -71 [ 576.420479][T13621] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.432468][ T8] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 576.440244][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.452368][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.465469][T13621] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 576.472865][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 576.484557][T13621] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.510889][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.533666][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.552660][T13621] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 576.560301][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 576.564062][ T5305] usb usb3-port1: attempt power cycle [ 576.584569][ T8] usb 1-1: device descriptor read/64, error -71 [ 576.590940][T13621] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.603854][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 576.612946][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.627977][T13621] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.639588][T15376] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 ! [ 576.656136][T13621] usb 5-1: string descriptor 0 read error: -22 [ 576.662523][T13621] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 576.677638][T13621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.720921][T13621] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 576.821223][T15382] tipc: Started in network mode [ 576.828699][T15382] tipc: Node identity 003a0000000000000000000000002d01, cluster identity 4711 [ 576.833745][ T8] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 576.842699][T15382] tipc: Enabling of bearer rejected, failed to enable media [ 576.923783][ T5305] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 576.954344][ T5305] usb 3-1: device descriptor read/8, error -71 [ 576.983812][ T8] usb 1-1: device descriptor read/64, error -71 [ 577.105361][ T8] usb usb1-port1: attempt power cycle [ 577.116457][T15386] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:0 [ 577.203757][ T5305] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 577.234842][ T5305] usb 3-1: device descriptor read/8, error -71 [ 577.344150][ T5305] usb usb3-port1: unable to enumerate USB device [ 577.483823][ T8] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 577.527976][ T8] usb 1-1: device descriptor read/8, error -71 [ 577.783786][ T8] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 577.824475][ T8] usb 1-1: device descriptor read/8, error -71 [ 577.944561][ T8] usb usb1-port1: unable to enumerate USB device [ 578.438237][ T8] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 578.613875][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 578.621346][ T8] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 578.630163][ T8] usb 2-1: config 0 has no interface number 0 [ 578.649211][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 578.667991][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.676490][ T8] usb 2-1: Product: syz [ 578.680969][ T8] usb 2-1: Manufacturer: syz [ 578.685803][ T8] usb 2-1: SerialNumber: syz [ 578.705852][ T8] usb 2-1: config 0 descriptor?? [ 578.913397][ T5279] usb 5-1: USB disconnect, device number 98 [ 578.913621][ T8] radio-si470x 2-1:0.35: this is not a si470x device. [ 578.975245][ T8] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 579.188420][ T8] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 579.211264][ T8] radio-raremono 2-1:0.35: V4L2 device registered as radio32 [ 579.285242][ T8] usb 2-1: USB disconnect, device number 84 [ 579.292022][ T8] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 579.347336][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.365638][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.381417][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.420575][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.433391][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.473844][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.077677][T15429] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 580.119245][T15433] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 580.140458][T15429] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 580.232443][T15431] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 580.504856][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2344'. [ 580.553950][ T8] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 580.575176][T15443] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 580.596902][T15443] bond1: (slave gre1): Error -95 calling set_mac_address [ 580.700393][ T8] usb 5-1: device descriptor read/64, error -71 [ 580.750231][T15455] fuse: Unknown parameter 'fxæd [ 580.750231][T15455] <ñ±eãÕ0x0000000000000007' [ 580.762551][T15455] mmap: syz.0.2348 (15455) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 580.913714][ T5305] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 580.947404][T15461] SET target dimension over the limit! [ 580.953767][ T8] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 581.000549][T15463] loop2: detected capacity change from 0 to 7 [ 581.009063][T15463] Dev loop2: unable to read RDB block 7 [ 581.014985][T15463] loop2: unable to read partition table [ 581.020906][T15463] loop2: partition table beyond EOD, truncated [ 581.027217][T15463] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 581.066163][ T5305] usb 3-1: Using ep0 maxpacket: 32 [ 581.075920][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.086984][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.097676][ T5305] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 581.106996][ T5279] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 581.113842][ T8] usb 5-1: device descriptor read/64, error -71 [ 581.120079][ T5305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.133993][ T5305] usb 3-1: config 0 descriptor?? [ 581.145333][ T5305] hub 3-1:0.0: USB hub found [ 581.225659][ T8] usb usb5-port1: attempt power cycle [ 581.275592][ T5279] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 581.295367][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.307721][ T5279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.319107][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 581.327510][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.349399][ T5305] hub 3-1:0.0: 1 port detected [ 581.354343][ T5279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.374017][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 581.382168][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.391358][ T5279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.413658][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 581.429496][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.442166][ T5279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.466656][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 581.485540][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.494649][ T5279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.533664][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 581.573690][ T8] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 581.591784][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.601017][ T5279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.612179][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 581.614417][ T8] usb 5-1: device descriptor read/8, error -71 [ 581.634805][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.651440][ T5279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.662482][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 581.663758][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.681016][ T5279] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.700977][ T5279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.703058][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.720146][ T5279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 581.732903][ T5279] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 581.752537][ T5279] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 581.753628][T15477] xt_policy: neither incoming nor outgoing policy selected [ 581.761089][ T5279] usb 1-1: Product: syz [ 581.780759][ T5279] usb 1-1: Manufacturer: syz [ 581.785598][ T5279] usb 1-1: SerialNumber: syz [ 581.796270][ T5279] usb 1-1: config 0 descriptor?? [ 581.808465][ T5279] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 581.886444][ T8] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 581.937291][ T8] usb 5-1: device descriptor read/8, error -71 [ 582.074051][ T8] usb usb5-port1: unable to enumerate USB device [ 582.100742][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.111977][T15480] input: syz0 as /devices/virtual/input/input62 [ 582.142429][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.250774][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 582.258478][ T5303] usb 1-1: USB disconnect, device number 102 [ 582.266009][ T5303] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 583.564459][ T8] usb 3-1: USB disconnect, device number 95 [ 583.614669][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 583.636775][T15500] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 583.644301][ T5279] IPVS: starting estimator thread 0... [ 583.704578][T14140] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 583.733698][T15512] IPVS: using max 20 ests per chain, 48000 per kthread [ 583.860712][T15516] loop2: detected capacity change from 0 to 7 [ 583.874511][T15516] Dev loop2: unable to read RDB block 7 [ 583.880256][T15516] loop2: unable to read partition table [ 583.909416][T15516] loop2: partition table beyond EOD, truncated [ 583.917620][T15516] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 583.933501][T14140] usb 5-1: config index 0 descriptor too short (expected 50, got 23) [ 583.953807][T14140] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 583.970185][T14140] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 583.996718][T14140] usb 5-1: config 0 has no interface number 0 [ 584.002846][T14140] usb 5-1: config 0 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 584.025576][T14140] usb 5-1: New USB device found, idVendor=2c42, idProduct=1632, bcdDevice=88.d6 [ 584.034870][T14140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.042934][T14140] usb 5-1: Product: syz [ 584.047220][T14140] usb 5-1: Manufacturer: syz [ 584.051981][T14140] usb 5-1: SerialNumber: syz [ 584.058760][T14140] usb 5-1: config 0 descriptor?? [ 584.084128][ T8] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 584.211519][T12335] IPVS: stop unused estimator thread 0... [ 584.244283][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 584.269975][T14140] f81232 5-1:0.154: f81534a converter detected [ 584.306722][T15526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.317451][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 584.327130][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.335469][ T8] usb 2-1: Product: syz [ 584.339705][ T8] usb 2-1: Manufacturer: syz [ 584.344437][ T8] usb 2-1: SerialNumber: syz [ 584.353130][ T8] usb 2-1: config 0 descriptor?? [ 584.360716][ T8] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 584.371425][T14140] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 584.399637][T14140] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 584.432558][T14140] usb 5-1: USB disconnect, device number 103 [ 584.442837][T15524] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 584.474416][T14140] f81232 5-1:0.154: device disconnected [ 584.740314][T15534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2374'. [ 584.758330][T15534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2374'. [ 584.923356][T15542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.942607][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2372'. [ 584.997750][ T8] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 585.007833][ T8] usb 2-1: USB disconnect, device number 85 [ 585.425801][T15552] Cannot find map_set index 0 as target [ 585.644822][T15556] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2384'. [ 585.654140][T15556] x_tables: ip_tables: udp match: only valid for protocol 17 [ 585.792501][T15561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.822134][T15561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.914382][T15568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.955701][T15568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.993807][ T8] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 586.087679][T15571] loop2: detected capacity change from 0 to 2 [ 586.101999][T15571] Dev loop2: unable to read RDB block 2 [ 586.124326][T15571] loop2: unable to read partition table [ 586.132601][T15571] loop2: partition table beyond EOD, truncated [ 586.146725][T15571] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 586.165483][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.191495][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 586.243711][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 586.253756][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 586.266783][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.275878][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.317513][ T8] usb 2-1: config 0 descriptor?? [ 586.772181][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 586.778303][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 586.805610][ T8] usb 2-1: USB disconnect, device number 86 [ 587.280430][T15590] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2393'. [ 587.293162][T15590] 0ªX¹¦À: renamed from caif0 [ 587.312650][T15590] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 587.598070][T13374] bond0: (slave syz_tun): Releasing backup interface [ 587.907457][ T954] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.065184][T15602] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 ! [ 588.236820][ T954] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.304551][T15614] loop2: detected capacity change from 0 to 7 [ 588.311436][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2407'. [ 588.325429][T15618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2405'. [ 588.343950][T15614] Dev loop2: unable to read RDB block 7 [ 588.351812][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2407'. [ 588.352999][T15614] loop2: unable to read partition table [ 588.375746][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 588.388016][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 588.389287][T15614] loop2: partition table beyond EOD, [ 588.396173][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 588.396892][T15614] truncated [ 588.403458][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 588.408981][T15614] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 588.414387][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 588.438146][T13384] bond0: (slave syz_tun): Releasing backup interface [ 588.449821][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 588.464569][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 588.482040][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 588.489538][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 588.498282][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 588.506205][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 588.523505][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 588.787166][ T954] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.868772][T15623] input: syz1 as /devices/virtual/input/input63 [ 589.112543][ T954] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.371984][T15635] IPVS: Scheduler module ip_vs_ not found [ 589.397439][T15639] vlan0: entered allmulticast mode [ 589.414706][T15639] mac80211_hwsim hwsim68 wlan1: entered allmulticast mode [ 589.430813][T15639] mac80211_hwsim hwsim68 wlan1: left allmulticast mode [ 589.509271][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.520755][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.524044][T15646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2416'. [ 589.529704][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.543918][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 589.545361][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 589.561597][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 589.569217][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.636861][T15621] chnl_net:caif_netlink_parms(): no params data found [ 589.827116][ T954] bridge_slave_1: left allmulticast mode [ 589.832977][T15658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.864792][ T954] bridge_slave_1: left promiscuous mode [ 589.870668][T15658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.885330][ T954] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.904424][ T954] bridge_slave_0: left allmulticast mode [ 589.914558][ T954] bridge_slave_0: left promiscuous mode [ 589.922612][ T954] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.973742][ T5285] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 590.143798][ T5285] usb 3-1: Using ep0 maxpacket: 32 [ 590.165452][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.186436][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.205013][ T5285] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 590.220628][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.252098][ T5285] usb 3-1: config 0 descriptor?? [ 590.285186][ T5285] hub 3-1:0.0: USB hub found [ 590.492808][ T5285] hub 3-1:0.0: 1 port detected [ 590.569574][ T54] Bluetooth: hci2: command tx timeout [ 590.574875][T15678] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2421'. [ 590.633775][ T8] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 590.684672][ T954] batman_adv: batadv0: Removing interface: geneve2 [ 590.718635][T15678] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2421'. [ 590.786887][T15678] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2421'. [ 590.798051][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 590.815307][ T8] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 590.832435][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.854478][ T8] usb 1-1: Product: syz [ 590.858725][ T8] usb 1-1: Manufacturer: syz [ 590.863360][ T8] usb 1-1: SerialNumber: syz [ 590.872629][ T8] usb 1-1: config 0 descriptor?? [ 590.886617][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 590.892598][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 590.893787][T15683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.905554][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 590.930603][T15683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.985014][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'. [ 591.096332][ T954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.101390][T15662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2420'. [ 591.122821][ T954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.202746][T15684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.212349][ T954] bond0 (unregistering): Released all slaves [ 591.228173][T15684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.309200][ T954] tipc: Left network mode [ 591.366845][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'. [ 591.403324][ T8] gspca_vc032x: reg_w err -71 [ 591.408220][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.415416][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.420792][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.446275][T15621] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.453843][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.459152][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.486532][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.492241][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.493764][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.497946][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.523650][T15621] bridge_slave_0: entered allmulticast mode [ 591.523895][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.530806][T15621] bridge_slave_0: entered promiscuous mode [ 591.559086][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.580425][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.600786][T15621] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.608058][ T54] Bluetooth: hci4: command tx timeout [ 591.628165][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.638007][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.654141][T15621] bridge_slave_1: entered allmulticast mode [ 591.655305][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.664339][T15621] bridge_slave_1: entered promiscuous mode [ 591.674027][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.686573][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.691924][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.697736][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.703132][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.709257][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.715170][ T8] gspca_vc032x: Unknown sensor... [ 591.720722][ T8] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 591.775776][ T8] usb 1-1: USB disconnect, device number 103 [ 591.940352][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2423'. [ 592.179030][T15621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.429794][ T4616] usb 3-1: USB disconnect, device number 96 [ 592.455281][T15621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.545243][T14421] bond0: (slave