last executing test programs: 50.671339928s ago: executing program 1 (id=171): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x81, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) (fail_nth: 5) 50.284401379s ago: executing program 3 (id=172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x100010, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) (fail_nth: 10) 50.153197085s ago: executing program 3 (id=173): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x1, 0xee, 0x67, 0x8, 0x0, [], [{{0x9, 0x5, 0x2, 0x10, 0x400, 0x3, 0x3}}]}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000980)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2eb, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x1, 0x1009, 0x2, 0xa, 0x0, 0x1, 0x5}}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r5, 0xc0305615, &(0x7f0000000640)={0x0, {0x6, 0xfffffffc}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280), &(0x7f0000000340)=0x8) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x24b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x7, 0x49, 0x1, {0x22, 0x1fa}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x4, 0x6}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xd, 0x0, 0x58, 0x8, 0xa}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0xff0f, 0xb9, [0xff00c0, 0x30, 0xff00c0, 0x3f30]}]}}) r6 = syz_pidfd_open(0x0, 0x0) r7 = syz_io_uring_setup(0x1111, &(0x7f0000000740)={0x0, 0x0, 0x100, 0x0, 0x35d}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) pidfd_getfd(r6, r7, 0x0) syz_usb_connect(0x6, 0x90a, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xdb, 0xda, 0x45, 0x40, 0x67b, 0x307, 0xd1b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f8, 0x3, 0x80, 0x7, 0x0, 0x4, [{{0x9, 0x4, 0xc5, 0x3, 0x9, 0x20, 0x2c, 0x72, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7720, 0x9, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x4000, 0x2, 0x7, 0x5, 0x2, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0x2c2}, @dmm={0x7, 0x24, 0x14, 0x4, 0x8}, @acm={0x4, 0x24, 0x2, 0x8}]}, @uac_control={{0xa, 0x24, 0x1, 0x7f, 0x46}, [@extension_unit={0xb, 0x24, 0x8, 0x6, 0x1, 0x1, "6c27b42c"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x2, "1009d0"}, @selector_unit={0x5, 0x24, 0x5, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x6, 0x2, 0x35}]}], [{{0x9, 0x5, 0x9445c6cff612ec81, 0x1, 0x3ff, 0x0, 0x9, 0x6, [@generic={0x7a, 0x4, "033aea35181a19d8059e20f270f68590403a3b21bd1898a6b8d0e31da501c059cae2010e77116c7389ecf639f49d257a8f67fa75acadcbf7615a91c9a86c9bdc799f5643b30761fc695192058ffe354785565a739cae30bfe3fea717f62e78a6562792c5449a09e08fd5c61454eed25cf2db544115211355"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x5, 0xc, 0x4}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0xd0, 0xdb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x7, 0xfb, 0x80, [@generic={0xed, 0x5, "e53b7d4cee3b7264a88e9c8c38174e0f0472421f6d472955aa61886ce67929b1794bc6dc996791de778a3dc054ff4d3cedfc9ef2fb0d0d19cd502c16d4664d43f4a1af60d3ae3de2000068a329309e752c06474028ddbdea2b5cd9de1715423e348856e82c60e837c1f4ce53ba05397e13695f7703b4d681619309bcade1da51da9c2e9d1573276c49aebdd4f21ef269fd5db9cd1595b04689b5961dc2ab2a0ac3eccc64fad6681fd846374cba889dcf795bb344bbaa9ec50a9e46b2ac08ea0b2d5505441e811b2f189f6803158fcf874b7d30e400f6567c26836e40e426b965452b837bda480de94b35dd"}, @generic={0x4a, 0x0, "dacdb6214f3e88a082273d1d9f6daf94979b570ce584d1336d2223e742069612a1be449376fd4fadeaca9173b398c81f0d438a0aa31dffbe029542b79431099dcebb563d41d24705"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x2, 0x14, 0xf}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xf4, 0x5, 0x10, [@generic={0xa3, 0x6, "1283b28a52e8fa3a66c29bcf2b7ac67a8109ab804c43173381372bafcb4c038b66f2e953f3c1b2ba2bd5f1af0cc97077216b1d7d950d67714499789d7bffc1ea9938cbeeb9d3badfe64a60f8ba4e5a38aaee2bfc1d3b4df9c18640322d48b098af1621444538eec9b26e01d8af55063a0ec98b6f22bdfd3611f5e753a71f4b06700ccb6f04fa85bb8e13ba3ad8b9f27e17762d880e6550d536295f3739d8d52c46"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x4, 0x40}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x2, 0x2, 0xd0, [@generic={0x25, 0x4, "289a9dea52f965d35d5b027d4e9b72498911d1dcefdcc9f77f184d4ea5d95efd477da3"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x9, 0x6, 0xfc, [@generic={0x86, 0x2, "82a0cfd8fcea79b86d3a297cd17e9ce687aecfc7210cafabaac206aaf6f69e333867cb57803940fe039742f16eaa3c4079541da59c29ac13461cc9129063ba436f4314244c3b1a960dd0ee59dae9345368051e9b5b7f10fefa95f06af8251d0e582c330e2fbc1a80cbc0102bae994ac62c5a6ce7e0a3fdac6c7b72a78f8180eed692624d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1}]}}]}}, {{0x9, 0x4, 0xf9, 0x75, 0x0, 0xa4, 0xc5, 0x68, 0x1, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7ff, 0x400, 0x1, "d3cf4c91aef9c5"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x40, 0x0, "94b5ee"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x0, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1ff, 0x0, 0xc4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x1, 0x3, 0xd1}]}, @hid_hid={0x9, 0x21, 0x98eb, 0x6, 0x1, {0x22, 0x75d}}]}}, {{0x9, 0x4, 0x4, 0x2, 0x10, 0x54, 0xdf, 0x9d, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xd, 0x3}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x5, "140a441811"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x0, 0x16, "534bb9"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0xfb, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xf7, 0x1, 0x2c, [@generic={0x13, 0xc, "d359dbdd0249f8cba56c391f22c8d858fc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x40}]}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0x6, 0xf9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x5, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x5}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x2, 0x5, 0x1, [@generic={0xf5, 0x11, "85cd6fca1a648d23f866923ef80c4ba1900f46a9dd952fa87b9cb814df33f4ba7d4b3e222221f36f9ea31e524d286d0f185aeb8eaae88e22cff9ea45cab0e4ee2c9408a17c2910aeccb24a432d0be617f865458761d84ea75e25a449beb2ca4777024081804e804b1a8b57583418b9ad5c8deba713b8407d6813e814ba397fdaafb6733d4dfcbaa0119e6abb495d9fcf80747b5b63f3a39f3fad1bab61879e2fd6bc292d2e180815e55e815f3ae5e1cdb59694e4e297c6f2f9236ebd1ff336922650fb27da1bcfb0633d0a2adab07af88f7d3fb42e7a55a79529ed69321127c1d4d8129c3ed98496b2be0e3cad804e9aa20399"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x8, 0x3d, 0x6}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x0, 0x6, 0x8, [@generic={0x35, 0x30, "e39c129e49ceba898b79c8b8d3c8e8d4b99691a021ac4269dd36c78fa4eb5b71ada5edf5a03bd15aa455e3882477c609376d6d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x6}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x2e, 0x5b, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8a}]}}, {{0x9, 0x5, 0x5, 0x1b615e6a07781822, 0x20, 0x21, 0x88, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3c, 0x9}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x32, 0x2, 0x1, [@generic={0x73, 0x1, "e1491d76d6aa6865986e73440545baf1f6a258600ea9b876cf92ea5c46a041f977c5b7eb290b4bfa109284f2e6ddf0c676889abb05f97db87512b91ffc1dda9542680e3b2e7a3dad4c5c14b575d63ac9e65b327aca67f0f773986a21a39e6616e9006ab61de9268402b603b69c8c73c156"}, @generic={0xbc, 0x1, "6aeb35f24e191b16b9fdd402adb4ea7f60ce289c35fcef52aff183d5354c5eb75d89a0dd520e7c5c85e3b48f25c1e079a81be953cc09a73ec69763b88214791d31e5f39156cb93a1c06ab6b10118d8a537fe3043641c9a4f36f47682fbc01c389e361ac1e4f13dcf6535f7bbbdadaeb8fadf92056d8c35666d5894eb03ad2a2002bebe19e06c4cd1c5fb351cd8cdce7ba16691dbac232d841e534851862561f416ae27737f9a62871f8fc1921fd07a4ba7a5879b1f24d7ac36d4"}]}}, {{0x9, 0x5, 0x93, 0x3, 0x10, 0x5, 0xb, 0x5, [@generic={0x67, 0xe, "97377cca5d57a5bfb79e3b2596903f99399f120a2548aa7f48f0b2e71352c0ee88e0b93cc2fb67b13975448f6abc3fd54222f1908d814c272a18d5822f2393d74bc0722effc399e659a92ca50c228768a485f4aae04797f0bcb52479c4784b7e8a9d8ba630"}, @generic={0x6c, 0x23, "570a1c85ea19428fde1eddc9bbb861511ab0da97e2517c3a36a8ed54bf548920cc5e1b6191c87571f2c2f0b8c551236d815b492f191ace72bcc3ce19ce4e596d98cef2d5ebbab74058f1699d3f4f1cb3749f74110f527dd279c5d012010d30b07efb0bbaa034aee1e8f2"}]}}, {{0x9, 0x5, 0x20624cf69792254d, 0x8, 0x40, 0x5, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2e, 0xc9}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x5, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7}, @generic={0x1b, 0x30, "bfead0ff8e65fa6b9a98a6b345a405fa153a98d4456c54f33f"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x80, 0x0, 0xd8}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x3d, 0x7, 0x9, [@generic={0x26, 0x4, "ed29ba77ee53ce3583664edfb7b2c935837ec1ba071042836898ef06a20675d4f66d2135"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x0, 0x8f, 0x82}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0xfa, 0x4, 0x4, [@generic={0x28, 0x10, "c61fba47cdd19970cc02653dc69f8df3e417d3bf39df994422049d3028eeb512bf26ba3e3bb2"}, @generic={0x46, 0x10, "c93e75972248034273e85cf9b3ed7001cb74545db09cb813e025e9f37b52e275400bb7338a7f273e02ac2a35620a05ca4b8039dd6cffaba2397eca43c35b423e9af9d41f"}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xc0, 0x81, 0x10, 0x20, 0x9b}, 0x1b2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x4, [{0x1a, &(0x7f0000000240)=@string={0x1a, 0x3, "8038606b69590ddc92beee903aab95fcec6019c4d0739719"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x801}}, {0x27, &(0x7f0000000600)=@string={0x27, 0x3, "3c9c8f68f3d949134cf10c99358a5b69c926782619a8013f68da2d14a8200504dddd233c66"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40e}}]}) 49.809351339s ago: executing program 1 (id=175): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "83"}]}], {0x14}}, 0x78}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r3, r0, 0x80000) 49.421740555s ago: executing program 1 (id=178): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000200)=r1) 49.252790259s ago: executing program 1 (id=181): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="000020203802"}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0x31280c20, 0x2, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x9, 0x0, 0x0, {0x0, 0x20000, 0x0, 0x0, 0x8, 0x0, 0x40000, 0x0, 0x9a8, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x15}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010a24010400000201020924030203030201a60d2408010700bc5affd3dc187508240806050005f9072408020600030924030605030303070905032b3b"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e1fcb4b20"], 0xf) 48.330973361s ago: executing program 3 (id=187): r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x71) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) (fail_nth: 2) 47.781719011s ago: executing program 3 (id=190): r0 = openat$audio1(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x4) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 47.583893011s ago: executing program 3 (id=192): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 47.364076296s ago: executing program 3 (id=195): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setattr(0x0, &(0x7f0000000100)={0x40, 0x5, 0x0, 0x3c55, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, 0x0) 47.323706985s ago: executing program 1 (id=196): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3e, 0x0, &(0x7f0000000040)) mlock2(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) (async) r6 = socket$inet6(0xa, 0x806, 0x0) listen(r6, 0x3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) (rerun: 32) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) (rerun: 32) setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000300)={r10, 0xfffc, 0x3, '\br\\'}, 0xb) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) unshare(0x20000400) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, r0, 0x0, 0x0}) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f00000011c0)={0x2, 0x0, @pic={0x3, 0x1, 0x1, 0x30, 0x7, 0x6, 0x81, 0x9, 0x3, 0x8, 0x2, 0x8, 0x4, 0x7, 0x7, 0x12}}) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 47.046994368s ago: executing program 32 (id=195): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setattr(0x0, &(0x7f0000000100)={0x40, 0x5, 0x0, 0x3c55, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, 0x0) 47.028592323s ago: executing program 1 (id=198): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400180021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 46.739255891s ago: executing program 33 (id=198): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400180021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 29.990861146s ago: executing program 6 (id=261): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000200)=r1) 29.698068062s ago: executing program 6 (id=263): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@weak_binder={0x66646185, 0x0, 0xfffffffffffffff7}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x35}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0xb55, 0xb, 0x2, 0x10, 0xfffffffffffffff7, 0x6, 0x2, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x2a4d, 0x0, 0xfa2, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 28.907693687s ago: executing program 6 (id=264): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r1, 0x29, 0xcb, 0x0, 0x4b) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x5402, &(0x7f0000002000)={0x2000, 0x107, 0xffffffff, 0x2, 0x1, "78af1d3b7e566b7300f5f73ec62f00"}) 27.942294219s ago: executing program 6 (id=269): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2040) open(&(0x7f00000000c0)='./file0\x00', 0x300, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) 27.652368008s ago: executing program 6 (id=271): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x20008040) 27.373802644s ago: executing program 6 (id=275): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000010000305000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="154e0100020802002c0012800b0001006d616373656300001c00028005000b0005000000060002404e23010005000a00"], 0x54}}, 0x0) 26.912279207s ago: executing program 34 (id=275): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000010000305000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="154e0100020802002c0012800b0001006d616373656300001c00028005000b0005000000060002404e23010005000a00"], 0x54}}, 0x0) 9.190269842s ago: executing program 7 (id=368): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x44}}, 0x0) 8.963887738s ago: executing program 5 (id=369): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0xc, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x49c781}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x840) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000340)) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '.]\xab%:/@%%%&^.'}, {0x20, '\x00'}], 0xa, "7ae2a44149a9f9335621641c0f92cc5e3aea72a32ad159640fe6452aa7ae5ac266c464b6ff86ede6411cd39e92e458456dae47a48c0633c84f759814c32896e5fdeb9d7a959f486f4da76ce657c93dc26eee401a5172024ff52fdd99220c5ad6261e4eaf141a47ba73752dfc1a678576e438ddfcd9771e85c3327ce3"}, 0x99) 8.950624349s ago: executing program 7 (id=370): unshare(0x20000400) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0xfdfdffff, {0x2, 0x0, @private}, 'syz_tun\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x5f, 0x101, 0x0, 0x0, "", [@generic="7f1de738c07e2e0734"]}, 0x1c}], 0x1, 0x0, 0x0, 0x4008040}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x3) epoll_create(0x5) timerfd_settime(r3, 0x2, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 8.725693709s ago: executing program 7 (id=372): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="71fbbeef2a8ba00c752de0381c168b5d7a67428e", 0x14, 0x840, &(0x7f0000000300)={0x2, 0x4e20, @multicast1=0xe0000306}, 0x10) 8.595819145s ago: executing program 7 (id=375): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="a2", 0x1}], 0x1, 0x0, 0x0, 0x400c0d0}, 0x20040040) close(r1) r2 = openat$adsp1(0xffffff9c, &(0x7f0000000380), 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) close(r3) syz_clone(0x8001000, 0x0, 0x12, &(0x7f00000000c0), 0x0, 0x0) (async) syz_clone(0x8001000, 0x0, 0x12, &(0x7f00000000c0), 0x0, 0x0) fsetxattr(r3, &(0x7f0000000000)=@random={'security.', '[%-\x00'}, 0x0, 0x0, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x7ffbfffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}, r5, 0x100000}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0x2, 0x0, 0x4, @empty}, r5, 0x100000}}, 0x48) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0189436, &(0x7f00000003c0)) 7.775305925s ago: executing program 5 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (fail_nth: 10) 7.672086278s ago: executing program 7 (id=381): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454cd, 0x305) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='7', 0x1}]) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socket$inet6_sctp(0xa, 0x5, 0x84) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x801) epoll_create(0x6) socket$kcm(0x10, 0x3, 0x10) chdir(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad000131001020301090224"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10000, 0x8, 0x22, 0x133d187d, 0xe, 0x8000000000000001, 0x7}, &(0x7f0000000040)={0xb0f, 0x7, 0xf, 0xfff, 0x9, 0x7, 0xa30}, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3, 0xfffffff7]}, 0x8}) sendmmsg(r3, &(0x7f00000002c0)=[{{&(0x7f0000000440)=@can={0x1d, r5}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r5}, 