syz_tun): Releasing backup interface [ 592.623336][T15621] team0: Port device team_slave_0 added [ 592.641134][ T954] hsr_slave_0: left promiscuous mode [ 592.653777][ T54] Bluetooth: hci2: command tx timeout [ 592.664675][ T954] hsr_slave_1: left promiscuous mode [ 592.677580][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.685233][ T954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.724950][ T954] dummy0: left promiscuous mode [ 592.730361][ T954] macvlan0: left promiscuous mode [ 592.736561][ T954] veth1_macvtap: left promiscuous mode [ 592.742462][ T954] veth0_macvtap: left promiscuous mode [ 592.748122][ T954] veth1_vlan: left promiscuous mode [ 592.753506][ T954] veth0_vlan: left promiscuous mode [ 593.030481][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 593.044995][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 593.055759][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.064052][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.073491][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 593.084242][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 593.352981][T15725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.362727][T15725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.694983][ T5245] Bluetooth: hci4: command tx timeout [ 593.864071][ T954] team0 (unregistering): Port device team_slave_1 removed [ 594.019393][ T954] team0 (unregistering): Port device team_slave_0 removed [ 594.640776][T15621] team0: Port device team_slave_1 added [ 594.724610][ T5245] Bluetooth: hci2: command tx timeout [ 594.736213][T15651] chnl_net:caif_netlink_parms(): no params data found [ 594.766533][T15621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.773870][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.811470][T15621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.880501][T15621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.889742][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.968570][T15621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.182076][T15621] hsr_slave_0: entered promiscuous mode [ 595.202983][T15621] hsr_slave_1: entered promiscuous mode [ 595.213828][ T5245] Bluetooth: hci0: command tx timeout [ 595.225696][T15621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.246206][T15621] Cannot create hsr debugfs directory [ 595.356587][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.383539][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.403949][T15651] bridge_slave_0: entered allmulticast mode [ 595.419606][T15651] bridge_slave_0: entered promiscuous mode [ 595.438342][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.452384][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.460218][T15651] bridge_slave_1: entered allmulticast mode [ 595.483346][T15651] bridge_slave_1: entered promiscuous mode [ 595.612821][T15749] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 595.661137][T15749] kvm: pic: level sensitive irq not supported [ 595.661356][T15749] kvm: pic: non byte read [ 595.697469][T15749] kvm: pic: level sensitive irq not supported [ 595.697538][T15749] kvm: pic: non byte read [ 595.708540][T15749] kvm: pic: level sensitive irq not supported [ 595.708641][T15749] kvm: pic: non byte read [ 595.719721][T15749] kvm: pic: level sensitive irq not supported [ 595.719804][T15749] kvm: pic: non byte read [ 595.738420][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.763665][ T5245] Bluetooth: hci4: command tx timeout [ 595.802041][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.972165][T15651] team0: Port device team_slave_0 added [ 595.992927][T15651] team0: Port device team_slave_1 added [ 596.097544][ T954] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.201285][T15720] chnl_net:caif_netlink_parms(): no params data found [ 596.328270][ T954] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.386966][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.401280][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.512122][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.649763][ T954] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.704351][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.711338][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.773602][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.804860][ T5245] Bluetooth: hci2: command tx timeout [ 596.905715][ T954] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.065034][ T4616] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 597.090545][T15651] hsr_slave_0: entered promiscuous mode [ 597.098307][T15651] hsr_slave_1: entered promiscuous mode [ 597.104568][T15651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.112227][T15651] Cannot create hsr debugfs directory [ 597.135346][T15720] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.142687][T15720] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.150187][T15720] bridge_slave_0: entered allmulticast mode [ 597.158609][T15720] bridge_slave_0: entered promiscuous mode [ 597.219432][T15720] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.227598][ T4616] usb 3-1: Using ep0 maxpacket: 32 [ 597.232849][T15720] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.248245][T15720] bridge_slave_1: entered allmulticast mode [ 597.256223][ T4616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.264525][T15720] bridge_slave_1: entered promiscuous mode [ 597.275954][ T4616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.286391][ T4616] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 597.293687][ T5245] Bluetooth: hci0: command tx timeout [ 597.295603][ T4616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.310841][ T4616] usb 3-1: config 0 descriptor?? [ 597.332441][ T4616] hub 3-1:0.0: USB hub found [ 597.420375][T15720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.471116][T15720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.538594][ T4616] hub 3-1:0.0: 1 port detected [ 597.617191][ T954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.647340][T15720] team0: Port device team_slave_0 added [ 597.696187][T15720] team0: Port device team_slave_1 added [ 597.741938][ T954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.772874][T15720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.788236][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.814123][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.821029][T15720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.843652][ T5245] Bluetooth: hci4: command tx timeout [ 597.878392][ T954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.932346][T15720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.940340][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.968336][T15720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.040558][ T954] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.270209][T15720] hsr_slave_0: entered promiscuous mode [ 598.311473][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.322900][T15720] hsr_slave_1: entered promiscuous mode [ 598.353287][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.373937][T15720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.381533][T15720] Cannot create hsr debugfs directory [ 598.538398][T15621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 598.556720][T15621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 598.700753][T15621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 598.711179][T15621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 598.768228][ T954] bridge_slave_1: left allmulticast mode [ 598.775062][ T954] bridge_slave_1: left promiscuous mode [ 598.781527][ T954] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.795974][ T954] bridge_slave_0: left allmulticast mode [ 598.801647][ T954] bridge_slave_0: left promiscuous mode [ 598.808690][ T954] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.836694][ T954] team0: left allmulticast mode [ 598.845810][ T954] team_slave_0: left allmulticast mode [ 598.858359][ T954] team_slave_1: left allmulticast mode [ 598.874490][ T954] bridge0: port 3(team0) entered disabled state [ 598.897208][ T954] bridge_slave_1: left allmulticast mode [ 598.902901][ T954] bridge_slave_1: left promiscuous mode [ 598.910969][ T954] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.929589][ T954] bridge_slave_0: left allmulticast mode [ 598.939821][ T954] bridge_slave_0: left promiscuous mode [ 598.954933][ T954] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.373838][ T5245] Bluetooth: hci0: command tx timeout [ 599.501329][ T5285] usb 3-1: USB disconnect, device number 97 [ 600.175894][ T954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.192773][ T954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.216818][ T954] bond0 (unregistering): Released all slaves [ 600.233515][ T954] bond1 (unregistering): Released all slaves [ 600.383107][ T954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.394511][ T954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.407293][ T954] bond0 (unregistering): Released all slaves [ 600.440767][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'. [ 600.473173][T15825] syzkaller1: entered promiscuous mode [ 600.495552][T15825] syzkaller1: entered allmulticast mode [ 600.593676][ T8] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 600.748251][ T8] usb 3-1: device descriptor read/64, error -71 [ 600.829942][T15838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.861023][T15838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.004034][ T8] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 601.044898][T15621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.107615][T15651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 601.145965][ T8] usb 3-1: device descriptor read/64, error -71 [ 601.162954][ T954] hsr_slave_0: left promiscuous mode [ 601.170345][ T954] hsr_slave_1: left promiscuous mode [ 601.182944][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.190893][ T954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.201428][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.223304][ T954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.243792][ T954] hsr_slave_0: left promiscuous mode [ 601.249754][ T954] hsr_slave_1: left promiscuous mode [ 601.257994][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.266246][ T954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.274023][ T8] usb usb3-port1: attempt power cycle [ 601.274489][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.287700][ T954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.352355][ T954] veth1_macvtap: left promiscuous mode [ 601.362375][ T954] veth0_macvtap: left promiscuous mode [ 601.371200][ T954] veth1_vlan: left promiscuous mode [ 601.376717][ T954] veth0_vlan: left promiscuous mode [ 601.391825][ T954] veth1_macvtap: left promiscuous mode [ 601.398648][ T954] veth0_macvtap: left promiscuous mode [ 601.411940][ T954] veth1_vlan: left promiscuous mode [ 601.417792][ T954] veth0_vlan: left promiscuous mode [ 601.443904][ T5245] Bluetooth: hci0: command tx timeout [ 601.614182][ T8] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 601.682778][ T8] usb 3-1: device descriptor read/8, error -71 [ 601.935818][ T8] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 601.972129][ T8] usb 3-1: device descriptor read/8, error -71 [ 602.084784][ T8] usb usb3-port1: unable to enumerate USB device [ 602.436888][T15876] netlink: 'syz.3.2455': attribute type 27 has an invalid length. [ 602.459056][ T954] team0 (unregistering): Port device team_slave_1 removed [ 602.531294][ T954] team0 (unregistering): Port device team_slave_0 removed [ 603.422853][ T954] team_slave_1 (unregistering): left promiscuous mode [ 603.432730][ T954] team0 (unregistering): Port device team_slave_1 removed [ 603.475072][ T954] team_slave_0 (unregistering): left promiscuous mode [ 603.490942][ T954] team0 (unregistering): Port device team_slave_0 removed [ 603.922290][T15651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 604.011201][T15651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 604.026310][T15651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 604.045434][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.049344][T15621] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.067484][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.133112][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.140243][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.214971][T12335] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.222089][T12335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.343715][ T5279] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 604.485795][T15621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.508017][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.515279][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 604.543478][ T5279] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 604.560847][T15651] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.577889][ T5279] usb 3-1: config 179 has no interface number 0 [ 604.595891][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 604.607981][T15720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 604.613802][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 604.652596][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 604.668859][T15720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 604.679724][ T5279] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 604.708937][ T5279] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 604.713355][T15720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 604.763341][ T5279] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 604.788069][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.793155][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.803207][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.812773][T15885] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 604.831871][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.835837][ T5279] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 604.838994][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.878586][T15720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.975576][T15621] veth0_vlan: entered promiscuous mode [ 605.081893][T15621] veth1_vlan: entered promiscuous mode [ 605.100221][ T954] IPVS: stop unused estimator thread 0... [ 605.114336][T15907] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 605.219294][T15621] veth0_macvtap: entered promiscuous mode [ 605.240498][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.267022][T15621] veth1_macvtap: entered promiscuous mode [ 605.312094][T15720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.358439][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.406117][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.418148][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.428730][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.438851][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.449440][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.460431][T15621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.512239][T15720] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.535354][ T954] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.542406][ T954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.581705][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.609400][T15916] IPVS: Scheduler module ip_vs_ not found [ 605.618941][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.653914][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.683358][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.701858][T15621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.716481][T15621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.729730][T15621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.742696][T15651] veth0_vlan: entered promiscuous mode [ 605.756768][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.763914][ T954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.784911][T15922] batman_adv: batadv0: Adding interface: geneve2 [ 605.792617][T15922] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 605.819209][T15651] veth1_vlan: entered promiscuous mode [ 605.837909][T15621] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.851909][T15621] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.861176][T15621] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.875231][T15621] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.900257][T15720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.936501][T15651] veth0_macvtap: entered promiscuous mode [ 605.971582][T15651] veth1_macvtap: entered promiscuous mode [ 606.117598][T15720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.188586][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.222662][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.257203][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.286171][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.311253][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.339776][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.373658][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.415451][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.457288][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.488432][ T3710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.540291][ T3710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.581359][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.620637][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.652011][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.709200][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.749062][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.781142][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.826749][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.868996][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.899703][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.975810][T15720] veth0_vlan: entered promiscuous mode [ 606.988779][T15651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.002167][T15651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.013187][T15651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.022199][T15651] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.048407][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.062014][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.095317][T15720] veth1_vlan: entered promiscuous mode [ 607.171845][ T5285] usb 3-1: USB disconnect, device number 102 [ 607.464414][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.470183][T15720] veth0_macvtap: entered promiscuous mode [ 607.472243][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.537125][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 607.572391][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.593248][T15720] veth1_macvtap: entered promiscuous mode [ 607.628435][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.677028][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.703966][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.729144][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.748522][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.794835][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.819123][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.840502][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.854879][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.864861][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.876093][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.888894][T15720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.956578][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.992767][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.003402][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.023183][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.042039][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.052719][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.065215][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.075919][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.086329][T15720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.097484][T15720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.112004][T15720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.176934][T15720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.208586][T15720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.229648][T15720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.243063][T15720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.681535][T12335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.690049][T12335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.876033][T15997] IPVS: Scheduler module ip_vs_ not found [ 608.961225][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.970935][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.367061][T16013] ptrace attach of "./syz-executor exec"[16025] was attempted by "./syz-executor exec"[16013] [ 609.402997][T16027] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 609.413689][ T8] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 609.437538][T16027] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 609.493782][ T5283] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 609.504500][T16030] binder: BINDER_SET_CONTEXT_MGR already set [ 609.545784][T16030] binder: 16029:16030 ioctl 4018620d 20000100 returned -16 [ 