0x80, 0x0}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.264062424s ago: executing program 0 (id=383): r0 = socket(0x22, 0x2, 0x2) unshare(0x26020280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x10000400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="c7cce3d6556ff535160db2384556d4d230b42eaad6549aaf9ff584dfaedf51673d7eac87c39b0e526e14a2df672fc442785dfd0f079dc31e2356ffb3854d442fa858ffe37c89cb185d8089b47312ca380254bb8286db71a38deaaa67489fa46965f30c3b6d0615c5a0fb1984199ae8160867153f54d4094e8a8bd91bb52bd22b16c7f6c7c7a7e06210e6eaa790a9bedbf96ad95ad68ba5d281ddc6a8a8cda6", 0x9f}], 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0)={0x33}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x4, 0xb, 0x81, 0x3}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r4, 0x8000, 0x7ff, 0x3}, &(0x7f0000000300)=0x10) r5 = socket(0x2b, 0x80801, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) unshare(0x22020400) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000e8ffffff0100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000000e08000240000000120400058008000640000000010900010073797a30"], 0x10c}}, 0x0) 7.135834873s ago: executing program 5 (id=384): r0 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x6b) r1 = socket(0x840000000002, 0x3, 0xff) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xd13, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x111d1}, [@IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x2, 0x4) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2440, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r7, 0x4004510d, 0x0) connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 7.025077861s ago: executing program 2 (id=385): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'rose0\x00', 0x0}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xce}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0x3, {0x3, 0x0, 'T'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r3, &(0x7f00000004c0)={&(0x7f00000005c0)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0xff, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}}, 0x0) 6.402202257s ago: executing program 5 (id=387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0xc, &(0x7f0000000380)={0x20, 0xd, 0xf4, {0xf4, 0x6, "0563f2e5ee9f09a65669ae4b8d3ea368409be94b6bdf3124d1b7c0319b5d1787d24237ebc24f0c60c20b6959dd8ad2fbd5370c3acfb3fdb81a294fedbfbcc809d794778b9faf806b507547c68ad9ffefee90d3e2e8e31810920dc8c1d7c1da2c8d462124c72fbed3f8beaf4c87d300f91bed43567a44368093dc51754f78d6a9465d4a28fa42a4482efecc1daee5c83453dc3980a9277c61cbb8d6941bd6d761ec499dacb00ec9c7cc3dcff58638c7e3a9c6d670779ec2492e198bce36c126cbf995b1dc37afd7542ea64eec50413c22a5100496b715b3d028f9fb874af69781f0d3602360f5090e5b9a1232259f0c983e66"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x24, &(0x7f0000000680)={0x0, 0x1e, 0xe2, "a441ad5ab00f6e7d534fff94399ec86c5fd79e48b104e0efdba77dd19ee745a29c18639695554319e00f99ea62daa5526416ca771d5c91e8d52518e1a1f8c0524471d6fc4721d667e274d21b877f850daed8900994106a51f84676b2465686195b7839ffd56241ae4a8cfad0b8e0578910bf797a8d8c28d45b4410a53665d8307be89a6a6f14130477de4a1b46a5f648f6526b487876b699df21a5b561bc78a73409c30ced10c71cdad678b0cd4414a667ecfcd3de5b5ae1e48044fb586350814e40133728b541afa6245cea601f1d513dd479c0e275013d9cd9a7af4bb0234143b6"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x10, 0x9, 0x18e7c4b6, 0x7, 0x80, 0x9, 0x0, 0x3, 0x7, 0x0, 0xdf34, 0x8000}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x1000000}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000500)={0x20, 0x17, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a0000000000000000000000000000004000000000003a3a00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) 6.065364468s ago: executing program 4 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) quotactl_fd$Q_GETQUOTA(r0, 0x0, 0xee00, &(0x7f0000000080)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x40005) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280704000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="846065e91a372308d54defee82452d5a5cc200009078ffff"], 0x0) 5.864072878s ago: executing program 0 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x7ffffffff000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0, 0x0, 0xf000000}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.584719618s ago: executing program 4 (id=390): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000002840)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x55, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a000000000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e008000000008000d"], 0x5c}}, 0x0) (async) close_range(r2, r1, 0x2) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xc, 0x0, 0x0, 0x1, [@nested={0x7, 0x102, 0x0, 0x1, [@generic="b703ff"]}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r10, 0x0, r10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fcdbdf25170000000e0001"], 0x54}}, 0x40) (async) r13 = fsmount(0xffffffffffffffff, 0x0, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000340)="5a1d198c01b05d3868f080ce5945d7eeece01afe9cd8655000aa9c17609183e877fa62644584f88dc6617e9f1a9ce83f3ef05f23f5ac9e34a281020f29e9eb541609d4566f557b6908ef2f60b239abe5cc24ecc97d0d8c63d2ed5d0a4a5478afba6066e35071075bd48f27e589e5fd1bb361def4df59b68670028a910005ebb94045143cc195f5ce91f118b730c03b813af0ef4647abf70be6d88aa2596abc35e4b25f51a3c72fa6c10063f7684839faf99d4d25e45deced0237a4e248e42bf0177d0f6f073f735882efb1a59bc870fa9e687f926055bc4c", 0xd8}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000440)="6819613b75cf4270bbf06479b13246339607590b2014aedae16394f7ce5499c46643d2fd877cf82e44aaec73a25c99e447f2cd156d24c54a6be0ce37945f86d9673d", 0x42}, {&(0x7f00000004c0)="310a06c6a030ef84c30a", 0xa}], 0x4, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [r2, r5, r5]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r1]}}, @rights={{0xc}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}], 0x7c, 0x20040000}}, {{&(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001840)="5bafe4ba9466af1295a0b3ef83150c4ffd89b54cda360da7", 0x18}], 0x1, &(0x7f00000019c0)=[@rights={{0x34, 0x1, 0x1, [r4, r5, r5, r1, r5, r1, r2, r1, r2, r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [r5]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x9c, 0x20000000}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001a80)="a92f10c5a3491e6351c3206a52c6b65a1424a4e3fce003e92f4090038ab9ed987f62716ce392c1ac97008acb60869037bdb9fb764c5352e75463b99a7c27f69aa165a01b42a9b2065d139db24fd981daac9340ae19c180e957cb9384405eef09e2d1e525d70648d0704aa2edc74d8ec45370e1904a00c995faf2acba5bdbe7e1", 0x80}, {&(0x7f0000001b00)="7a965e98051a89c9b8ae7696902b31f92898b899ba8e9a8eda75938745e24799c7c8755ba7259d266adfa1410b8b048d114f7090da21addd6991e1769946cc182aecbd691ae23b3abd270cd03fcbee5a89632001a6065a9a6dd46b8a85d461b3395da8b48232d0b72127fc9a8fd45f9937efc4fb8590d50e3cfa9299d0a246c002a53ff92bbf840684076f3407cb7eda5ade7f35bbdf3480d010bd96524d533a9d27e3fa4b385d719b4f3976ec37fda56d5771fa30c7265b7e41728066b14c9a6ea64e26e86629cffc13dd72fcb66fdbab44bbcf4c9d7e56", 0xd8}, {&(0x7f0000001c00)="d90215bc0c5d618545521d8898398b4577d9b031fac8412318f75defeae2459ae9681d223964044db6d0c1d9c904d86b7bf62ad00d74b7a0e6f45a1f1231a1b5f37d5cbd515776f445a9894f71418be638ccdc03f28f0db9eff38dba659cbb0c1c62e0a99d8819fccf37f9e4e06287dbea6d433ab19d8a35001ea9e937c8c65756437520be", 0x85}, {&(0x7f0000001cc0)="92a35f84a52a5429175444406029336748b4aa9165605bcea3590c246cbee407d69656bf269a3e7937b72699d671a2636f8a897d87d3b4ec656e9e223a2f0e997b13a73bf62559b2b648b0f757d299444ea106d05d67bd90775ebcd0840cfe7cf0c5c03539100a9164adf88754ea8ddfc86042adba14bdeb5d1c2bc6357ef4631e2010bde9a8ddc1dfed27ba9f083e646e7493ad8c23f378ddf63c229ede5b02d0b0f7e7ba4b68d6d1a722199885b756350b337b73462bcf051d5bcbeb501d69a74307f8d1620b22909f119c6c6b", 0xce}, {&(0x7f0000001dc0)="9c741cd4b1a07bf01b9dc129ca95558a5f3d30a72cea4ad070d3c239e788e392ca2aa59f3c3d6fbddfd31bb548fb223b1aa872a2e63e5ce882746f495759e989203eee5f1bbddc6ef99bde07299f8f0e6e52d1fb45019dda2f5d9936bb2e74e2f8433328b77bb5137d833ec3c32f0b7e51c5c33bafdf842c305cf8ac9d4f1040826d41a9cb91e4388aa96431b47a4dc68171bef28464581f4bbe550873d0fa01819ace7234a2a36207f3b88af92a860b87e54931c184f1f3289a052113fe2a1efd55908ef96673142c416157c7eb38b0a6d20448db5c6a6515f3e290f650", 0xde}, {&(0x7f0000001f80)="d75366fcbde83d83f3bd883ed4de3f9b34037887239ecbbc8c3776300cedb644c25e0fdce7e524a55c1dfacef05d4afb250d565ff61755a04d988a6aeeae4ce74f2812edc6d4b2ee920c273e353fb354a3f4a977a7b966e7afe1906ce9e116963abba4439b32da4440c6c6c04b9f931270af30eb01f6a94afd8e6d14e28e839c29b76eb7521e00bbd8fb2150b8feacdbdd2495b0936522", 0x97}, {&(0x7f0000001ec0)="dc4df92f2a273bfd8b010635c7a1511b99fc6ce1b4a007136bfef5a8397dcb0a8d651cc3027112d71e4d5307b12c702a13ed7ba790", 0x35}], 0x7, &(0x7f0000002280)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r5, r5, r5]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r4, r1]}}], 0x58, 0x4800}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002300)="e7cf173ad446add6c1b39a32aed690251e8e0c1db0662bd1ece0ac31deb72a3b072e4461d166f211470c2659036a6ceec1ccd1e45801228ed37e11e3aa334ac8d6807c60d3205044f572", 0x4a}, {&(0x7f0000002380)="6f3449d39adde3ca5eefb83b119a72f3e5f502f28e662e29da64a1d55bd2332df42a3155420e1d20eb2e360fc5a6e642615d9fd48b6978e465c157dfc7638e5938dbebd658401cfb69da1abc89f772843feefcab07e21747cce4a76529564dae3ed2bb4b7569b5d05e8c1e8777efebbe8973c1b5c23e440714f0298aee9541d29c2a2424ca7ab09c2766a855fda3d5b495b228625790a56d60b2f314acb7c41271e305a4e1f18d8db43dea017353e2c73aa156359835063264011c6f938f6966bdd4067fea479e5d72126963f929cb3e9b8cd4e87d9ee8", 0xd7}, {&(0x7f0000002480)="d12e0adb7a213c0125611585a458e8bb925edf969147b2b7543de9dfbfaa2db41120e0a54f18eae79e6cca2af3088c8638f3d702d967b986ca848e3e217ffc3833f802d75abe92780772a2bf51301f83ae9f64c8e615bb77c65b0cb0c66f3eece90e0be7f79e400e387cf8211a0b4a87170f15a4b18788630227d4e4422331317c6bd823f4de66f48e03", 0x8a}, {&(0x7f0000002540)="0cf00561726fb6bb69714144ce2393b708d710b88fb28bdc666519ca01762ceff2e17079ca5518c29e6cadbf2a91e7605e8587f7f32932d3832ed37761ae0e78528a1c7618ace0a8cf4c4b9a7cd54ef7f9607e5fd07962e2540855952246fca69454fa3727b63ba58802fc554f6d027d11dd2c09ec25af955e69a853d694848a86cc68d6302b3013ad7f0edece1346cf7c2df64d5549577bff0510fc24475e5b8343a98a184b7183e58235ce6d8305fe3ab66348eb8e09b0aff7dfa45990acee88abce2513a433b612e8ce8036b70490b82230cbbbc6bdcc5182a939932cf009", 0xe0}, {&(0x7f0000002640)="bf6720ee922ae809e5b8f859f43a5b8f7d897d937b20bbd2379c05b7afa012ea6d8d054a17dad469e71d6aec9cba7092dbbd44a3e4af94a39687dc40b4a2360e207d3698cd3ec304ee566aee1055b3384f412de371fb795884176baee2ca38a04481eb9cb713712a7e7e43c656443732829f6efa8ee7a207970fe58a1e55867f05d6c064206bc8ca0a58618b03bb857e8425bdf70e41b2272020c91d9fa47785810690fb632b10910bab673af2eb39bf7c83e8f043849085b3c0bfa0d384b917f8c1a92b1eb6a15b46945a4d", 0xcc}, {&(0x7f0000002740)="5f181da8b5d740b989b4b9b52162714c20c7411559474b3ccbc822f778b184127cfd2fee1f54f2130d3096bb5b5c7973b58faa5158047e09d7e72273eb9b377ca3ed9f0c70077c118775b0e2ec6281c09482548c57fa35a78656c5db2637acd946e26f656009aa52dbdc89ddbb1cbb3e1f313f852bb99f275afea338a2b0f38e201c2b652d", 0x85}], 0x6, &(0x7f0000002900)=[@cred={{0x18, 0x1, 0x2, {0x0, r8, r10}}}, @rights={{0x28, 0x1, 0x1, [r11, r1, r4, r2, r13, r14, r5]}}], 0x40, 0x4005}}], 0x4, 0x80) (async) syz_emit_ethernet(0x42, &(0x7f0000001f00)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "7fefc0", 0xc, 0x11, 0x1, @private2, @local, {[], {0x4e23, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x8, 0x100, @void}}}}}}}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0xc, &(0x7f0000000040)={0x20, 0xd, 0x21, {0x21, 0xf, "35cc36c6b041afc74893d2377e3b5efca50f799d60e4d4dd04d424563ac366"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f0000000140)={0x0, 0x0, 0x88, "be865d955411c77098a770073b31aa427c90b7b15174571c692f8810477da2d1d319b0bf228daa29ca2dc260f594ffb507088b4aa771c6f2d2a85a85e62647492a950dc8bc0eb0d4c3e55223a544a6afc6f021e05a3d1b6c8ece39f9d276f983c5a77a89ae19343d3923e738d98fa9a2dda27ecfee592e33f490f9fcec95e4c72d1fbb138e74d88a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}}) 4.858872131s ago: executing program 2 (id=391): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @private=0xa010100}}, 0x0, 0x8000}, 0x88) 4.54000972s ago: executing program 2 (id=392): syz_io_uring_setup(0x3113, &(0x7f0000000140)={0x0, 0x5f3b, 0x8, 0x0, 0x2fe}, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x106, 0x4e20, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x8001, 0x200, 0x4, 0x8, 0x40, 0x6f09, 0x72dc, r3}, &(0x7f00000000c0)=0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) read(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x49f}, 0x8) 4.42642913s ago: executing program 4 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x8, 0x8, 0xb9, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x67, 0x0, 0xd, 0x29, 0x0, @broadcast, @local, {[@rr={0x7, 0x1f, 0x94, [@dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x2, 0x5, 0x22, @rand_addr=' \x01\x00', @private1, 0x782041e2d24f005c, 0x80, 0x3, 0x6}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0x1c4, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) 4.134529555s ago: executing program 4 (id=394): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xfff2, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb16}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3.972115792s ago: executing program 0 (id=395): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002400210000000000000000000000000006000400008f0000"], 0x1c}}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@local, @in6=@loopback}}, {{@in=@private}, 0x0, @in=@dev}}, 0xe8) 3.628978886s ago: executing program 4 (id=396): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, 0x0, &(0x7f0000000040)=0x18) fchdir(r0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000040)=0x9) r4 = fsopen(&(0x7f0000000000)='binder\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, 0x0, 0xffffffffffffff9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x0, 0xc1c4, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad97, @void, @value}, 0x94) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[], 0x2000, 0x0) msgctl$IPC_RMID(r5, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}]}, &(0x7f0000000240)=0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000300)={0x1d, r8, 0x1, {0x0, 0xf0, 0x3}, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0xf0, 0x4}}, 0x18) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) connect$can_j1939(r7, &(0x7f0000005a80)={0x1d, r8, 0x1, {0x2, 0x1, 0x4}, 0xff}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r11 = socket(0x18, 0x0, 0x0) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'pim6reg1\x00'}}, 0x1e) 3.628747454s ago: executing program 0 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0xd66771a5e8224ded, 0x100, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfff, 0x48}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 10) 2.780502191s ago: executing program 2 (id=398): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x134) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r4) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfffffffa, 0x2000) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000380)="bf59eca69c576c8b1260a7c77998a27b07962bf013f4b75faf7a1a00b5facbb933954fb34926959477fcb3c15de4beaf5a54cf7e181a89cfc4695875f226e6a5c5cb89649fa6073f9e26f65fb4a6dddcea1c8daae037db61dc72262f2b182dc0101056e7ab5425328bd6cd4df1423705d2db677cac7c2cf02477e0a30e42117743a6109b42540e2c6917185133f224a938f97f50b2328d6e7736080eafdbd0be79f6a8639baee48682c31d22e127d7413863aca2fc937e112a591d62746678b2dde7cb823784d5b7c57fd5072e08a4c8912d225199d0086b9c960a", 0xdb}, {&(0x7f0000000480)="45a9c021a44ebcc328ba6389db1570731e785ca58a137ba310147f9592d6fcfd13611710b5b40050129ae90fab41dbf085116fc189e15fe96d279082e7e5c9ab6d70146c956daf9fe8dea04d9b93cbcd2c64585965044e0a0c01b2966c147395166b7e08aa64bcf6fb0232f015fbd4c7f0d0aea7044e9b9779e953b252", 0x7d}, {&(0x7f0000000500)="75f9b9343afcd4f8a8e0e0d4cad9e6bf0e5325938c05c523c99b7ba1f39b4580920481f1abf7faed69170f5acae62dc4d978f076e72c27ff160555a1970829e1a4671a775807202f24be55cccd4af88f590f46247637a4c63be33193190d490a17842ce66590bedb3b606e92d17c6579632d032cafef156cd718f98fdb521a84f56d79c7555bbf1463d957a0823be8b5d21792c472f7e5f6952c14c09786", 0x9e}], 0x3, 0x1, 0x10001, 0x11) 1.871888941s ago: executing program 0 (id=399): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000200)=r1) 1.785107895s ago: executing program 2 (id=400): syz_open_procfs(0x0, &(0x7f0000000340)='uid_map\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001c7a67d40b1134200ec000102030109022400013600c30c04b89a00027ed72592090503084000090100090502034000080007"], 0x0) fsopen(0x0, 0x0) 1.70957249s ago: executing program 7 (id=401): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x2f20, &(0x7f0000000580)={0x0, 0x8000e7b7, 0x4, 0xffffffff, 0xfffffffc}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$audio1(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)='u'}) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000380)=0x80000000) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a3100000000140007800500150005000000080012400000002e050005000200000005000100060000000c000300bb391dc92a9fc4686173683a697000"], 0x58}, 0x1, 0x0, 0x0, 0x4195}, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800, 0x6000000}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x138, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff1}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x4000) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.61444725s ago: executing program 0 (id=402): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8", 0x3}], 0x1}, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}], 0x1, 0x400ffaf) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000400), 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) lstat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, r6, &(0x7f0000000300)) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8943, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) capset(&(0x7f0000000340)={0x20080522}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.307057545s ago: executing program 5 (id=403): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000080), 0x1ffffff) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f000001000000000a"], 0x1c) 1.095190849s ago: executing program 4 (id=404): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000300)="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", 0xd40, 0x80, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="4017060000007fa7229fc5b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 378.228173ms ago: executing program 5 (id=405): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x7ffffffff000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1, 0x0, 0x0, 0xf000000}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 2 (id=406): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8", 0x3}], 0x1}, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, '$'}], 0x10, 0xe000}, 0x5}], 0x1, 0x400ffaf) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000400), 0x8000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) accept4(r5, 0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0x0, &(0x7f0000000300)) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8943, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) capset(&(0x7f0000000340)={0x20080522}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) kernel console output (not intermixed with test programs): 7733][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 84.322176][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 84.351143][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.370645][ T5884] usb 3-1: config 0 has an invalid interface number: 46 but max is 8 [ 84.409785][ T5884] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.419016][ T5884] usb 3-1: config 0 has no interface number 0 [ 84.425975][ T5884] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 84.444444][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 84.453775][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.465701][ T5884] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.478911][ T5882] usb 2-1: Product: syz [ 84.486172][ T5882] usb 2-1: Manufacturer: syz [ 84.496767][ T5884] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 84.508315][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.528334][ T5882] usb 2-1: SerialNumber: syz [ 84.600400][ T5884] usb 3-1: Product: syz [ 84.601734][ T119] usb 1-1: USB disconnect, device number 9 [ 84.608537][ T5884] usb 3-1: Manufacturer: syz [ 84.620685][ T5884] usb 3-1: SerialNumber: syz [ 84.627113][ T5882] usb 2-1: config 0 descriptor?? [ 84.633530][ T5884] usb 3-1: config 0 descriptor?? [ 84.646050][ T6239] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 84.655951][ T5882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 84.665448][ T5882] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 84.678522][ T5884] ums-karma 3-1:0.46: USB Mass Storage device detected [ 84.750129][ T5884] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5 [ 84.900425][ T941] usb 3-1: USB disconnect, device number 8 [ 84.916564][ T5894] usb 4-1: USB disconnect, device number 10 [ 85.259695][ T5883] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.299366][ T5882] em28xx 2-1:0.0: chip ID is em2874 [ 85.394452][ T5883] usb 5-1: device descriptor read/64, error -71 [ 85.529965][ T5894] usb 2-1: USB disconnect, device number 8 [ 85.556320][ T5894] em28xx 2-1:0.0: Disconnecting em28xx [ 85.570336][ T5896] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 85.668176][ T5883] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.683552][ T5894] em28xx 2-1:0.0: Freeing device [ 85.819001][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.830061][ T5883] usb 5-1: device descriptor read/64, error -71 [ 85.836667][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.846811][ T5896] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 85.856462][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.882381][ T5896] usb 1-1: config 0 descriptor?? [ 85.944748][ T5883] usb usb5-port1: attempt power cycle [ 86.044501][ T119] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 86.194468][ T119] usb 4-1: Using ep0 maxpacket: 32 [ 86.214677][ T119] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 86.252735][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.262572][ T119] usb 4-1: Product: syz [ 86.267619][ T119] usb 4-1: Manufacturer: syz [ 86.272444][ T119] usb 4-1: SerialNumber: syz [ 86.284477][ T5883] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.300612][ T6255] warning: `syz.0.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.327103][ T5896] corsair-cpro 0003:1B1C:1D00.0003: item fetching failed at offset 5/7 [ 86.338525][ T119] usb 4-1: config 0 descriptor?? [ 86.344527][ T5883] usb 5-1: device descriptor read/8, error -71 [ 86.359910][ T5896] corsair-cpro 0003:1B1C:1D00.0003: probe with driver corsair-cpro failed with error -22 [ 86.371508][ T119] usb 4-1: no audio or video endpoints found [ 86.496342][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.124'. [ 86.542029][ T941] usb 1-1: USB disconnect, device number 10 [ 86.580790][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.594591][ T5883] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.605615][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.627641][ T5883] usb 5-1: device descriptor read/8, error -71 [ 86.634061][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 86.652165][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 86.718589][ T5882] usb 4-1: USB disconnect, device number 11 [ 86.755618][ T5883] usb usb5-port1: unable to enumerate USB device [ 86.814473][ T119] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 86.822554][ T5896] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 86.954471][ T119] usb 3-1: device descriptor read/64, error -71 [ 86.976369][ T5896] usb 2-1: config index 0 descriptor too short (expected 244, got 18) [ 86.987424][ T5896] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 86.997565][ T5896] usb 2-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 87.005995][ T5896] usb 2-1: Product: syz [ 87.010213][ T5896] usb 2-1: Manufacturer: syz [ 87.014934][ T5896] usb 2-1: SerialNumber: syz [ 87.021104][ T5896] usb 2-1: config 0 descriptor?? [ 87.030084][ T5896] ldusb 2-1:0.0: Interrupt in endpoint not found [ 87.194584][ T119] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 87.238065][ T5882] usb 2-1: USB disconnect, device number 9 [ 87.353560][ T119] usb 3-1: device descriptor read/64, error -71 [ 87.465937][ T119] usb usb3-port1: attempt power cycle [ 87.824484][ T119] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 87.825207][ T5882] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 87.865635][ T119] usb 3-1: device descriptor read/8, error -71 [ 88.057546][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 88.096278][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.113708][ T119] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 88.132458][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 88.155223][ T119] usb 3-1: device descriptor read/8, error -71 [ 88.161958][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 88.190748][ T5882] usb 4-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 88.205427][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.213474][ T5882] usb 4-1: Product: syz [ 88.238776][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.135'. [ 88.248071][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 88.277246][ T5882] usb 4-1: Manufacturer: syz [ 88.284715][ T119] usb usb3-port1: unable to enumerate USB device [ 88.290905][ T5882] usb 4-1: SerialNumber: syz [ 88.313354][ T5882] usb 4-1: config 0 descriptor?? [ 88.350119][ T5882] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 88.372065][ T5882] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 88.558434][ T119] usb 4-1: USB disconnect, device number 12 [ 88.598638][ T119] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 88.992107][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 89.055297][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.010149][ T6343] dccp_v4_rcv: dropped packet with invalid checksum [ 90.056154][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 90.104811][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.245979][ T6352] bridge_slave_0 (unregistering): left allmulticast mode [ 90.288813][ T6352] bridge_slave_0 (unregistering): left promiscuous mode [ 90.332944][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.894636][ T5896] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 91.057604][ T5896] usb 1-1: config 0 has no interfaces? [ 91.068455][ T5896] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 91.081802][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.101454][ T5896] usb 1-1: Product: syz [ 91.116404][ T5896] usb 1-1: Manufacturer: syz [ 91.123640][ T5896] usb 1-1: SerialNumber: syz [ 91.140037][ T5896] usb 1-1: config 0 descriptor?? [ 91.265236][ T5882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 91.471300][ T6367] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 91.480727][ T5882] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.480770][ T5882] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.480801][ T5882] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.480824][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.518392][ T6384] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 91.677377][ T5882] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.801626][ T6406] FAULT_INJECTION: forcing a failure. [ 91.801626][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 91.814511][ T6406] CPU: 1 UID: 0 PID: 6406 Comm: syz.1.171 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 91.825131][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.835212][ T6406] Call Trace: [ 91.838511][ T6406] [ 91.841458][ T6406] dump_stack_lvl+0x241/0x360 [ 91.846163][ T6406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.851399][ T6406] ? __pfx__printk+0x10/0x10 [ 91.856036][ T6406] should_fail_ex+0x3b0/0x4e0 [ 91.860751][ T6406] should_failslab+0xac/0x100 [ 91.865453][ T6406] ? skb_clone+0x20c/0x390 [ 91.869891][ T6406] kmem_cache_alloc_noprof+0x70/0x380 [ 91.875292][ T6406] skb_clone+0x20c/0x390 [ 91.879572][ T6406] __netlink_deliver_tap+0x3cc/0x7f0 [ 91.884896][ T6406] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.890112][ T6406] netlink_deliver_tap+0x19d/0x1b0 [ 91.895255][ T6406] netlink_unicast+0x7c4/0x990 [ 91.900062][ T6406] ? __pfx_netlink_unicast+0x10/0x10 [ 91.905374][ T6406] ? __virt_addr_valid+0x45f/0x530 [ 91.910513][ T6406] ? __phys_addr_symbol+0x2f/0x70 [ 91.915561][ T6406] ? __check_object_size+0x47a/0x730 [ 91.917236][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 91.920855][ T6406] netlink_sendmsg+0x8e4/0xcb0 [ 91.931185][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 91.934338][ T6406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.934373][ T6406] ? __pfx_lock_release+0x10/0x10 [ 91.944307][ T6409] FAULT_INJECTION: forcing a failure. [ 91.944307][ T6409] name failslab, interval 1, probability 0, space 0, times 0 [ 91.948392][ T6406] ? aa_sock_msg_perm+0x91/0x160 [ 91.948423][ T6406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.948442][ T6406] __sock_sendmsg+0x221/0x270 [ 91.981133][ T6406] ____sys_sendmsg+0x52a/0x7e0 [ 91.985929][ T6406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.991233][ T6406] __sys_sendmsg+0x269/0x350 [ 91.995830][ T6406] ? __pfx_lock_release+0x10/0x10 [ 92.000865][ T6406] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.006000][ T6406] ? __pfx_vfs_write+0x10/0x10 [ 92.010799][ T6406] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 92.017396][ T6406] ? lockdep_hardirqs_on+0x99/0x150 [ 92.022603][ T6406] __do_fast_syscall_32+0xb4/0x110 [ 92.027732][ T6406] ? exc_page_fault+0x590/0x8b0 [ 92.032596][ T6406] do_fast_syscall_32+0x34/0x80 [ 92.037456][ T6406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.043806][ T6406] RIP: 0023:0xf7f60579 [ 92.047892][ T6406] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 92.067518][ T6406] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 92.075964][ T6406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 92.083964][ T6406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.091940][ T6406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.099927][ T6406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.107904][ T6406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.115898][ T6406] [ 92.119048][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz.3.172 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 92.122548][ T119] usb 1-1: USB disconnect, device number 11 [ 92.129643][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.129660][ T6409] Call Trace: [ 92.129668][ T6409] [ 92.129677][ T6409] dump_stack_lvl+0x241/0x360 [ 92.129709][ T6409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.129730][ T6409] ? __pfx__printk+0x10/0x10 [ 92.129762][ T6409] should_fail_ex+0x3b0/0x4e0 [ 92.129790][ T6409] should_failslab+0xac/0x100 [ 92.129811][ T6409] kmem_cache_alloc_node_noprof+0x77/0x380 [ 92.129832][ T6409] ? __alloc_skb+0x1c3/0x440 [ 92.129853][ T6409] __alloc_skb+0x1c3/0x440 [ 92.129876][ T6409] ? __pfx___alloc_skb+0x10/0x10 [ 92.129894][ T6409] ? xfrm_get_translator+0x10/0x240 [ 92.129915][ T6409] ? __pfx_lock_release+0x10/0x10 [ 92.129947][ T6409] xfrm_alloc_compat+0x1b6/0x16c0 [ 92.129975][ T6409] ? xfrm_get_translator+0x19/0x240 [ 92.129993][ T6409] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 92.130014][ T6409] xfrm_nlmsg_multicast+0xd7/0x1f0 [ 92.130035][ T6409] xfrm_send_policy_notify+0x1277/0x2360 [ 92.130059][ T6409] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 92.130076][ T6409] ? xfrm_policy_insert+0x665/0x940 [ 92.130094][ T6409] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 92.130117][ T6409] ? do_raw_spin_unlock+0x13c/0x8b0 [ 92.130134][ T6409] ? __xfrm_policy_link+0x2e4/0x530 [ 92.130156][ T6409] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 92.130174][ T6409] km_policy_notify+0x126/0x210 [ 92.130190][ T6409] ? km_policy_notify+0x2e/0x210 [ 92.130212][ T6409] xfrm_add_policy+0x54c/0x980 [ 92.130235][ T6409] ? __pfx_xfrm_add_policy+0x10/0x10 [ 92.130260][ T6409] ? __nla_parse+0x40/0x60 [ 92.130283][ T6409] xfrm_user_rcv_msg+0x890/0xb90 [ 92.130308][ T6409] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 92.130349][ T6409] ? __mutex_trylock_common+0x183/0x2e0 [ 92.130371][ T6409] ? __pfx___might_resched+0x10/0x10 [ 92.130393][ T6409] ? __pfx___mutex_trylock_common+0x10/0x10 [ 92.130428][ T6409] netlink_rcv_skb+0x1e3/0x430 [ 92.130450][ T6409] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 92.130470][ T6409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.130510][ T6409] xfrm_netlink_rcv+0x79/0x90 [ 92.130530][ T6409] netlink_unicast+0x7f6/0x990 [ 92.130564][ T6409] ? __pfx_netlink_unicast+0x10/0x10 [ 92.130587][ T6409] ? __virt_addr_valid+0x45f/0x530 [ 92.130609][ T6409] ? __phys_addr_symbol+0x2f/0x70 [ 92.130631][ T6409] ? __check_object_size+0x47a/0x730 [ 92.130659][ T6409] netlink_sendmsg+0x8e4/0xcb0 [ 92.130691][ T6409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.130713][ T6409] ? __pfx_lock_release+0x10/0x10 [ 92.130731][ T6409] ? aa_sock_msg_perm+0x91/0x160 [ 92.130763][ T6409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.130780][ T6409] __sock_sendmsg+0x221/0x270 [ 92.130806][ T6409] ____sys_sendmsg+0x52a/0x7e0 [ 92.130835][ T6409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.130869][ T6409] __sys_sendmsg+0x269/0x350 [ 92.130889][ T6409] ? __pfx_lock_release+0x10/0x10 [ 92.130912][ T6409] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.130951][ T6409] ? __pfx_vfs_write+0x10/0x10 [ 92.131003][ T6409] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 92.131028][ T6409] ? lockdep_hardirqs_on+0x99/0x150 [ 92.131052][ T6409] __do_fast_syscall_32+0xb4/0x110 [ 92.131076][ T6409] ? exc_page_fault+0x590/0x8b0 [ 92.131102][ T6409] do_fast_syscall_32+0x34/0x80 [ 92.131125][ T6409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.131146][ T6409] RIP: 0023:0xf7fd1579 [ 92.131164][ T6409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 92.131179][ T6409] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 