609.582793][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 609.597617][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 609.613939][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.644715][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.684484][ T5283] usb 2-1: config 27 has an invalid descriptor of length 31, skipping remainder of the config [ 609.714809][ T5283] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 609.743765][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 45600, setting to 1024 [ 609.768455][ T5283] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.788040][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 609.803672][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.811919][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.828135][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 609.838488][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.963942][T14140] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 610.051241][ T5283] usb 2-1: USB disconnect, device number 87 [ 610.141300][T14140] usb 1-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 610.150476][T14140] usb 1-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 610.165494][T14140] usb 1-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 610.181445][T14140] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 610.199170][T14140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.258834][ T8] usb 5-1: usb_control_msg returned -71 [ 610.294791][ T8] usbtmc 5-1:16.0: can't read capabilities [ 610.305977][ T8] usb 5-1: USB disconnect, device number 104 [ 610.318592][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 611.164347][ T8] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 611.306052][T16069] tipc: Started in network mode [ 611.319580][T16069] tipc: Node identity 003a0000000000000000000000002d01, cluster identity 4711 [ 611.329029][T16069] tipc: Enabling of bearer rejected, failed to enable media [ 611.374279][T13621] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 611.394642][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 611.403278][ T8] usb 2-1: config 0 has an invalid interface number: 84 but max is 1 [ 611.412173][ T8] usb 2-1: config 0 has an invalid interface number: 84 but max is 1 [ 611.429444][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.477826][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 611.502550][ T8] usb 2-1: config 0 has no interface number 0 [ 611.510255][ T8] usb 2-1: config 0 interface 84 has no altsetting 1 [ 611.528752][ T8] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=6c.3e [ 611.538451][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.547839][T13621] usb 5-1: Using ep0 maxpacket: 8 [ 611.575195][ T8] usb 2-1: Product: syz [ 611.586403][T13621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.600072][ T8] usb 2-1: Manufacturer: syz [ 611.614382][T13621] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.628011][ T8] usb 2-1: SerialNumber: syz [ 611.646677][ T8] usb 2-1: config 0 descriptor?? [ 611.657467][T13621] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 611.679450][T13621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.710254][T13621] usb 5-1: config 0 descriptor?? [ 611.731548][T13621] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 611.771752][T16076] netlink: 'syz.2.2490': attribute type 27 has an invalid length. [ 611.931876][T16067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.956574][T16067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.976242][ T5291] usb 5-1: USB disconnect, device number 105 [ 612.080521][T16083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2492'. [ 612.569985][ T5305] usb 2-1: USB disconnect, device number 88 [ 612.754756][T14140] usb 1-1: string descriptor 0 read error: -71 [ 612.762243][T14140] usb 1-1: USB disconnect, device number 104 [ 613.093746][ T5305] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 613.268221][ T5305] usb 2-1: Using ep0 maxpacket: 8 [ 613.278329][ T5305] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 613.286798][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 613.300320][ T5305] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.312284][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 613.323577][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 613.351887][ T5305] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 613.359959][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 613.371564][ T5305] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.399428][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 613.412887][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 613.435751][ T5305] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 613.448804][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 613.473209][ T5305] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.505836][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 613.540730][T16104] input: syz0 as /devices/virtual/input/input64 [ 613.545471][ T5305] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 613.596591][ T5305] usb 2-1: string descriptor 0 read error: -22 [ 613.603119][ T5305] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 613.613854][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.671684][ T5305] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 613.753329][T16087] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 613.769840][T16113] batman_adv: batadv0: Adding interface: geneve2 [ 613.789141][ T5305] IPVS: starting estimator thread 0... [ 613.789428][T16113] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 613.905188][T16114] IPVS: using max 18 ests per chain, 43200 per kthread [ 614.399688][T16129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2502'. [ 614.576556][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.597188][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.614302][T16139] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2505'. [ 614.637772][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 614.662258][T16136] netlink: 'syz.2.2505': attribute type 29 has an invalid length. [ 614.674441][T16137] netlink: 'syz.2.2505': attribute type 29 has an invalid length. [ 614.947162][ T3710] IPVS: stop unused estimator thread 0... [ 615.001032][T16146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2508'. [ 615.424895][ T5305] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 615.433751][ T5283] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 615.598105][ T5305] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 615.603727][T13621] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 615.611894][T13621] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 615.619847][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 615.625223][ T5245] Bluetooth: hci2: command 0x0c1a tx timeout [ 615.627334][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 615.643127][ T5305] usb 5-1: can't read configurations, error -61 [ 615.709452][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 615.723153][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 615.746374][T16141] syz.0.2504 (16141): drop_caches: 2 [ 615.757384][ T5283] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 615.770991][T14140] usb 2-1: USB disconnect, device number 89 [ 615.777908][ T5305] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 615.785768][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.873367][ T5283] usb 3-1: config 0 descriptor?? [ 615.905979][T16152] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 615.938103][ T5283] hub 3-1:0.0: USB hub found [ 615.966243][ T5305] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 615.974356][ T5305] usb 5-1: can't read configurations, error -61 [ 616.012657][ T5305] usb usb5-port1: attempt power cycle [ 616.344840][ T5283] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 616.383697][ T5305] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 616.416254][ T5305] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 616.429033][ T5305] usb 5-1: can't read configurations, error -61 [ 616.559580][ T5283] usbhid 3-1:0.0: can't add hid device: -32 [ 616.565807][ T5283] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 616.574018][ T5305] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 616.610490][ T5305] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 616.619023][ T5305] usb 5-1: can't read configurations, error -61 [ 616.626249][ T5305] usb usb5-port1: unable to enumerate USB device [ 617.317621][T16165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.364619][T16165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.432286][T16165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.466013][T16165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.644601][ T937] usb 3-1: USB disconnect, device number 103 [ 617.683771][ T5245] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.700592][T13621] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 617.706982][T13621] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 617.827530][T16173] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2515'. [ 618.015185][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 619.162966][ T1121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.279997][ T1121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.284289][ T937] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 619.389191][ T1121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.463894][ T937] usb 2-1: Using ep0 maxpacket: 8 [ 619.470549][ T937] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 619.478442][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.494936][ T937] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.496505][ T1121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.523939][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.549956][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 619.562586][ T937] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 619.578569][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.590001][ T937] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.602931][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.619501][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 619.652325][ T937] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 619.668524][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 619.691592][ T1121] team0: left allmulticast mode [ 619.698420][ T1121] team_slave_0: left allmulticast mode [ 619.699357][ T937] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.705269][ T1121] team_slave_1: left allmulticast mode [ 619.722370][ T1121] bridge0: port 3(team0) entered disabled state [ 619.723948][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 619.740712][ T937] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 