92.131199][ T6409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 92.131212][ T6409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.131224][ T6409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.131235][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.131247][ T6409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.131274][ T6409] [ 92.461937][ T6406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.171'. [ 92.581945][ T5896] usb 3-1: USB disconnect, device number 13 [ 92.714416][ T5882] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 92.721882][ T6418] FAULT_INJECTION: forcing a failure. [ 92.721882][ T6418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.736924][ T6418] CPU: 1 UID: 0 PID: 6418 Comm: syz.0.176 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 92.747565][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.757640][ T6418] Call Trace: [ 92.760942][ T6418] [ 92.763890][ T6418] dump_stack_lvl+0x241/0x360 [ 92.768596][ T6418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.773805][ T6418] ? __pfx__printk+0x10/0x10 [ 92.778419][ T6418] ? snprintf+0xda/0x120 [ 92.782774][ T6418] should_fail_ex+0x3b0/0x4e0 [ 92.787483][ T6418] _copy_to_user+0x31/0xb0 [ 92.791927][ T6418] simple_read_from_buffer+0xca/0x150 [ 92.797335][ T6418] proc_fail_nth_read+0x1e9/0x250 [ 92.802385][ T6418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.807955][ T6418] ? rw_verify_area+0x55e/0x6f0 [ 92.812827][ T6418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.818382][ T6418] vfs_read+0x1fc/0xb70 [ 92.822547][ T6418] ? __pfx___mutex_lock+0x10/0x10 [ 92.827582][ T6418] ? __pfx_vfs_read+0x10/0x10 [ 92.832263][ T6418] ? __fget_files+0x2a/0x410 [ 92.836857][ T6418] ? __fget_files+0x395/0x410 [ 92.841535][ T6418] ? __fget_files+0x2a/0x410 [ 92.846135][ T6418] ksys_read+0x18f/0x2b0 [ 92.850387][ T6418] ? __pfx_ksys_read+0x10/0x10 [ 92.855151][ T6418] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 92.861745][ T6418] ? lockdep_hardirqs_on+0x99/0x150 [ 92.866950][ T6418] __do_fast_syscall_32+0xb4/0x110 [ 92.872067][ T6418] ? exc_page_fault+0x590/0x8b0 [ 92.877009][ T6418] do_fast_syscall_32+0x34/0x80 [ 92.881858][ T6418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.888178][ T6418] RIP: 0023:0xf7f30579 [ 92.892238][ T6418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 92.911850][ T6418] RSP: 002b:00000000f5086590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 92.920260][ T6418] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5086620 [ 92.928221][ T6418] RDX: 000000000000000f RSI: 00000000f73c3ff4 RDI: 0000000000000000 [ 92.936188][ T6418] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 92.944154][ T6418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.952117][ T6418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.960094][ T6418] [ 92.986962][ T5882] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 92.996801][ T5882] usb 4-1: config 0 has no interface number 0 [ 93.002941][ T5882] usb 4-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 93.018925][ T5882] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 93.030518][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.073402][ T5882] usb 4-1: Product: syz [ 93.077869][ T5882] usb 4-1: Manufacturer: syz [ 93.082484][ T5882] usb 4-1: SerialNumber: syz [ 93.130674][ T5882] usb 4-1: config 0 descriptor?? [ 93.149747][ T5882] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 93.253448][ T29] audit: type=1326 audit(1736328042.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.4.182" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712d579 code=0x0 [ 93.270374][ T6432] process 'syz.1.181' launched '/dev/fd/5' with NULL argv: empty string added [ 93.381245][ T6435] netlink: 76 bytes leftover after parsing attributes in process `syz.2.183'. [ 93.399136][ T6435] ipvlan1: entered promiscuous mode [ 93.404634][ T5884] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 93.404744][ T6435] ipvlan1: entered allmulticast mode [ 93.417817][ T6435] veth0_vlan: entered allmulticast mode [ 93.430781][ T6411] veth0_to_team: entered allmulticast mode [ 93.439147][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.449911][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.469962][ T6410] veth0_to_team: left allmulticast mode [ 93.502601][ T5896] usb 4-1: USB disconnect, device number 13 [ 93.525075][ T119] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 93.547521][ T6437] FAULT_INJECTION: forcing a failure. [ 93.547521][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 93.561346][ T6437] CPU: 0 UID: 0 PID: 6437 Comm: syz.2.184 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 93.571966][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.582024][ T6437] Call Trace: [ 93.585312][ T6437] [ 93.588247][ T6437] dump_stack_lvl+0x241/0x360 [ 93.592921][ T6437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.598120][ T6437] ? __pfx__printk+0x10/0x10 [ 93.602703][ T6437] ? fs_reclaim_acquire+0x93/0x130 [ 93.607819][ T6437] ? __pfx___might_resched+0x10/0x10 [ 93.613114][ T6437] should_fail_ex+0x3b0/0x4e0 [ 93.617797][ T6437] should_failslab+0xac/0x100 [ 93.622473][ T6437] __kmalloc_noprof+0xdd/0x4c0 [ 93.627244][ T6437] ? tomoyo_encode+0x26f/0x540 [ 93.632020][ T6437] tomoyo_encode+0x26f/0x540 [ 93.636618][ T6437] tomoyo_realpath_from_path+0x59e/0x5e0 [ 93.642269][ T6437] tomoyo_path2_perm+0x396/0xbb0 [ 93.647222][ T6437] ? tomoyo_path2_perm+0x364/0xbb0 [ 93.652347][ T6437] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 93.657821][ T6437] ? __pfx_is_access_to_paths_allowed+0x10/0x10 [ 93.664072][ T6437] ? __pfx_lock_release+0x10/0x10 [ 93.669099][ T6437] tomoyo_path_rename+0x16b/0x1e0 [ 93.674114][ T6437] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 93.679676][ T6437] security_path_rename+0x266/0x4e0 [ 93.684508][ T119] usb 2-1: Using ep0 maxpacket: 32 [ 93.684894][ T6437] do_renameat2+0x94a/0x13f0 [ 93.694619][ T6437] ? __pfx_do_renameat2+0x10/0x10 [ 93.699692][ T6437] ? __virt_addr_valid+0x183/0x530 [ 93.700739][ T119] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.704811][ T6437] ? __virt_addr_valid+0x45f/0x530 [ 93.704840][ T6437] ? __phys_addr_symbol+0x2f/0x70 [ 93.704862][ T6437] ? __might_fault+0xc6/0x120 [ 93.704889][ T6437] ? getname_flags+0x1e3/0x540 [ 93.704915][ T6437] __ia32_sys_renameat2+0xce/0xe0 [ 93.704941][ T6437] __do_fast_syscall_32+0xb4/0x110 [ 93.704974][ T6437] ? exc_page_fault+0x590/0x8b0 [ 93.722973][ T119] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 93.727455][ T6437] do_fast_syscall_32+0x34/0x80 [ 93.727488][ T6437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.727507][ T6437] RIP: 0023:0xf70bd579 [ 93.727524][ T6437] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 93.727539][ T6437] RSP: 002b:00000000f50af55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 93.727560][ T6437] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020002200 [ 93.727575][ T6437] RDX: 00000000ffffff9c RSI: 00000000200021c0 RDI: 0000000000000002 [ 93.734208][ T119] usb 2-1: config 12 has no interface number 0 [ 93.737320][ T6437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.737336][ T6437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.737348][ T6437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.737374][ T6437] [ 93.739429][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 93.774420][ T119] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 93.794257][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.804506][ T6437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.808651][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 93.825306][ T119] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 93.831117][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.844135][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.865905][ T5884] usb 1-1: config 0 descriptor?? [ 93.933829][ T119] usb 2-1: Product: syz [ 93.939635][ T5884] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 93.963237][ T119] usb 2-1: Manufacturer: syz [ 93.974223][ T119] usb 2-1: SerialNumber: syz [ 94.063053][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.073420][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.087337][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.123609][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.151354][ T6444] FAULT_INJECTION: forcing a failure. [ 94.151354][ T6444] name failslab, interval 1, probability 0, space 0, times 0 [ 94.167263][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.3.187 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 94.177902][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.187986][ T6444] Call Trace: [ 94.191289][ T6444] [ 94.194240][ T6444] dump_stack_lvl+0x241/0x360 [ 94.198957][ T6444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.204189][ T6444] ? __pfx__printk+0x10/0x10 [ 94.208816][ T6444] should_fail_ex+0x3b0/0x4e0 [ 94.213520][ T6444] should_failslab+0xac/0x100 [ 94.218224][ T6444] ? dst_alloc+0x12b/0x190 [ 94.222678][ T6444] kmem_cache_alloc_noprof+0x70/0x380 [ 94.228089][ T6444] dst_alloc+0x12b/0x190 [ 94.232360][ T6444] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 94.238446][ T6444] ip_route_output_key_hash+0x193/0x2b0 [ 94.244009][ T6444] ? ip_route_output_key_hash+0xdf/0x2b0 [ 94.249652][ T6444] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 94.255762][ T6444] ? mark_lock+0x9a/0x360 [ 94.260135][ T6444] ip_route_output_flow+0x29/0x140 [ 94.265283][ T6444] dccp_v4_connect+0x6a8/0x1380 [ 94.270164][ T6444] __inet_stream_connect+0x262/0xf30 [ 94.275471][ T6444] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.281810][ T6444] ? __local_bh_enable_ip+0x168/0x200 [ 94.287191][ T6444] ? lockdep_hardirqs_on+0x99/0x150 [ 94.292393][ T6444] ? __pfx___inet_stream_connect+0x10/0x10 [ 94.298202][ T6444] ? __local_bh_enable_ip+0x168/0x200 [ 94.303585][ T6444] ? inet_stream_connect+0x50/0xa0 [ 94.308694][ T6444] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 94.314420][ T6444] inet_stream_connect+0x65/0xa0 [ 94.319362][ T6444] __sys_connect+0x288/0x2d0 [ 94.323955][ T6444] ? __fget_files+0x2a/0x410 [ 94.328545][ T6444] ? __pfx___sys_connect+0x10/0x10 [ 94.333678][ T6444] __ia32_sys_connect+0x7a/0x90 [ 94.338527][ T6444] __do_fast_syscall_32+0xb4/0x110 [ 94.343646][ T6444] ? exc_page_fault+0x590/0x8b0 [ 94.348509][ T6444] do_fast_syscall_32+0x34/0x80 [ 94.353367][ T6444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.359696][ T6444] RIP: 0023:0xf7fd1579 [ 94.363760][ T6444] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 94.383364][ T6444] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 94.391778][ T6444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340 [ 94.399749][ T6444] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.407718][ T6444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.415688][ T6444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 94.423662][ T6444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.431641][ T6444] [ 94.454474][ T5837] Bluetooth: hci1: unexpected cc 0x204b length: 9 > 3 [ 94.471423][ T119] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.511354][ T119] usb 2-1: USB disconnect, device number 10 [ 94.524648][ T5896] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 94.677561][ T5896] usb 3-1: device descriptor read/64, error -71 [ 94.689999][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.703914][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.829041][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.917500][ T5896] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 95.064632][ T5896] usb 3-1: device descriptor read/64, error -71 [ 95.148160][ T3581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.175516][ T5896] usb usb3-port1: attempt power cycle [ 95.243938][ T3581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.296321][ T5884] gspca_vc032x: reg_r err -71 [ 95.301272][ T5884] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 95.321434][ T5884] usb 1-1: USB disconnect, device number 12 [ 95.384435][ T5881] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.425938][ T3581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.524611][ T5896] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 95.563327][ T5896] usb 3-1: device descriptor read/8, error -71 [ 95.571489][ T3581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.582028][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 95.597927][ T5881] usb 5-1: config 0 has an invalid interface number: 172 but max is 2 [ 95.614707][ T5881] usb 5-1: config 0 has an invalid interface number: 195 but max is 2 [ 95.640526][ T5881] usb 5-1: config 0 has no interface number 1 [ 95.647382][ T5881] usb 5-1: config 0 has no interface number 2 [ 95.660765][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.683861][ T5881] usb 5-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 95.693558][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.708431][ T5881] usb 5-1: Product: syz [ 95.712743][ T5881] usb 5-1: Manufacturer: syz [ 95.721270][ T5881] usb 5-1: SerialNumber: syz [ 95.741572][ T5881] usb 5-1: config 0 descriptor?? [ 95.760323][ T5881] usb 5-1: selecting invalid altsetting 1 [ 95.782748][ T5881] usb 5-1: Could not set interface, error -22 [ 95.824861][ T5896] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 95.834579][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.847304][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.864636][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.872406][ T5896] usb 3-1: device descriptor read/8, error -71 [ 95.889816][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.897341][ T3581] bridge_slave_1: left allmulticast mode [ 95.903433][ T3581] bridge_slave_1: left promiscuous mode [ 95.916518][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.926357][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.975892][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.984849][ T5896] usb usb3-port1: unable to enumerate USB device [ 96.007831][ T5884] usb 5-1: USB disconnect, device number 8 [ 96.065161][ T3581] bridge_slave_0: left allmulticast mode [ 96.070862][ T3581] bridge_slave_0: left promiscuous mode [ 96.099951][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.252432][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.261895][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.284790][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.296199][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.313759][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.322619][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.410112][ T6471] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 96.595394][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 96.661273][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.673221][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.693763][ T3581] bond0 (unregistering): Released all slaves [ 97.840340][ T3581] hsr_slave_0: left promiscuous mode [ 97.853335][ T3581] hsr_slave_1: left promiscuous mode [ 97.863476][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.863736][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.866356][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.889854][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.913637][ T3581] veth1_macvtap: left promiscuous mode [ 97.913754][ T3581] veth0_macvtap: left promiscuous mode [ 97.914174][ T3581] veth1_vlan: left promiscuous mode [ 97.915215][ T3581] veth0_vlan: left promiscuous mode [ 98.038774][ T5834] Bluetooth: hci1: command tx timeout [ 98.349619][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 98.383694][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 98.438577][ T5834] Bluetooth: hci4: command tx timeout [ 98.779256][ T6464] chnl_net:caif_netlink_parms(): no params data found [ 98.831520][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 98.861802][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.213'. [ 99.198231][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.219531][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.228278][ T6464] bridge_slave_0: entered allmulticast mode [ 99.235723][ T6464] bridge_slave_0: entered promiscuous mode [ 99.275783][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.283033][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.292311][ T6464] bridge_slave_1: entered allmulticast mode [ 99.300420][ T6464] bridge_slave_1: entered promiscuous mode [ 99.309646][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.322530][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.344573][ T6470] bridge_slave_0: entered allmulticast mode [ 99.365945][ T6470] bridge_slave_0: entered promiscuous mode [ 99.373931][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.381608][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.397094][ T6470] bridge_slave_1: entered allmulticast mode [ 99.404187][ T6470] bridge_slave_1: entered promiscuous mode [ 99.550500][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.578376][ T6464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.610189][ T6464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.647291][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.791086][ T6464] team0: Port device team_slave_0 added [ 99.814722][ T5884] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 99.845298][ T119] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 99.854964][ T6470] team0: Port device team_slave_0 added [ 99.877073][ T6464] team0: Port device team_slave_1 added [ 99.892723][ T6562] bridge_slave_0: left allmulticast mode [ 99.905346][ T6562] bridge_slave_0: left promiscuous mode [ 99.919742][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.942284][ T6562] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.966354][ T6470] team0: Port device team_slave_1 added [ 99.986420][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.987119][ T119] usb 5-1: device descriptor read/64, error -71 [ 99.998129][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.034215][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.069268][ T5884] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.086409][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.114558][ T5834] Bluetooth: hci1: command tx timeout [ 100.116394][ T5884] usb 1-1: config 0 descriptor?? [ 100.157715][ T3581] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.192759][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.200685][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.226835][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.242527][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.249640][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.275952][ T119] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 100.276010][ T6464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.337354][ T3581] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.363308][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.371214][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.397516][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.431305][ T119] usb 5-1: device descriptor read/64, error -71 [ 100.443688][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.450784][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.476862][ T6464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.514537][ T5834] Bluetooth: hci4: command tx timeout [ 100.541436][ T3581] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.552408][ T119] usb usb5-port1: attempt power cycle [ 100.563305][ T5884] plantronics 0003:047F:FFFF.0004: unbalanced collection at end of report description [ 100.574887][ T5884] plantronics 0003:047F:FFFF.0004: parse failed [ 100.581252][ T5884] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 100.600935][ T6464] hsr_slave_0: entered promiscuous mode [ 100.607725][ T6464] hsr_slave_1: entered promiscuous mode [ 100.634872][ T3581] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.701551][ T6470] hsr_slave_0: entered promiscuous mode [ 100.713830][ T6470] hsr_slave_1: entered promiscuous mode [ 100.720544][ T6470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.736809][ T6470] Cannot create hsr debugfs directory [ 100.801933][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.820524][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.850718][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.871647][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.895329][ T119] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.935372][ T119] usb 5-1: device descriptor read/8, error -71 [ 101.032521][ T3581] bridge_slave_1: left allmulticast mode [ 101.052562][ T3581] bridge_slave_1: left promiscuous mode [ 101.063132][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.080642][ T3581] bridge_slave_0: left allmulticast mode [ 101.090959][ T3581] bridge_slave_0: left promiscuous mode [ 101.097377][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.173180][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'. [ 101.190936][ T119] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 101.215692][ T119] usb 5-1: device descriptor read/8, error -71 [ 101.324976][ T119] usb usb5-port1: unable to enumerate USB device [ 101.466344][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.477893][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.488976][ T3581] bond0 (unregistering): Released all slaves [ 101.615060][ T29] audit: type=1326 audit(1736328050.630:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.654470][ T29] audit: type=1326 audit(1736328050.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.704933][ T29] audit: type=1326 audit(1736328050.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.726672][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.734001][ T29] audit: type=1326 audit(1736328050.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.756429][ T29] audit: type=1326 audit(1736328050.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.778092][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.785165][ T29] audit: type=1326 audit(1736328050.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.801032][ T119] usb 1-1: USB disconnect, device number 13 [ 101.807665][ T29] audit: type=1326 audit(1736328050.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.886125][ T29] audit: type=1326 audit(1736328050.650:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.951769][ T6464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.957726][ T29] audit: type=1326 audit(1736328050.650:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 101.980164][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.021322][ T29] audit: type=1326 audit(1736328050.650:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 102.092424][ T6464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.133330][ T6464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.158146][ T6464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.198510][ T5834] Bluetooth: hci1: command tx timeout [ 102.206131][ T6607] FAULT_INJECTION: forcing a failure. [ 102.206131][ T6607] name failslab, interval 1, probability 0, space 0, times 0 [ 102.242208][ T6470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.249305][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.2.226 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 102.259939][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.270018][ T6607] Call Trace: [ 102.273496][ T6607] [ 102.276446][ T6607] dump_stack_lvl+0x241/0x360 [ 102.281139][ T6607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.286345][ T6607] ? __pfx__printk+0x10/0x10 [ 102.290939][ T6607] ? fs_reclaim_acquire+0x93/0x130 [ 102.296060][ T6607] ? __pfx___might_resched+0x10/0x10 [ 102.301349][ T6607] should_fail_ex+0x3b0/0x4e0 [ 102.306036][ T6607] should_failslab+0xac/0x100 [ 102.310716][ T6607] __kmalloc_noprof+0xdd/0x4c0 [ 102.315488][ T6607] ? tomoyo_encode+0x26f/0x540 [ 102.320258][ T6607] tomoyo_encode+0x26f/0x540 [ 102.324851][ T6607] tomoyo_realpath_from_path+0x59e/0x5e0 [ 102.330495][ T6607] tomoyo_path_number_perm+0x236/0x860 [ 102.335963][ T6607] ? tomoyo_path_number_perm+0x206/0x860 [ 102.341601][ T6607] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.347594][ T6607] ? __pfx_lock_acquire+0x10/0x10 [ 102.352632][ T6607] ? __fget_files+0x2a/0x410 [ 102.357224][ T6607] ? __fget_files+0x2a/0x410 [ 102.361820][ T6607] security_file_ioctl_compat+0xc6/0x2a0 [ 102.367457][ T6607] __se_compat_sys_ioctl+0xd6/0xc10 [ 102.372656][ T6607] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 102.378482][ T6607] ? __fget_files+0x2a/0x410 [ 102.383185][ T6607] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.389182][ T6607] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.395522][ T6607] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 102.402142][ T6607] ? lockdep_hardirqs_on+0x99/0x150 [ 102.407360][ T6607] __do_fast_syscall_32+0xb4/0x110 [ 102.412486][ T6607] ? exc_page_fault+0x590/0x8b0 [ 102.417350][ T6607] do_fast_syscall_32+0x34/0x80 [ 102.422208][ T6607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.428539][ T6607] RIP: 0023:0xf70bd579 [ 102.432607][ T6607] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 102.452218][ T6607] RSP: 002b:00000000f50af55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 102.460638][ T6607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008551b [ 102.468608][ T6607] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.476577][ T6607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.484544][ T6607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.492516][ T6607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.500500][ T6607] [ 102.525968][ T6607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.571738][ T3581] hsr_slave_0: left promiscuous mode [ 102.594446][ T5834] Bluetooth: hci4: command tx timeout [ 102.633652][ T3581] hsr_slave_1: left promiscuous mode [ 102.640678][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.683720][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.725662][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.733178][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.768515][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.782584][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.797901][ T3581] veth1_macvtap: left promiscuous mode [ 102.814777][ T3581] veth0_macvtap: left promiscuous mode [ 102.828758][ T3581] veth1_vlan: left promiscuous mode [ 102.834286][ T3581] veth0_vlan: left promiscuous mode [ 102.984452][ T5896] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 103.024613][ T119] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 103.119819][ T5896] usb 1-1: device descriptor read/64, error -71 [ 103.185135][ T119] usb 5-1: Using ep0 maxpacket: 8 [ 103.204786][ T119] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.218812][ T119] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.228782][ T119] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.244214][ T119] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.263872][ T119] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.273543][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.363185][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 103.364501][ T5896] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 103.402827][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 103.514631][ T5896] usb 1-1: device descriptor read/64, error -71 [ 103.532709][ T119] usb 5-1: GET_CAPABILITIES returned 0 [ 103.543084][ T119] usbtmc 5-1:16.0: can't read capabilities [ 103.651292][ T5896] usb usb1-port1: attempt power cycle [ 103.786423][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.808631][ T119] usb 5-1: USB disconnect, device number 13 [ 103.825557][ T6470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.836072][ T6470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.880398][ T6470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.994738][ T5896] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 104.040719][ T5896] usb 1-1: device descriptor read/8, error -71 [ 104.141626][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.231'. [ 104.155010][ T6464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.215431][ T6464] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.240810][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.274715][ T5834] Bluetooth: hci1: command tx timeout [ 104.282377][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.289558][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.305097][ T5896] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 104.325141][ T5896] usb 1-1: device descriptor read/8, error -71 [ 104.327832][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.357568][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.364792][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.410836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.417997][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.437634][ T5896] usb usb1-port1: unable to enumerate USB device [ 104.480689][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.480790][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.660515][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.677783][ T5834] Bluetooth: hci4: command tx timeout [ 104.712044][ T6464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.774943][ T5884] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 104.865690][ T6470] veth0_vlan: entered promiscuous mode [ 104.907935][ T6470] veth1_vlan: entered promiscuous mode [ 104.927489][ T6464] veth0_vlan: entered promiscuous mode [ 104.935148][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 104.959979][ T5884] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 104.985922][ T6464] veth1_vlan: entered promiscuous mode [ 104.991975][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.993970][ T5834] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 105.041666][ T5884] usb 5-1: Product: syz [ 105.061257][ T5884] usb 5-1: Manufacturer: syz [ 105.089629][ T6470] veth0_macvtap: entered promiscuous mode [ 105.104044][ T5884] usb 5-1: SerialNumber: syz [ 105.116675][ T5884] usb 5-1: config 0 descriptor?? [ 105.124531][ T6662] FAULT_INJECTION: forcing a failure. [ 105.124531][ T6662] name failslab, interval 1, probability 0, space 0, times 0 [ 105.138646][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: syz.2.236 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 105.149267][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.159337][ T6662] Call Trace: [ 105.162623][ T6662] [ 105.165564][ T6662] dump_stack_lvl+0x241/0x360 [ 105.170252][ T6662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.175456][ T6662] ? __pfx__printk+0x10/0x10 [ 105.180056][ T6662] should_fail_ex+0x3b0/0x4e0 [ 105.184756][ T6662] should_failslab+0xac/0x100 [ 105.189437][ T6662] __kmalloc_cache_noprof+0x70/0x390 [ 105.194731][ T6662] ? __hw_addr_add_ex+0x1a8/0x610 [ 105.199767][ T6662] __hw_addr_add_ex+0x1a8/0x610 [ 105.204629][ T6662] dev_addr_init+0x143/0x230 [ 105.209229][ T6662] ? __pfx_dev_addr_init+0x10/0x10 [ 105.214391][ T6662] ? read_word_at_a_time+0xe/0x20 [ 105.219424][ T6662] alloc_netdev_mqs+0x2ae/0x1080 [ 105.224370][ T6662] ? __pfx_vlan_setup+0x10/0x10 [ 105.229223][ T6662] ? __pfx_snprintf+0x10/0x10 [ 105.233902][ T6662] rtnl_create_link+0x2f9/0xc20 [ 105.238760][ T6662] rtnl_newlink_create+0x210/0xa40 [ 105.243884][ T6662] ? __pfx___mutex_lock+0x10/0x10 [ 105.248919][ T6662] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 105.254569][ T6662] ? ns_capable+0x8a/0xf0 [ 105.258914][ T6662] rtnl_newlink+0x1c7e/0x2210 [ 105.263614][ T6662] ? __pfx_rtnl_newlink+0x10/0x10 [ 105.268645][ T6662] ? __netlink_deliver_tap+0x56b/0x7f0 [ 105.274103][ T6662] ? __pfx_validate_chain+0x10/0x10 [ 105.279305][ T6662] ? __sock_sendmsg+0x221/0x270 [ 105.284158][ T6662] ? ____sys_sendmsg+0x52a/0x7e0 [ 105.289098][ T6662] ? __sys_sendmsg+0x269/0x350 [ 105.293859][ T6662] ? __do_fast_syscall_32+0xb4/0x110 [ 105.299146][ T6662] ? do_fast_syscall_32+0x34/0x80 [ 105.304178][ T6662] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.310696][ T6662] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.316683][ T6662] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.323021][ T6662] ? mark_lock+0x9a/0x360 [ 105.327355][ T6662] ? __lock_acquire+0x1397/0x2100 [ 105.332409][ T6662] ? __pfx_lock_release+0x10/0x10 [ 105.337447][ T6662] ? __pfx_rtnl_newlink+0x10/0x10 [ 105.342472][ T6662] rtnetlink_rcv_msg+0x791/0xcf0 [ 105.347407][ T6662] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 105.352524][ T6662] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.357990][ T6662] ? ref_tracker_free+0x643/0x7e0 [ 105.363018][ T6662] netlink_rcv_skb+0x1e3/0x430 [ 105.367786][ T6662] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.373253][ T6662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.378551][ T6662] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.383755][ T6662] netlink_unicast+0x7f6/0x990 [ 105.388532][ T6662] ? __pfx_netlink_unicast+0x10/0x10 [ 105.393820][ T6662] ? __virt_addr_valid+0x45f/0x530 [ 105.398933][ T6662] ? __phys_addr_symbol+0x2f/0x70 [ 105.403960][ T6662] ? __check_object_size+0x47a/0x730 [ 105.409250][ T6662] netlink_sendmsg+0x8e4/0xcb0 [ 105.414022][ T6662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.419313][ T6662] ? __pfx_lock_release+0x10/0x10 [ 105.424351][ T6662] ? aa_sock_msg_perm+0x91/0x160 [ 105.429316][ T6662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.434605][ T6662] __sock_sendmsg+0x221/0x270 [ 105.439465][ T6662] ____sys_sendmsg+0x52a/0x7e0 [ 105.444251][ T6662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.449554][ T6662] __sys_sendmsg+0x269/0x350 [ 105.454149][ T6662] ? __pfx_lock_release+0x10/0x10 [ 105.459176][ T6662] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.464304][ T6662] ? __pfx_vfs_write+0x10/0x10 [ 105.469097][ T6662] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 105.475689][ T6662] ? lockdep_hardirqs_on+0x99/0x150 [ 105.480897][ T6662] __do_fast_syscall_32+0xb4/0x110 [ 105.486023][ T6662] ? exc_page_fault+0x590/0x8b0 [ 105.490881][ T6662] do_fast_syscall_32+0x34/0x80 [ 105.495996][ T6662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.502330][ T6662] RIP: 0023:0xf70bd579 [ 105.506399][ T6662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 105.526013][ T6662] RSP: 