619.753137][ T1121] bridge_slave_1: left allmulticast mode [ 619.755327][ T937] usb 2-1: string descriptor 0 read error: -22 [ 619.761606][ T1121] bridge_slave_1: left promiscuous mode [ 619.771250][ T937] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 619.771327][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.780510][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.803300][ T1121] bridge_slave_0: left allmulticast mode [ 619.809700][ T937] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 619.811135][ T1121] bridge_slave_0: left promiscuous mode [ 619.830422][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.843915][T13621] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 619.850143][T13621] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 620.305289][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.320063][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.332627][ T1121] bond0 (unregistering): Released all slaves [ 620.459924][ T1121] tipc: Left network mode [ 620.651709][T16229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2534'. [ 620.696250][T16228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.719241][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2534'. [ 620.740787][T16228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.907812][ T1121] hsr_slave_0: left promiscuous mode [ 620.918761][T16239] input: syz0 as /devices/virtual/input/input65 [ 620.947190][ T1121] hsr_slave_1: left promiscuous mode [ 620.986512][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.024426][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.057587][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.075633][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.192773][ T1121] veth1_macvtap: left promiscuous mode [ 621.214314][ T1121] veth0_macvtap: left promiscuous mode [ 621.266182][ T1121] veth1_vlan: left promiscuous mode [ 621.278544][ T1121] veth0_vlan: left promiscuous mode [ 621.591458][T16255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.671827][T16255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.697945][T16264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2541'. [ 621.772629][T16258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.886793][T16258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.054311][ T5305] usb 2-1: USB disconnect, device number 90 [ 622.508398][ T1121] team_slave_1 (unregistering): left promiscuous mode [ 622.518905][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 622.559237][ T1121] team_slave_0 (unregistering): left promiscuous mode [ 622.563746][ T5305] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 622.580341][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 622.735776][ T5305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.749955][ T5305] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.759102][ T5305] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 622.768525][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.790751][ T5305] usb 2-1: config 0 descriptor?? [ 623.170552][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.188804][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 623.197145][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 623.223675][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 623.231330][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 623.240864][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 623.363432][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.381056][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 623.390575][T16283] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 623.404120][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 623.453969][T16296] FAULT_INJECTION: forcing a failure. [ 623.453969][T16296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.482980][T16296] CPU: 1 UID: 0 PID: 16296 Comm: syz.4.2547 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 623.493771][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 623.503823][T16296] Call Trace: [ 623.507097][T16296] [ 623.510034][T16296] dump_stack_lvl+0x241/0x360 [ 623.514711][T16296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.519901][T16296] ? __pfx__printk+0x10/0x10 [ 623.524493][T16296] ? __pfx_lock_release+0x10/0x10 [ 623.529520][T16296] should_fail_ex+0x3b0/0x4e0 [ 623.534200][T16296] _copy_from_user+0x2f/0xe0 [ 623.538788][T16296] copy_msghdr_from_user+0xae/0x680 [ 623.543986][T16296] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 623.549798][T16296] __sys_sendmsg+0x22d/0x380 [ 623.554385][T16296] ? __pfx___sys_sendmsg+0x10/0x10 [ 623.559496][T16296] ? __pfx_vfs_write+0x10/0x10 [ 623.564272][T16296] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 623.570598][T16296] ? do_syscall_64+0x100/0x230 [ 623.575358][T16296] ? do_syscall_64+0xb6/0x230 [ 623.580027][T16296] do_syscall_64+0xf3/0x230 [ 623.584524][T16296] ? clear_bhb_loop+0x35/0x90 [ 623.589194][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.595089][T16296] RIP: 0033:0x7f2ea897dff9 [ 623.599502][T16296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.619109][T16296] RSP: 002b:00007f2ea97c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.627521][T16296] RAX: ffffffffffffffda RBX: 00007f2ea8b35f80 RCX: 00007f2ea897dff9 [ 623.635486][T16296] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 623.643447][T16296] RBP: 00007f2ea97c8090 R08: 0000000000000000 R09: 0000000000000000 [ 623.651408][T16296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.659370][T16296] R13: 0000000000000000 R14: 00007f2ea8b35f80 R15: 00007f2ea8c5fa28 [ 623.667344][T16296] [ 623.703972][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 623.712093][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 623.733473][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 624.020455][T16313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.069317][T16313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.106630][T16315] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 624.165443][T16313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.258097][T16313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.291064][T16302] chnl_net:caif_netlink_parms(): no params data found [ 624.487564][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.494258][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.542011][ T1121] IPVS: stop unused estimator thread 0... [ 625.143289][T16341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.159419][T16302] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.161771][ T5303] usb 2-1: USB disconnect, device number 91 [ 625.166765][T16302] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.179976][T16302] bridge_slave_0: entered allmulticast mode [ 625.187068][T16302] bridge_slave_0: entered promiscuous mode [ 625.195749][T16302] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.202848][T16302] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.210338][T16302] bridge_slave_1: entered allmulticast mode [ 625.211626][T16341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.217362][T16302] bridge_slave_1: entered promiscuous mode [ 625.309156][T16302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.334524][T16343] vlan4: entered promiscuous mode [ 625.345038][T16343] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 625.364616][T16343] vlan4: entered allmulticast mode [ 625.369775][T16343] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 625.396932][T16343] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 625.404416][T16343] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 625.466334][T16302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.554521][T16302] team0: Port device team_slave_0 added [ 625.562702][T16302] team0: Port device team_slave_1 added [ 625.631764][T16353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2558'. [ 625.662068][T16353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2558'. [ 625.764039][ T5245] Bluetooth: hci3: command tx timeout [ 626.069141][T16368] IPVS: Scheduler module ip_vs_ not found [ 626.096441][T16372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.115742][T16302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.122778][T16302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.182410][T16302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.195520][T16372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.228831][T16374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 626.290141][T16302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.308949][T16302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.391627][T16302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.558956][T16387] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 626.603422][T16302] hsr_slave_0: entered promiscuous mode [ 626.664079][T16302] hsr_slave_1: entered promiscuous mode [ 626.824794][T16393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2563'. [ 627.849236][ T5245] Bluetooth: hci3: command tx timeout [ 628.033664][ T8] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 628.151735][T16426] loop2: detected capacity change from 0 to 7 [ 628.174050][T16426] Dev loop2: unable to read RDB block 7 [ 628.219246][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.222363][T16426] loop2: unable to read partition table [ 628.234234][T16426] loop2: partition table beyond EOD, truncated [ 628.240713][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 628.240726][T16426] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 628.273952][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.300835][T16302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 628.319914][ T8] usb 2-1: config 0 descriptor?? [ 628.350083][T16302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 628.383438][T16302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 628.417242][T16302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.582228][T16302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.628436][T16302] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.652405][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.659610][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.702708][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.709845][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.842731][T16302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.949124][T16382] x_tables: duplicate underflow at hook 3 [ 628.975146][ T8] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 628.997332][T16302] veth0_vlan: entered promiscuous mode [ 629.019927][T16302] veth1_vlan: entered promiscuous mode [ 629.092376][T16302] veth0_macvtap: entered promiscuous mode [ 629.125892][T16302] veth1_macvtap: entered promiscuous mode [ 629.136517][ T8] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 