002b:00000000f50af55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 105.534427][ T6662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 105.542408][ T6662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.550380][ T6662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.558356][ T6662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 105.566337][ T6662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.574320][ T6662] [ 105.587124][ T5884] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 105.596130][ T5884] airspy 5-1:0.0: Could not detect board [ 105.602242][ T5884] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 105.615934][ T6470] veth1_macvtap: entered promiscuous mode [ 105.629389][ T5884] usb 5-1: USB disconnect, device number 14 [ 105.655117][ T6464] veth0_macvtap: entered promiscuous mode [ 105.681955][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.703156][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.713523][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.731513][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.741758][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.759060][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.782695][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.818123][ T6464] veth1_macvtap: entered promiscuous mode [ 105.849096][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.863006][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.882275][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.900623][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.911071][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.927164][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.942588][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.985047][ T6470] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.020452][ T6470] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.084729][ T6470] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.093474][ T6470] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.163179][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.194502][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.247996][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.286747][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.307586][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.322689][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.332783][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.343437][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.357051][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.492511][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.508830][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.527113][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.562834][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.577493][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.636396][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.656054][ T6464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.754757][ T6464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.814209][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.921232][ T6464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.938727][ T6464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.953589][ T6464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.981647][ T6464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.212677][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.309092][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.538059][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.597558][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.692555][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.774738][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.978959][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.022978][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.596102][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.624464][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 108.682967][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.796921][ T5883] usb 7-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 108.811978][ T5883] usb 7-1: config 162 has 0 interfaces, different from the descriptor's value: 1 [ 108.844190][ T5881] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.856647][ T5883] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=ba.c5 [ 108.905728][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.924422][ T5883] usb 7-1: Product: syz [ 108.931921][ T5883] usb 7-1: Manufacturer: syz [ 108.937295][ T5883] usb 7-1: SerialNumber: syz [ 109.116003][ T5881] usb 6-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 109.126450][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.144816][ T5881] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.153959][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.172846][ T5881] usb 6-1: SerialNumber: syz [ 109.400428][ T5881] usb 6-1: 0:2 : does not exist [ 109.556191][ T5881] usb 6-1: USB disconnect, device number 2 [ 109.804563][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 109.825671][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.976746][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 109.990451][ T5884] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 110.014386][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.080878][ T5884] usb 1-1: Product: syz [ 110.107927][ T5884] usb 1-1: Manufacturer: syz [ 110.112603][ T5884] usb 1-1: SerialNumber: syz [ 110.228149][ T5884] usb 1-1: config 0 descriptor?? [ 110.297599][ T5884] usb 1-1: no audio or video endpoints found [ 110.319796][ T6743] netlink: 56 bytes leftover after parsing attributes in process `syz.5.249'. [ 110.423182][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.251'. [ 110.782615][ T5881] usb 1-1: USB disconnect, device number 18 [ 110.844444][ T5884] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 111.081949][ T5884] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.098872][ T5884] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.131634][ T5884] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.169611][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.183402][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.214802][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.234468][ T6757] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 111.247432][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.395538][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.555030][ T5881] usb 6-1: device descriptor read/64, error -71 [ 111.589567][ T6757] program syz.2.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.659142][ T5883] usb 7-1: USB disconnect, device number 2 [ 111.693215][ T6776] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 111.713557][ T6776] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 111.873213][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 111.873241][ T29] audit: type=1326 audit(1736328060.880:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 111.901502][ T29] audit: type=1326 audit(1736328060.880:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 111.923708][ T29] audit: type=1326 audit(1736328060.880:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 111.945465][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.951776][ T29] audit: type=1326 audit(1736328060.880:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 111.957997][ T6778] netlink: 136 bytes leftover after parsing attributes in process `syz.0.258'. [ 111.974115][ T29] audit: type=1326 audit(1736328060.880:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 112.004940][ T29] audit: type=1326 audit(1736328060.880:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 112.026566][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.032920][ T29] audit: type=1326 audit(1736328060.900:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 112.041374][ T6778] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 112.055239][ T29] audit: type=1326 audit(1736328060.900:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 112.092487][ T29] audit: type=1326 audit(1736328060.900:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 112.114201][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.121840][ T29] audit: type=1326 audit(1736328060.900:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 112.143615][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.150957][ T5881] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 112.334557][ T5881] usb 6-1: device descriptor read/64, error -71 [ 112.444630][ T5881] usb usb6-port1: attempt power cycle [ 112.789647][ T5881] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 112.871669][ T5881] usb 6-1: device descriptor read/8, error -71 [ 113.184538][ T5881] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 113.235642][ T5881] usb 6-1: device descriptor read/8, error -71 [ 113.345302][ T5881] usb usb6-port1: unable to enumerate USB device [ 113.550613][ T6803] netdevsim netdevsim4: Direct firmware load for / [ 113.550613][ T6803] failed with error -2 [ 113.619404][ T6803] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 113.619404][ T6803] [ 113.701309][ T5894] usb 3-1: USB disconnect, device number 18 [ 115.288796][ T3581] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.446781][ T3581] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.637409][ T3581] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.734708][ T6878] netlink: 136 bytes leftover after parsing attributes in process `syz.0.277'. [ 115.774519][ T6878] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 115.939845][ T3581] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.235971][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.250127][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.260414][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.294846][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.318630][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 116.326415][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.498388][ T3581] bridge_slave_1: left allmulticast mode [ 116.513149][ T3581] bridge_slave_1: left promiscuous mode [ 116.564714][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.616290][ T3581] bridge_slave_0: left allmulticast mode [ 116.624717][ T6907] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 116.643408][ T3581] bridge_slave_0: left promiscuous mode [ 116.659615][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.715425][ T6909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.809118][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'. [ 117.008480][ T5894] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 117.175970][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 117.192403][ T5894] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 117.209151][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 117.218140][ T5894] usb 1-1: Product: syz [ 117.222488][ T5894] usb 1-1: Manufacturer: syz [ 117.227643][ T5894] usb 1-1: SerialNumber: syz [ 117.245804][ T5894] r8152-cfgselector 1-1: Unknown version 0x0000 [ 117.252212][ T5894] r8152-cfgselector 1-1: config 0 descriptor?? [ 117.358113][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.370603][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.386960][ T3581] bond0 (unregistering): Released all slaves [ 117.467336][ T6910] bond1 (unregistering): Released all slaves [ 117.519043][ T6915] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 117.527736][ T6915] macsec1: entered allmulticast mode [ 117.533036][ T6915] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 117.550174][ T6915] batman_adv: batadv0: Adding interface: macsec1 [ 117.561079][ T6915] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.602200][ T6915] batman_adv: batadv0: Interface activated: macsec1 [ 117.621125][ T6921] Dead loop on virtual device ipvlan1, fix it urgently! [ 117.638338][ T6921] syz.2.287 (6921) used greatest stack depth: 6072 bytes left [ 117.711013][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 117.788375][ T6926] random: crng reseeded on system resumption [ 117.891964][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 117.891983][ T29] audit: type=1326 audit(1736328066.900:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.014480][ T29] audit: type=1326 audit(1736328066.980:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.054167][ T29] audit: type=1326 audit(1736328066.980:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.112571][ T29] audit: type=1326 audit(1736328066.980:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.176805][ T29] audit: type=1326 audit(1736328066.980:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.200218][ T29] audit: type=1326 audit(1736328067.000:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.224017][ T3581] hsr_slave_0: left promiscuous mode [ 118.245947][ T3581] hsr_slave_1: left promiscuous mode [ 118.257530][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.274915][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.285159][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.293857][ T29] audit: type=1326 audit(1736328067.000:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.320248][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.331351][ T29] audit: type=1326 audit(1736328067.000:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.358237][ T5834] Bluetooth: hci4: command tx timeout [ 118.370148][ T3581] veth1_macvtap: left promiscuous mode [ 118.422319][ T3581] veth0_macvtap: left promiscuous mode [ 118.461141][ T3581] veth1_vlan: left promiscuous mode [ 118.472129][ T29] audit: type=1326 audit(1736328067.000:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.484482][ T3581] veth0_vlan: left promiscuous mode [ 118.551086][ T29] audit: type=1326 audit(1736328067.010:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 118.674851][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 119.134421][ T6965] binder: 6962:6965 ioctl c0306201 20000940 returned -14 [ 119.647707][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 119.731306][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 120.133946][ T6982] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.301'. [ 120.439335][ T5834] Bluetooth: hci4: command tx timeout [ 121.121870][ T6901] chnl_net:caif_netlink_parms(): no params data found [ 121.257802][ T119] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 121.679261][ T6998] fuse: Unknown parameter '  hF*!od [ 121.679261][ T6998] &-3Tgk|' [ 121.699096][ T7006] FAULT_INJECTION: forcing a failure. [ 121.699096][ T7006] name failslab, interval 1, probability 0, space 0, times 0 [ 121.713262][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.4.306 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 121.723893][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.733962][ T7006] Call Trace: [ 121.737245][ T7006] [ 121.740176][ T7006] dump_stack_lvl+0x241/0x360 [ 121.744880][ T7006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.750087][ T7006] ? __pfx__printk+0x10/0x10 [ 121.754692][ T7006] should_fail_ex+0x3b0/0x4e0 [ 121.759380][ T7006] should_failslab+0xac/0x100 [ 121.764063][ T7006] kmem_cache_alloc_node_noprof+0x77/0x380 [ 121.769879][ T7006] ? __alloc_skb+0x1c3/0x440 [ 121.774475][ T7006] __alloc_skb+0x1c3/0x440 [ 121.778892][ T7006] ? __pfx___alloc_skb+0x10/0x10 [ 121.783826][ T7006] ? xfrm_send_acquire+0xb69/0x1320 [ 121.789027][ T7006] pfkey_send_acquire+0x5dd/0x2d50 [ 121.794163][ T7006] km_query+0x120/0x220 [ 121.798324][ T7006] ? km_query+0x30/0x220 [ 121.802656][ T7006] xfrm_state_find+0x4585/0x6430 [ 121.807615][ T7006] ? xfrm_state_find+0x478/0x6430 [ 121.812648][ T7006] ? __pfx_xfrm_state_find+0x10/0x10 [ 121.817935][ T7006] ? __rt6_find_exception_rcu+0x128/0x4c0 [ 121.823659][ T7006] ? mark_lock+0x9a/0x360 [ 121.828003][ T7006] ? __pfx_validate_chain+0x10/0x10 [ 121.833208][ T7006] xfrm_resolve_and_create_bundle+0x7de/0x3360 [ 121.839383][ T7006] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 121.846068][ T7006] ? __pfx_lock_acquire+0x10/0x10 [ 121.851098][ T7006] ? xfrm_sk_policy_lookup+0x93/0x840 [ 121.856488][ T7006] ? xfrm_sk_policy_lookup+0x7ef/0x840 [ 121.861971][ T7006] ? xfrm_sk_policy_lookup+0x93/0x840 [ 121.867362][ T7006] ? xfrm_expand_policies+0x3fb/0x690 [ 121.872744][ T7006] xfrm_lookup_with_ifid+0x366/0x1f60 [ 121.878130][ T7006] ? ip6_dst_lookup_tail+0xbd8/0x14f0 [ 121.883524][ T7006] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 121.889335][ T7006] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 121.894977][ T7006] xfrm_lookup_route+0x3c/0x1c0 [ 121.899853][ T7006] ip6_dst_lookup_flow+0x13e/0x180 [ 121.905015][ T7006] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 121.910673][ T7006] ip6_datagram_dst_update+0x7e5/0xe40 [ 121.916143][ T7006] ? __pfx_ip6_datagram_dst_update+0x10/0x10 [ 121.922141][ T7006] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.928126][ T7006] ? __ip6_datagram_connect+0xb9c/0x1230 [ 121.933779][ T7006] __ip6_datagram_connect+0xbfa/0x1230 [ 121.939247][ T7006] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 121.945142][ T7006] ? ip6_datagram_connect_v6_only+0x55/0xa0 [ 121.951038][ T7006] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 121.956759][ T7006] ? do_raw_spin_unlock+0x13c/0x8b0 [ 121.961961][ T7006] ip6_datagram_connect_v6_only+0x63/0xa0 [ 121.967681][ T7006] __sys_connect+0x288/0x2d0 [ 121.972268][ T7006] ? __fget_files+0x2a/0x410 [ 121.976866][ T7006] ? __pfx___sys_connect+0x10/0x10 [ 121.981992][ T7006] __ia32_sys_connect+0x7a/0x90 [ 121.986934][ T7006] __do_fast_syscall_32+0xb4/0x110 [ 121.992050][ T7006] ? exc_page_fault+0x590/0x8b0 [ 121.996906][ T7006] do_fast_syscall_32+0x34/0x80 [ 122.001760][ T7006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.008089][ T7006] RIP: 0023:0xf712d579 [ 122.012158][ T7006] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 122.031763][ T7006] RSP: 002b:00000000f511f55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 122.040200][ T7006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 122.048174][ T7006] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 122.056158][ T7006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.064138][ T7006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.072119][ T7006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.080112][ T7006] [ 122.177171][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.189839][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.251072][ T6901] bridge_slave_0: entered allmulticast mode [ 122.273013][ T6901] bridge_slave_0: entered promiscuous mode [ 122.317587][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.339509][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.352283][ T6901] bridge_slave_1: entered allmulticast mode [ 122.360316][ T6901] bridge_slave_1: entered promiscuous mode [ 122.465044][ T5884] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 122.515225][ T5834] Bluetooth: hci4: command tx timeout [ 122.563016][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.574546][ T119] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 122.601837][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.634859][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 122.643612][ T5884] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 122.666677][ T5884] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 122.707466][ T5884] usb 1-1: config 0 has no interface number 0 [ 122.713983][ T5884] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.725874][ T5884] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.736983][ T5884] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.760719][ T5884] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 122.770356][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 122.778457][ T5884] usb 1-1: Product: syz [ 122.783879][ T119] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 122.784790][ T5884] usb 1-1: config 0 descriptor?? [ 122.799618][ T7010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.823650][ T119] usb 6-1: config 0 has no interface number 0 [ 122.872841][ T119] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 122.886732][ T119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.893560][ T6901] team0: Port device team_slave_0 added [ 122.903607][ T6901] team0: Port device team_slave_1 added [ 122.930832][ T119] usb 6-1: Product: syz [ 122.955779][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.957716][ T119] usb 6-1: Manufacturer: syz [ 122.963332][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.018584][ T119] usb 6-1: SerialNumber: syz [ 123.031688][ T119] usb 6-1: config 0 descriptor?? [ 123.077174][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.088511][ T119] mvusb_mdio 6-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 123.125099][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.147273][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.200193][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.295204][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.5.310'. [ 123.431272][ T6901] hsr_slave_0: entered promiscuous mode [ 123.457883][ T6901] hsr_slave_1: entered promiscuous mode [ 123.471210][ T6901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.506718][ T6901] Cannot create hsr debugfs directory [ 123.785792][ T7058] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.313'. [ 123.926189][ T5896] usb 6-1: USB disconnect, device number 7 [ 124.293674][ T5884] usb 1-1: USB disconnect, device number 20 [ 124.374496][ T941] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 124.580628][ T941] usb 5-1: Using ep0 maxpacket: 16 [ 124.590590][ T941] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.604587][ T5834] Bluetooth: hci4: command tx timeout [ 124.653185][ T941] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64 [ 124.687514][ T6901] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.726941][ T941] usb 5-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.773535][ T6901] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.791812][ T941] usb 5-1: config 1 interface 0 has no altsetting 0 [ 124.837732][ T6901] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.854722][ T941] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.863808][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.888213][ T6901] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.905175][ T941] usb 5-1: Product: syz [ 124.909393][ T941] usb 5-1: Manufacturer: syz [ 124.914298][ T941] usb 5-1: SerialNumber: syz [ 124.939083][ T7075] vlan2: entered promiscuous mode [ 124.970173][ T7068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.984758][ T7068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 125.000619][ T7075] erspan0: entered promiscuous mode [ 125.006664][ T7075] vlan2: entered allmulticast mode [ 125.028471][ T7075] erspan0: entered allmulticast mode [ 125.200301][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.224430][ T119] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 125.227037][ T6901] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.249167][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.256348][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.279598][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.292291][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.299476][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.318670][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.375142][ T6901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.385663][ T6901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.434487][ T5894] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 125.449165][ T6901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.470368][ T119] usb 3-1: Using ep0 maxpacket: 8 [ 125.478329][ T119] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 125.487394][ T119] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 125.498080][ T119] usb 3-1: config 6 has no interface number 0 [ 125.511091][ T119] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.541641][ T119] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.595934][ T119] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.616159][ T5894] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.654497][ T5894] usb 1-1: config 0 has no interface number 0 [ 125.656769][ T6901] veth0_vlan: entered promiscuous mode [ 125.660749][ T119] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.694515][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.714371][ T6901] veth1_vlan: entered promiscuous mode [ 125.730621][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 125.754438][ T119] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 125.772871][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.782879][ T5894] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 125.816664][ T6901] veth0_macvtap: entered promiscuous mode [ 125.834764][ T119] usb 3-1: Product: syz [ 125.838984][ T119] usb 3-1: Manufacturer: syz [ 125.843693][ T119] usb 3-1: SerialNumber: syz [ 125.861260][ T5894] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 125.869091][ T6901] veth1_macvtap: entered promiscuous mode [ 125.891924][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.908780][ T119] hso 3-1:6.2: Failed to find BULK IN ep [ 125.949634][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.960618][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.964975][ T5894] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 126.014558][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.025310][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.044472][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.045420][ T5894] usb 1-1: config 0 descriptor?? [ 126.080416][ T7086] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 126.092169][ T5894] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 126.106019][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.144781][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.175657][ T5894] usb 3-1: USB disconnect, device number 19 [ 126.184634][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.208626][ T941] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 126.220371][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.241897][ T941] usb 5-1: USB disconnect, device number 15 [ 126.250075][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.305543][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.344729][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.368833][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.394855][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.417422][ T7097] FAULT_INJECTION: forcing a failure. [ 126.417422][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.431078][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.455036][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.464528][ T7097] CPU: 1 UID: 0 PID: 7097 Comm: syz.5.319 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 126.465690][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.475563][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.475582][ T7097] Call Trace: [ 126.475592][ T7097] [ 126.475602][ T7097] dump_stack_lvl+0x241/0x360 [ 126.475634][ T7097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.475657][ T7097] ? __pfx__printk+0x10/0x10 [ 126.475685][ T7097] ? snprintf+0xda/0x120 [ 126.475709][ T7097] should_fail_ex+0x3b0/0x4e0 [ 126.475737][ T7097] _copy_to_user+0x31/0xb0 [ 126.475770][ T7097] simple_read_from_buffer+0xca/0x150 [ 126.475794][ T7097] proc_fail_nth_read+0x1e9/0x250 [ 126.475817][ T7097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.495665][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.496277][ T7097] ? rw_verify_area+0x55e/0x6f0 [ 126.500830][ T6901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.502469][ T7097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.502498][ T7097] vfs_read+0x1fc/0xb70 [ 126.502524][ T7097] ? __pfx___mutex_lock+0x10/0x10 [ 126.529224][ T6901] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.530280][ T7097] ? __pfx_vfs_read+0x10/0x10 [ 126.530311][ T7097] ? __fget_files+0x2a/0x410 [ 126.536797][ T6901] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.540660][ T7097] ? __fget_files+0x395/0x410 [ 126.540687][ T7097] ? __fget_files+0x2a/0x410 [ 126.540718][ T7097] ksys_read+0x18f/0x2b0 [ 126.553157][ T6901] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.556022][ T7097] ? __pfx_ksys_read+0x10/0x10 [ 126.556050][ T7097] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 126.556075][ T7097] ? lockdep_hardirqs_on+0x99/0x150 [ 126.556099][ T7097] __do_fast_syscall_32+0xb4/0x110 [ 126.556124][ T7097] ? exc_page_fault+0x590/0x8b0 [ 126.556150][ T7097] do_fast_syscall_32+0x34/0x80 [ 126.556176][ T7097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.669132][ T7097] RIP: 0023:0xf70fd579 [ 126.673204][ T7097] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 126.692825][ T7097] RSP: 002b:00000000f50ef590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 126.701246][ T7097] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000f50ef620 [ 126.709215][ T7097] RDX: 000000000000000f RSI: 00000000f7433ff4 RDI: 0000000000000000 [ 126.717183][ T7097] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 126.725153][ T7097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.733118][ T7097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.741097][ T7097] [ 126.746023][ T6901] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.880581][ T5894] usb 1-1: USB disconnect, device number 21 [ 126.892945][ T5894] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 126.893672][ T6901] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 126.917960][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.945236][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.953534][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.026252][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.065113][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.343463][ T7113] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.323'. [ 127.505340][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.327'. [ 127.647350][ T29] audit: type=1326 audit(1736328076.620:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.7.329" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x0 [ 127.663683][ T7133] fuse: Bad value for 'user_id' [ 127.702530][ T7133] fuse: Bad value for 'user_id' [ 127.724465][ T5881] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 127.863592][ T7142] vivid-000: disconnect [ 127.875469][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 127.882965][ T5881] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 127.906619][ T5881] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 127.944587][ T5881] usb 3-1: config 6 has no interface number 0 [ 127.950737][ T5881] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 127.979160][ T7142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.330'. [ 128.004414][ T5881] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 128.017413][ T7140] netlink: 60 bytes leftover after parsing attributes in process `syz.0.330'. [ 128.035195][ T5881] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.048674][ T7139] vivid-000: reconnect [ 128.066509][ T5881] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 128.076167][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.084196][ T5881] usb 3-1: Product: syz [ 128.124625][ T5881] usb 3-1: Manufacturer: syz [ 128.144456][ T5881] usb 3-1: SerialNumber: syz [ 128.183402][ T5881] hso 3-1:6.2: Failed to find INT IN ep [ 128.502996][ T5881] usb 3-1: USB disconnect, device number 20 [ 128.514661][ T5894] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 128.671908][ T5894] usb 1-1: config 2 has an invalid interface number: 139 but max is 1 [ 128.680645][ T5894] usb 1-1: config 2 has an invalid interface number: 77 but max is 1 [ 128.689134][ T5894] usb 1-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 128.699493][ T5894] usb 1-1: config 2 has no interface number 0 [ 128.707624][ T5894] usb 1-1: config 2 has no interface number 1 [ 128.714179][ T5894] usb 1-1: config 2 interface 139 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 128.725217][ T5894] usb 1-1: config 2 interface 139 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 128.736378][ T5894] usb 1-1: config 2 interface 139 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 128.747458][ T5894] usb 1-1: config 2 interface 139 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 128.758689][ T5894] usb 1-1: config 2 interface 139 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 128.769573][ T5894] usb 1-1: config 2 interface 139 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 128.780342][ T5894] usb 1-1: config 2 interface 139 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 128.791329][ T5894] usb 1-1: config 2 interface 139 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 1023 [ 128.801474][ T5894] usb 1-1: config 2 interface 139 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 128.812850][ T5894] usb 1-1: config 2 interface 139 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 128.824003][ T5894] usb 1-1: config 2 interface 77 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 128.837516][ T5894] usb 1-1: config 2 interface 139 has no altsetting 0 [ 128.844306][ T5894] usb 1-1: config 2 interface 77 has no altsetting 0 [ 128.883380][ T5894] usb 1-1: Dual-Role OTG device on HNP port [ 128.889890][ T5894] usb 1-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=7a.b9 [ 128.911101][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.921915][ T5894] usb 1-1: Product: ḭ鸞鎾횏㡻㫗퐞蛛헻箇㬮쳀篭ષ稱歷≸썑ḍ⨊ᐚ瞑霜荭젅⦧⛞䧲⁊퐪诮論蠀ຩ记ㄨ锿瀛矘㫬鲳镩慸㐤꿔邢苘Ꝓ⹛ഭ맼쀹ᴚ琇러蕴㶷 [ 128.959018][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.337'. [ 128.968684][ T5894] usb 1-1: Manufacturer: ည [ 128.972527][ T7179] autofs4:pid:7179:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 128.979513][ T5894] usb 1-1: SerialNumber: ఊ [ 128.991163][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.337'. [ 129.030633][ T7154] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 129.046191][ T7154] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 129.053789][ T7154] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 129.301634][ T7198] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.339'. [ 