629.164339][ T8] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 629.182293][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.200112][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 629.209380][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.219566][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.228805][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.239449][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.249408][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.259875][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.269842][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.283952][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.293859][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.304486][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.315745][T16302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.325236][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.335910][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.356596][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.370448][ T8] usb 5-1: config 0 descriptor?? [ 629.376201][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.386231][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.396815][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.407274][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.418051][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.428233][T16302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.438743][T16302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.450321][T16302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.496402][T16302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.514985][T16302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.524106][T16302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.532811][T16302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.618604][T16432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.637160][T16432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.658096][ T5285] usb 5-1: USB disconnect, device number 110 [ 629.753830][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.761686][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.867186][ T954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.910007][ T954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.924083][ T5245] Bluetooth: hci3: command tx timeout [ 630.230778][T16465] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 630.280811][T16465] vlan4: entered promiscuous mode [ 630.299002][T16465] vlan4: entered allmulticast mode [ 630.313857][T16465] xfrm0: entered allmulticast mode [ 630.327785][T16465] xfrm0: entered promiscuous mode [ 630.380383][T16465] team0: Port device vlan4 added [ 630.423758][T13621] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 630.584730][T13621] usb 3-1: Using ep0 maxpacket: 8 [ 630.606503][T13621] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 630.634881][ T5303] usb 2-1: USB disconnect, device number 92 [ 630.641908][T13621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.653074][T13621] usb 3-1: Product: syz [ 630.684648][T13621] usb 3-1: Manufacturer: syz [ 630.700588][T13621] usb 3-1: SerialNumber: syz [ 630.722760][T13621] usb 3-1: config 0 descriptor?? [ 630.957657][T13621] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 631.464787][T16499] netlink: 'syz.1.2576': attribute type 10 has an invalid length. [ 631.483672][T16499] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2576'. [ 631.536803][T13621] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 631.565166][T16499] team0: entered promiscuous mode [ 631.574683][T16499] team_slave_0: entered promiscuous mode [ 631.580488][T16499] team_slave_1: entered promiscuous mode [ 631.591188][T13621] usb 3-1: USB disconnect, device number 104 [ 631.591313][T16511] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 631.604935][T16499] bridge0: port 3(team0) entered blocking state [ 631.628741][T16499] bridge0: port 3(team0) entered disabled state [ 631.651697][T16499] team0: entered allmulticast mode [ 631.657010][T16499] team_slave_0: entered allmulticast mode [ 631.662792][T16499] team_slave_1: entered allmulticast mode [ 631.674726][T16499] bridge0: port 3(team0) entered blocking state [ 631.681073][T16499] bridge0: port 3(team0) entered forwarding state [ 631.847775][T16509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 631.875328][T16527] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 631.922343][T16517] wireguard: wg0: Could not create IPv4 socket [ 632.005452][ T5245] Bluetooth: hci3: command tx timeout [ 632.066770][T16528] [ 632.069128][T16528] ===================================================== [ 632.076057][T16528] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 632.083495][T16528] 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 Not tainted [ 632.090593][T16528] ----------------------------------------------------- [ 632.097528][T16528] syz.4.2580/16528 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 632.105253][T16528] ffffffff8e60a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0x108/0x390 [ 632.113876][T16528] [ 632.113876][T16528] and this task is already holding: [ 632.121225][T16528] ffff888024eaf5a0 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 632.129838][T16528] which would create a new lock dependency: [ 632.135709][T16528] (&f_owner->lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 632.143275][T16528] [ 632.143275][T16528] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 632.152708][T16528] (&dev->event_lock#2){..-.}-{2:2} [ 632.152740][T16528] [ 632.152740][T16528] ... which became SOFTIRQ-irq-safe at: [ 632.165606][T16528] lock_acquire+0x1ed/0x550 [ 632.170190][T16528] _raw_spin_lock_irqsave+0xd5/0x120 [ 632.175556][T16528] input_inject_event+0xc5/0x340 [ 632.180574][T16528] kd_sound_helper+0x101/0x210 [ 632.185419][T16528] input_handler_for_each_handle+0x103/0x1d0 [ 632.191476][T16528] call_timer_fn+0x18e/0x650 [ 632.196145][T16528] __run_timer_base+0x66a/0x8e0 [ 632.201071][T16528] run_timer_softirq+0xb7/0x170 [ 632.205995][T16528] handle_softirqs+0x2c5/0x980 [ 632.210844][T16528] __irq_exit_rcu+0xf4/0x1c0 [ 632.215509][T16528] irq_exit_rcu+0x9/0x30 [ 632.219832][T16528] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 632.225542][T16528] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 632.231597][T16528] acpi_safe_halt+0x21/0x30 [ 632.236176][T16528] acpi_idle_enter+0xe4/0x140 [ 632.240932][T16528] cpuidle_enter_state+0x109/0x470 [ 632.246115][T16528] cpuidle_enter+0x5d/0xa0 [ 632.250603][T16528] do_idle+0x375/0x5d0 [ 632.254747][T16528] cpu_startup_entry+0x42/0x60 [ 632.259584][T16528] start_secondary+0x102/0x110 [ 632.264423][T16528] common_startup_64+0x13e/0x147 [ 632.269436][T16528] [ 632.269436][T16528] to a SOFTIRQ-irq-unsafe lock: [ 632.276435][T16528] (tasklist_lock){.+.+}-{2:2} [ 632.276461][T16528] [ 632.276461][T16528] ... which became SOFTIRQ-irq-unsafe at: [ 632.289063][T16528] ... [ 632.289071][T16528] lock_acquire+0x1ed/0x550 [ 632.296224][T16528] _raw_read_lock+0x36/0x50 [ 632.300803][T16528] __do_wait+0x12d/0x850 [ 632.305121][T16528] do_wait+0x1e9/0x560 [ 632.309264][T16528] kernel_wait+0xe9/0x240 [ 632.313666][T16528] call_usermodehelper_exec_work+0xbd/0x230 [ 632.319633][T16528] process_scheduled_works+0xa63/0x1850 [ 632.325258][T16528] worker_thread+0x870/0xd30 [ 632.329923][T16528] kthread+0x2f0/0x390 [ 632.334065][T16528] ret_from_fork+0x4b/0x80 [ 632.338556][T16528] ret_from_fork_asm+0x1a/0x30 [ 632.343397][T16528] [ 632.343397][T16528] other info that might help us debug this: [ 632.343397][T16528] [ 632.353607][T16528] Chain exists of: [ 632.353607][T16528] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 632.353607][T16528] [ 632.366643][T16528] Possible interrupt unsafe locking scenario: [ 632.366643][T16528] [ 632.374944][T16528] CPU0 CPU1 [ 632.380293][T16528] ---- ---- [ 632.385641][T16528] lock(tasklist_lock); [ 632.389870][T16528] local_irq_disable(); [ 632.396610][T16528] lock(&dev->event_lock#2); [ 632.403801][T16528] lock(&f_owner->lock); [ 632.410639][T16528] [ 632.414076][T16528] lock(&dev->event_lock#2); [ 632.418924][T16528] [ 632.418924][T16528] *** DEADLOCK *** [ 632.418924][T16528] [ 632.427047][T16528] 6 locks held by syz.4.2580/16528: [ 632.432227][T16528] #0: ffff8880641a0420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 632.441368][T16528] #1: ffffffff8eaa3f70 (file_rwsem){++++}-{0:0}, at: __break_lease+0x3b3/0x1820 [ 632.450511][T16528] #2: ffff8880254127a8 (&ctx->flc_lock){+.+.}-{2:2}, at: __break_lease+0x3c0/0x1820 [ 632.459987][T16528] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 632.469031][T16528] #4: ffff888011ed8b40 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 632.478161][T16528] #5: ffff888024eaf5a0 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 632.487204][T16528] [ 632.487204][T16528] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 632.497592][T16528] -> (&dev->event_lock#2){..-.}-{2:2} { [ 632.503320][T16528] IN-SOFTIRQ-W at: [ 632.507462][T16528] lock_acquire+0x1ed/0x550 [ 632.513953][T16528] _raw_spin_lock_irqsave+0xd5/0x120 [ 632.521224][T16528] input_inject_event+0xc5/0x340 [ 632.528148][T16528] kd_sound_helper+0x101/0x210 [ 632.534898][T16528] input_handler_for_each_handle+0x103/0x1d0 [ 632.542864][T16528] call_timer_fn+0x18e/0x650 [ 632.549447][T16528] __run_timer_base+0x66a/0x8e0 [ 632.556283][T16528] run_timer_softirq+0xb7/0x170 [ 632.563117][T16528] handle_softirqs+0x2c5/0x980 [ 632.569873][T16528] __irq_exit_rcu+0xf4/0x1c0 [ 632.576450][T16528] irq_exit_rcu+0x9/0x30 [ 632.582677][T16528] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 632.590301][T16528] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 632.598265][T16528] acpi_safe_halt+0x21/0x30 [ 632.604751][T16528] acpi_idle_enter+0xe4/0x140 [ 632.611412][T16528] cpuidle_enter_state+0x109/0x470 [ 632.618507][T16528] cpuidle_enter+0x5d/0xa0 [ 632.624905][T16528] do_idle+0x375/0x5d0 [ 632.630959][T16528] cpu_startup_entry+0x42/0x60 [ 632.637705][T16528] start_secondary+0x102/0x110 [ 632.644455][T16528] common_startup_64+0x13e/0x147 [ 632.651379][T16528] INITIAL USE at: [ 632.655434][T16528] lock_acquire+0x1ed/0x550 [ 632.661838][T16528] _raw_spin_lock_irqsave+0xd5/0x120 [ 632.669026][T16528] input_inject_event+0xc5/0x340 [ 632.675865][T16528] kbd_led_trigger_activate+0xb8/0x100 [ 632.683225][T16528] led_trigger_set+0x582/0x9c0 [ 632.689883][T16528] led_trigger_set_default+0x229/0x260 [ 632.697238][T16528] led_classdev_register_ext+0x6e6/0x8a0 [ 632.704771][T16528] input_leds_connect+0x489/0x630 [ 632.711693][T16528] input_register_device+0xd3b/0x1110 [ 632.718965][T16528] atkbd_connect+0x752/0xa00 [ 632.725451][T16528] serio_driver_probe+0x7f/0xa0 [ 632.732204][T16528] really_probe+0x2b8/0xad0 [ 632.738603][T16528] __driver_probe_device+0x1a2/0x390 [ 632.745787][T16528] driver_probe_device+0x50/0x430 [ 632.752708][T16528] __driver_attach+0x45f/0x710 [ 632.759365][T16528] bus_for_each_dev+0x239/0x2b0 [ 632.766113][T16528] serio_handle_event+0x1c7/0x920 [ 632.773032][T16528] process_scheduled_works+0xa63/0x1850 [ 632.780478][T16528] worker_thread+0x870/0xd30 [ 632.786970][T16528] kthread+0x2f0/0x390 [ 632.792939][T16528] ret_from_fork+0x4b/0x80 [ 632.799257][T16528] ret_from_fork_asm+0x1a/0x30 [ 632.805925][T16528] } [ 632.808585][T16528] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 632.817774][T16528] -> (&new->fa_lock){....}-{2:2} { [ 632.822980][T16528] INITIAL USE at: [ 632.826946][T16528] lock_acquire+0x1ed/0x550 [ 632.833176][T16528] _raw_write_lock_irq+0xd3/0x120 [ 632.839931][T16528] fasync_remove_entry+0xff/0x1d0 [ 632.846683][T16528] sock_fasync+0x87/0x100 [ 632.852737][T16528] __fput+0x71b/0x880 [ 632.858445][T16528] task_work_run+0x24f/0x310 [ 632.864759][T16528] syscall_exit_to_user_mode+0x168/0x370 [ 632.872117][T16528] do_syscall_64+0x100/0x230 [ 632.878429][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.886062][T16528] INITIAL READ USE at: [ 632.890473][T16528] lock_acquire+0x1ed/0x550 [ 632.897145][T16528] _raw_read_lock_irqsave+0xdd/0x130 [ 632.904602][T16528] kill_fasync+0x199/0x4f0 [ 632.911193][T16528] sock_wake_async+0x147/0x170 [ 632.918127][T16528] sk_wake_async+0x18a/0x290 [ 632.924882][T16528] tcp_rcv_state_process+0x1dda/0x4570 [ 632.932498][T16528] tcp_v6_do_rcv+0x8bc/0x13a0 [ 632.939336][T16528] __release_sock+0x1c8/0x350 [ 632.946175][T16528] release_sock+0x61/0x1f0 [ 632.952752][T16528] tcp_sendmsg+0x3a/0x50 [ 632.959151][T16528] __sock_sendmsg+0xef/0x270 [ 632.965903][T16528] __sys_sendto+0x39b/0x4f0 [ 632.972561][T16528] __x64_sys_sendto+0xde/0x100 [ 632.979483][T16528] do_syscall_64+0xf3/0x230 [ 632.986144][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.994199][T16528] } [ 632.996768][T16528] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 633.005514][T16528] ... acquired at: [ 633.009389][T16528] lock_acquire+0x1ed/0x550 [ 633.014060][T16528] _raw_read_lock_irqsave+0xdd/0x130 [ 633.019512][T16528] kill_fasync+0x199/0x4f0 [ 633.024094][T16528] mousedev_notify_readers+0x719/0xc80 [ 633.029737][T16528] mousedev_event+0x5ca/0x1390 [ 633.034685][T16528] input_handler_events_default+0x107/0x1c0 [ 633.040762][T16528] input_pass_values+0x286/0x860 [ 633.045874][T16528] input_event_dispose+0x30f/0x600 [ 633.051151][T16528] input_handle_event+0xa71/0xbe0 [ 633.056342][T16528] input_inject_event+0x22f/0x340 [ 633.061532][T16528] evdev_write+0x5fd/0x790 [ 633.066109][T16528] vfs_write+0x29c/0xc90 [ 633.070512][T16528] ksys_write+0x183/0x2b0 [ 633.075002][T16528] do_syscall_64+0xf3/0x230 [ 633.079667][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.085732][T16528] [ 633.088044][T16528] -> (&f_owner->lock){....}-{2:2} { [ 633.093273][T16528] INITIAL USE at: [ 633.097165][T16528] lock_acquire+0x1ed/0x550 [ 633.103231][T16528] _raw_write_lock_irq+0xd3/0x120 [ 633.109813][T16528] __f_setown+0x6b/0x380 [ 633.115619][T16528] generic_setlease+0xc74/0x1550 [ 633.122112][T16528] fcntl_setlease+0x404/0x540 [ 633.128346][T16528] do_fcntl+0x69d/0x1a60 [ 633.134143][T16528] __se_sys_fcntl+0xd2/0x1e0 [ 633.140287][T16528] do_syscall_64+0xf3/0x230 [ 633.146343][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.153792][T16528] INITIAL READ USE at: [ 633.158112][T16528] lock_acquire+0x1ed/0x550 [ 633.164608][T16528] _raw_read_lock_irqsave+0xdd/0x130 [ 633.171881][T16528] send_sigio+0x37/0x390 [ 633.178111][T16528] kill_fasync+0x256/0x4f0 [ 633.184515][T16528] lease_break_callback+0x26/0x30 [ 633.191527][T16528] __break_lease+0x6d5/0x1820 [ 633.198187][T16528] vfs_truncate+0x26b/0x3b0 [ 633.204678][T16528] do_sys_truncate+0xdb/0x190 [ 633.211334][T16528] do_syscall_64+0xf3/0x230 [ 633.217826][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.225710][T16528] } [ 633.228194][T16528] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 633.237031][T16528] ... acquired at: [ 633.240820][T16528] lock_acquire+0x1ed/0x550 [ 633.245488][T16528] _raw_read_lock_irqsave+0xdd/0x130 [ 633.250938][T16528] send_sigio+0x37/0x390 [ 633.255343][T16528] kill_fasync+0x256/0x4f0 [ 633.259922][T16528] lease_break_callback+0x26/0x30 [ 633.265109][T16528] __break_lease+0x6d5/0x1820 [ 633.269944][T16528] vfs_truncate+0x26b/0x3b0 [ 633.274604][T16528] do_sys_truncate+0xdb/0x190 [ 633.279440][T16528] do_syscall_64+0xf3/0x230 [ 633.284104][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.290162][T16528] [ 633.292470][T16528] [ 633.292470][T16528] the dependencies between the lock to be acquired [ 633.292480][T16528] and SOFTIRQ-irq-unsafe lock: [ 633.305961][T16528] -> (tasklist_lock){.+.+}-{2:2} { [ 633.311081][T16528] HARDIRQ-ON-R at: [ 633.315048][T16528] lock_acquire+0x1ed/0x550 [ 633.321196][T16528] _raw_read_lock+0x36/0x50 [ 633.327341][T16528] __do_wait+0x12d/0x850 [ 633.333219][T16528] do_wait+0x1e9/0x560 [ 633.338923][T16528] kernel_wait+0xe9/0x240 [ 633.344891][T16528] call_usermodehelper_exec_work+0xbd/0x230 [ 633.352422][T16528] process_scheduled_works+0xa63/0x1850 [ 633.359608][T16528] worker_thread+0x870/0xd30 [ 633.365839][T16528] kthread+0x2f0/0x390 [ 633.371546][T16528] ret_from_fork+0x4b/0x80 [ 633.377607][T16528] ret_from_fork_asm+0x1a/0x30 [ 633.384011][T16528] SOFTIRQ-ON-R at: [ 633.387978][T16528] lock_acquire+0x1ed/0x550 [ 633.394123][T16528] _raw_read_lock+0x36/0x50 [ 633.400269][T16528] __do_wait+0x12d/0x850 [ 633.406147][T16528] do_wait+0x1e9/0x560 [ 633.411854][T16528] kernel_wait+0xe9/0x240 [ 633.417823][T16528] call_usermodehelper_exec_work+0xbd/0x230 [ 633.425355][T16528] process_scheduled_works+0xa63/0x1850 [ 633.432548][T16528] worker_thread+0x870/0xd30 [ 633.438778][T16528] kthread+0x2f0/0x390 [ 633.444492][T16528] ret_from_fork+0x4b/0x80 [ 633.450553][T16528] ret_from_fork_asm+0x1a/0x30 [ 633.456959][T16528] INITIAL USE at: [ 633.460842][T16528] lock_acquire+0x1ed/0x550 [ 633.466901][T16528] _raw_write_lock_irq+0xd3/0x120 [ 633.473478][T16528] copy_process+0x2267/0x3d50 [ 633.479712][T16528] kernel_clone+0x226/0x8f0 [ 633.485767][T16528] user_mode_thread+0x132/0x1a0 [ 633.492175][T16528] rest_init+0x23/0x300 [ 633.497883][T16528] start_kernel+0x47f/0x500 [ 633.503937][T16528] x86_64_start_reservations+0x2a/0x30 [ 633.510949][T16528] x86_64_start_kernel+0x9f/0xa0 [ 633.517437][T16528] common_startup_64+0x13e/0x147 [ 633.523928][T16528] INITIAL READ USE at: [ 633.528241][T16528] lock_acquire+0x1ed/0x550 [ 633.534730][T16528] _raw_read_lock+0x36/0x50 [ 633.541220][T16528] __do_wait+0x12d/0x850 [ 633.547447][T16528] do_wait+0x1e9/0x560 [ 633.553498][T16528] kernel_wait+0xe9/0x240 [ 633.559815][T16528] call_usermodehelper_exec_work+0xbd/0x230 [ 633.567699][T16528] process_scheduled_works+0xa63/0x1850 [ 633.575230][T16528] worker_thread+0x870/0xd30 [ 633.581808][T16528] kthread+0x2f0/0x390 [ 633.587860][T16528] ret_from_fork+0x4b/0x80 [ 633.594265][T16528] ret_from_fork_asm+0x1a/0x30 [ 633.601018][T16528] } [ 633.603502][T16528] ... key at: [] tasklist_lock+0x18/0x40 [ 633.611211][T16528] ... acquired at: [ 633.615000][T16528] lock_acquire+0x1ed/0x550 [ 633.619671][T16528] _raw_read_lock+0x36/0x50 [ 633.624337][T16528] send_sigio+0x108/0x390 [ 633.628830][T16528] kill_fasync+0x256/0x4f0 [ 633.633409][T16528] lease_break_callback+0x26/0x30 [ 633.638596][T16528] __break_lease+0x6d5/0x1820 [ 633.643432][T16528] vfs_truncate+0x26b/0x3b0 [ 633.648094][T16528] do_sys_truncate+0xdb/0x190 [ 633.652931][T16528] do_syscall_64+0xf3/0x230 [ 633.657592][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.663649][T16528] [ 633.665958][T16528] [ 633.665958][T16528] stack backtrace: [ 633.671829][T16528] CPU: 1 UID: 0 PID: 16528 Comm: syz.4.2580 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 633.682570][T16528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 633.692610][T16528] Call Trace: [ 633.695881][T16528] [ 633.698798][T16528] dump_stack_lvl+0x241/0x360 [ 633.703464][T16528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.708651][T16528] ? __pfx__printk+0x10/0x10 [ 633.713232][T16528] ? print_shortest_lock_dependencies+0xf2/0x160 [ 633.719550][T16528] validate_chain+0x4ebd/0x5920 [ 633.724399][T16528] ? __pfx_validate_chain+0x10/0x10 [ 633.729586][T16528] ? is_bpf_text_address+0x26/0x2a0 [ 633.734777][T16528] ? __pfx_validate_chain+0x10/0x10 [ 633.739962][T16528] ? kernel_text_address+0xa7/0xe0 [ 633.745061][T16528] ? look_up_lock_class+0x77/0x170 [ 633.750167][T16528] ? __lock_acquire+0x1384/0x2050 [ 633.755185][T16528] ? mark_lock+0x9a/0x360 [ 633.759503][T16528] __lock_acquire+0x1384/0x2050 [ 633.764355][T16528] lock_acquire+0x1ed/0x550 [ 633.768854][T16528] ? send_sigio+0x108/0x390 [ 633.773348][T16528] ? __pfx_lock_acquire+0x10/0x10 [ 633.778367][T16528] ? __pfx_lock_acquire+0x10/0x10 [ 633.783383][T16528] ? do_raw_read_lock+0x3c/0x90 [ 633.788224][T16528] ? _raw_read_lock_irqsave+0xe9/0x130 [ 633.793673][T16528] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 633.799560][T16528] ? _raw_read_lock_irqsave+0xe9/0x130 [ 633.805034][T16528] _raw_read_lock+0x36/0x50 [ 633.809531][T16528] ? send_sigio+0x108/0x390 [ 633.814025][T16528] send_sigio+0x108/0x390 [ 633.818346][T16528] kill_fasync+0x256/0x4f0 [ 633.822754][T16528] ? kill_fasync+0x54/0x4f0 [ 633.827248][T16528] lease_break_callback+0x26/0x30 [ 633.832260][T16528] __break_lease+0x6d5/0x1820 [ 633.836934][T16528] ? __pfx___break_lease+0x10/0x10 [ 633.842032][T16528] ? generic_permission+0x2be/0x550 [ 633.847224][T16528] ? inode_permission+0xff/0x460 [ 633.852152][T16528] ? bpf_lsm_inode_permission+0x9/0x10 [ 633.857603][T16528] ? security_inode_permission+0xbc/0x320 [ 633.863318][T16528] vfs_truncate+0x26b/0x3b0 [ 633.867811][T16528] do_sys_truncate+0xdb/0x190 [ 633.872472][T16528] ? __pfx_do_sys_truncate+0x10/0x10 [ 633.877748][T16528] ? do_syscall_64+0x100/0x230 [ 633.882500][T16528] ? do_syscall_64+0xb6/0x230 [ 633.887164][T16528] do_syscall_64+0xf3/0x230 [ 633.891655][T16528] ? clear_bhb_loop+0x35/0x90 [ 633.896319][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.902205][T16528] RIP: 0033:0x7f2ea897dff9 [ 633.906610][T16528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.926203][T16528] RSP: 002b:00007f2ea9786038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 633.934606][T16528] RAX: ffffffffffffffda RBX: 00007f2ea8b36130 RCX: 00007f2ea897dff9 [ 633.942565][T16528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 633.950521][T16528] RBP: 00007f2ea89f0296 R08: 0000000000000000 R09: 0000000000000000 [ 633.958479][T16528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.966435][T16528] R13: 0000000000000000 R14: 00007f2ea8b36130 R15: 00007f2ea8c5fa28 [ 633.974401][T16528]