129.548470][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.5.342'. [ 129.570812][ T7205] FAULT_INJECTION: forcing a failure. [ 129.570812][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 129.594875][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.5.342 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 129.605517][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.615600][ T7205] Call Trace: [ 129.618901][ T7205] [ 129.621858][ T7205] dump_stack_lvl+0x241/0x360 [ 129.626574][ T7205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.631808][ T7205] ? __pfx__printk+0x10/0x10 [ 129.636429][ T7205] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 129.641827][ T7205] ? __pfx___might_resched+0x10/0x10 [ 129.647317][ T7205] should_fail_ex+0x3b0/0x4e0 [ 129.652032][ T7205] should_failslab+0xac/0x100 [ 129.656739][ T7205] __kmalloc_node_noprof+0xe1/0x4d0 [ 129.661962][ T7205] ? __pfx_vxlan_setup+0x10/0x10 [ 129.666931][ T7205] ? __kvmalloc_node_noprof+0x72/0x190 [ 129.672410][ T7205] ? __raw_spin_lock_init+0x45/0x100 [ 129.677717][ T7205] __kvmalloc_node_noprof+0x72/0x190 [ 129.683013][ T7205] alloc_netdev_mqs+0x8d4/0x1080 [ 129.687955][ T7205] rtnl_create_link+0x2f9/0xc20 [ 129.692809][ T7205] rtnl_newlink_create+0x210/0xa40 [ 129.697926][ T7205] ? __pfx___mutex_lock+0x10/0x10 [ 129.702951][ T7205] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 129.708590][ T7205] ? ns_capable+0x8a/0xf0 [ 129.712923][ T7205] rtnl_newlink+0x1c7e/0x2210 [ 129.717610][ T7205] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.722629][ T7205] ? __netlink_deliver_tap+0x56b/0x7f0 [ 129.728091][ T7205] ? __pfx_validate_chain+0x10/0x10 [ 129.733293][ T7205] ? __sock_sendmsg+0x221/0x270 [ 129.738149][ T7205] ? ____sys_sendmsg+0x52a/0x7e0 [ 129.743088][ T7205] ? __sys_sendmmsg+0x46a/0x720 [ 129.747933][ T7205] ? __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 129.753647][ T7205] ? __do_fast_syscall_32+0xb4/0x110 [ 129.758930][ T7205] ? do_fast_syscall_32+0x34/0x80 [ 129.763953][ T7205] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.770472][ T7205] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.776459][ T7205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.782789][ T7205] ? mark_lock+0x9a/0x360 [ 129.787121][ T7205] ? __lock_acquire+0x1397/0x2100 [ 129.792178][ T7205] ? __pfx_lock_release+0x10/0x10 [ 129.797230][ T7205] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.802375][ T7205] rtnetlink_rcv_msg+0x791/0xcf0 [ 129.807351][ T7205] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 129.812490][ T7205] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.817967][ T7205] ? ref_tracker_free+0x643/0x7e0 [ 129.823096][ T7205] netlink_rcv_skb+0x1e3/0x430 [ 129.827870][ T7205] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.833345][ T7205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.838657][ T7205] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.843866][ T7205] netlink_unicast+0x7f6/0x990 [ 129.848644][ T7205] ? __pfx_netlink_unicast+0x10/0x10 [ 129.853932][ T7205] ? __virt_addr_valid+0x45f/0x530 [ 129.859049][ T7205] ? __phys_addr_symbol+0x2f/0x70 [ 129.864202][ T7205] ? __check_object_size+0x47a/0x730 [ 129.869506][ T7205] netlink_sendmsg+0x8e4/0xcb0 [ 129.874287][ T7205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.876994][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 129.879576][ T7205] ? __pfx_lock_release+0x10/0x10 [ 129.891533][ T7205] ? aa_sock_msg_perm+0x91/0x160 [ 129.896482][ T7205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.901769][ T7205] __sock_sendmsg+0x221/0x270 [ 129.906463][ T7205] ____sys_sendmsg+0x52a/0x7e0 [ 129.911233][ T7205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.916527][ T7205] __sys_sendmmsg+0x46a/0x720 [ 129.921211][ T7205] ? __pfx___sys_sendmmsg+0x10/0x10 [ 129.926430][ T7205] ? __pfx_lock_acquire+0x10/0x10 [ 129.931459][ T7205] ? get_pid_task+0x23/0x1f0 [ 129.936056][ T7205] ? __pfx_lock_release+0x10/0x10 [ 129.941087][ T7205] ? kstrtouint_from_user+0x128/0x190 [ 129.946477][ T7205] ? ksys_write+0x22a/0x2b0 [ 129.950996][ T7205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.957100][ T7205] ? __fget_files+0x2a/0x410 [ 129.961705][ T7205] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.967687][ T7205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.974020][ T7205] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 129.979568][ T7205] __do_fast_syscall_32+0xb4/0x110 [ 129.984685][ T7205] ? exc_page_fault+0x590/0x8b0 [ 129.989561][ T7205] do_fast_syscall_32+0x34/0x80 [ 129.994459][ T7205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.000806][ T7205] RIP: 0023:0xf70fd579 [ 130.004882][ T7205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 130.024503][ T7205] RSP: 002b:00000000f50ef55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 130.032922][ T7205] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 130.040892][ T7205] RDX: 0000000092492627 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.048861][ T7205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.056831][ T7205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.064800][ T7205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.072779][ T7205] [ 130.075847][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.315106][ T5894] HFC-S_USB 1-1:2.139: probe with driver HFC-S_USB failed with error -5 [ 130.930234][ T5894] HFC-S_USB 1-1:2.77: probe with driver HFC-S_USB failed with error -5 [ 130.957107][ T5894] usb 1-1: USB disconnect, device number 22 [ 130.981260][ T7233] tipc: Started in network mode [ 130.996985][ T7233] tipc: Node identity , cluster identity 4711 [ 131.031339][ T7233] tipc: Failed to set node id, please configure manually [ 131.059397][ T7233] tipc: Enabling of bearer rejected, failed to enable media [ 131.366719][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 131.400603][ T7242] FAULT_INJECTION: forcing a failure. [ 131.400603][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 131.430296][ T7242] CPU: 1 UID: 0 PID: 7242 Comm: syz.4.350 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 131.440938][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.451021][ T7242] Call Trace: [ 131.454319][ T7242] [ 131.457268][ T7242] dump_stack_lvl+0x241/0x360 [ 131.461994][ T7242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.467223][ T7242] ? __pfx__printk+0x10/0x10 [ 131.471839][ T7242] ? __nla_validate_parse+0x26ce/0x3090 [ 131.477405][ T7242] ? xfrm_user_rcv_msg_compat+0xeb4/0x1560 [ 131.483248][ T7242] should_fail_ex+0x3b0/0x4e0 [ 131.487957][ T7242] should_failslab+0xac/0x100 [ 131.492661][ T7242] ? xfrm_state_alloc+0x22/0x2e0 [ 131.497623][ T7242] kmem_cache_alloc_noprof+0x70/0x380 [ 131.503028][ T7242] xfrm_state_alloc+0x22/0x2e0 [ 131.507817][ T7242] xfrm_add_sa+0x146c/0x3d70 [ 131.512439][ T7242] ? __pfx_xfrm_add_sa+0x10/0x10 [ 131.517404][ T7242] ? __nla_parse+0x40/0x60 [ 131.521859][ T7242] xfrm_user_rcv_msg+0x890/0xb90 [ 131.526824][ T7242] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 131.532335][ T7242] ? __mutex_trylock_common+0x183/0x2e0 [ 131.537909][ T7242] ? __pfx___might_resched+0x10/0x10 [ 131.543220][ T7242] ? __pfx___mutex_trylock_common+0x10/0x10 [ 131.549154][ T7242] netlink_rcv_skb+0x1e3/0x430 [ 131.553941][ T7242] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 131.559420][ T7242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.564754][ T7242] xfrm_netlink_rcv+0x79/0x90 [ 131.569459][ T7242] netlink_unicast+0x7f6/0x990 [ 131.574263][ T7242] ? __pfx_netlink_unicast+0x10/0x10 [ 131.579575][ T7242] ? __virt_addr_valid+0x45f/0x530 [ 131.584720][ T7242] ? __phys_addr_symbol+0x2f/0x70 [ 131.589768][ T7242] ? __check_object_size+0x47a/0x730 [ 131.595082][ T7242] netlink_sendmsg+0x8e4/0xcb0 [ 131.599885][ T7242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.605199][ T7242] ? __pfx_lock_release+0x10/0x10 [ 131.610248][ T7242] ? aa_sock_msg_perm+0x91/0x160 [ 131.615220][ T7242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.620531][ T7242] __sock_sendmsg+0x221/0x270 [ 131.625236][ T7242] ____sys_sendmsg+0x52a/0x7e0 [ 131.630032][ T7242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.635360][ T7242] __sys_sendmsg+0x269/0x350 [ 131.639407][ T7250] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.352'. [ 131.639958][ T7242] ? __pfx_lock_release+0x10/0x10 [ 131.654007][ T7242] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.659159][ T7242] ? __pfx_vfs_write+0x10/0x10 [ 131.663981][ T7242] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 131.670604][ T7242] ? lockdep_hardirqs_on+0x99/0x150 [ 131.675832][ T7242] __do_fast_syscall_32+0xb4/0x110 [ 131.680973][ T7242] ? exc_page_fault+0x590/0x8b0 [ 131.685854][ T7242] do_fast_syscall_32+0x34/0x80 [ 131.690730][ T7242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.697085][ T7242] RIP: 0023:0xf712d579 [ 131.701179][ T7242] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 131.720898][ T7242] RSP: 002b:00000000f511f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 131.729336][ T7242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001340 [ 131.737340][ T7242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.745339][ T7242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.753337][ T7242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.761336][ T7242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.769356][ T7242] [ 131.772490][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.948822][ T5894] IPVS: starting estimator thread 0... [ 132.044579][ T7259] IPVS: using max 26 ests per chain, 62400 per kthread [ 132.164663][ T5884] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 132.353736][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 132.380131][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 132.398358][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 132.445368][ T5884] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 132.464866][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.485011][ T5884] usb 1-1: Product: syz [ 132.490053][ T5884] usb 1-1: Manufacturer: syz [ 132.503672][ T5884] usb 1-1: SerialNumber: syz [ 132.514232][ T5884] usb 1-1: config 0 descriptor?? [ 132.824043][ T7254] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 132.881800][ T7254] loop9: detected capacity change from 0 to 7 [ 132.922956][ T7254] Dev loop9: unable to read RDB block 7 [ 132.928712][ T7254] loop9: unable to read partition table [ 132.934775][ T7254] loop9: partition table beyond EOD, truncated [ 132.941072][ T7254] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 133.087556][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.093996][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.794069][ T7345] FAULT_INJECTION: forcing a failure. [ 134.794069][ T7345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.898181][ T7345] CPU: 0 UID: 0 PID: 7345 Comm: syz.5.380 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 134.908936][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.919017][ T7345] Call Trace: [ 134.922319][ T7345] [ 134.925272][ T7345] dump_stack_lvl+0x241/0x360 [ 134.929980][ T7345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.935209][ T7345] ? __pfx__printk+0x10/0x10 [ 134.939839][ T7345] ? snprintf+0xda/0x120 [ 134.944109][ T7345] should_fail_ex+0x3b0/0x4e0 [ 134.948819][ T7345] _copy_to_user+0x31/0xb0 [ 134.953272][ T7345] simple_read_from_buffer+0xca/0x150 [ 134.958678][ T7345] proc_fail_nth_read+0x1e9/0x250 [ 134.963729][ T7345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.969300][ T7345] ? rw_verify_area+0x55e/0x6f0 [ 134.974165][ T7345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.979737][ T7345] vfs_read+0x1fc/0xb70 [ 134.983913][ T7345] ? __pfx___mutex_lock+0x10/0x10 [ 134.988957][ T7345] ? __pfx_vfs_read+0x10/0x10 [ 134.993661][ T7345] ? __fget_files+0x2a/0x410 [ 134.998291][ T7345] ? __fget_files+0x395/0x410 [ 135.002992][ T7345] ? __fget_files+0x2a/0x410 [ 135.007613][ T7345] ksys_read+0x18f/0x2b0 [ 135.011875][ T7345] ? __pfx_ksys_read+0x10/0x10 [ 135.016662][ T7345] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 135.023284][ T7345] ? lockdep_hardirqs_on+0x99/0x150 [ 135.028511][ T7345] __do_fast_syscall_32+0xb4/0x110 [ 135.033657][ T7345] ? exc_page_fault+0x590/0x8b0 [ 135.038537][ T7345] do_fast_syscall_32+0x34/0x80 [ 135.043412][ T7345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.049762][ T7345] RIP: 0023:0xf70fd579 [ 135.053853][ T7345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 135.073484][ T7345] RSP: 002b:00000000f50ef590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 135.081928][ T7345] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ef620 [ 135.089927][ T7345] RDX: 000000000000000f RSI: 00000000f7433ff4 RDI: 0000000000000000 [ 135.099259][ T7345] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 135.099277][ T7345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 135.099289][ T7345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.123340][ T7345] [ 135.578326][ T7356] bond_slave_0: entered promiscuous mode [ 135.578435][ T7356] bond_slave_1: entered promiscuous mode [ 135.578605][ T7356] macvlan2: entered promiscuous mode [ 135.578683][ T7356] bond0: entered promiscuous mode [ 135.579551][ T7356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.884539][ T5882] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 136.145381][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 136.153265][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 136.165429][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 136.189078][ T5882] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 136.221596][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.372677][ T5882] usb 3-1: config 0 descriptor?? [ 136.454596][ T941] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 136.624926][ T941] usb 6-1: Using ep0 maxpacket: 16 [ 136.652836][ T941] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 136.729326][ T941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.795829][ T5882] uclogic 0003:28BD:0042.0005: interface is invalid, ignoring [ 136.827738][ T941] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.864582][ T941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.934976][ T941] usb 6-1: Product: syz [ 136.939261][ T941] usb 6-1: Manufacturer: syz [ 136.999205][ T5882] usb 3-1: USB disconnect, device number 21 [ 137.013121][ T941] usb 6-1: SerialNumber: syz [ 137.024168][ T941] usb 6-1: config 0 descriptor?? [ 137.036572][ T941] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.046300][ T941] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 137.375015][ T5894] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 137.537799][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 137.563110][ T5894] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 137.592816][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.641924][ T5894] usb 5-1: config 0 descriptor?? [ 137.658128][ T941] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 137.667170][ T941] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 137.883741][ T5894] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 137.956026][ T5894] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 138.010605][ T5894] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 138.284746][ T941] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 138.316465][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 138.364876][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 138.472139][ T7417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.394'. [ 138.955870][ T7427] FAULT_INJECTION: forcing a failure. [ 138.955870][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 139.000036][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.0.397 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 139.010692][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.020778][ T7427] Call Trace: [ 139.024086][ T7427] [ 139.027036][ T7427] dump_stack_lvl+0x241/0x360 [ 139.031776][ T7427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.037005][ T7427] ? __pfx__printk+0x10/0x10 [ 139.041629][ T7427] ? ref_tracker_alloc+0x332/0x490 [ 139.046775][ T7427] should_fail_ex+0x3b0/0x4e0 [ 139.051493][ T7427] should_failslab+0xac/0x100 [ 139.056198][ T7427] ? skb_clone+0x20c/0x390 [ 139.060637][ T7427] kmem_cache_alloc_noprof+0x70/0x380 [ 139.066126][ T7427] skb_clone+0x20c/0x390 [ 139.070425][ T7427] __netlink_deliver_tap+0x3cc/0x7f0 [ 139.075751][ T7427] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.080971][ T7427] netlink_deliver_tap+0x19d/0x1b0 [ 139.086114][ T7427] netlink_sendskb+0x68/0x140 [ 139.090823][ T7427] netlink_unicast+0x39d/0x990 [ 139.095621][ T7427] ? __pfx_netlink_unicast+0x10/0x10 [ 139.100942][ T7427] netlink_rcv_skb+0x262/0x430 [ 139.105733][ T7427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.110786][ T7427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.116104][ T7427] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 139.121594][ T7427] genl_rcv+0x28/0x40 [ 139.125596][ T7427] netlink_unicast+0x7f6/0x990 [ 139.130399][ T7427] ? __pfx_netlink_unicast+0x10/0x10 [ 139.135704][ T7427] ? __virt_addr_valid+0x45f/0x530 [ 139.140845][ T7427] ? __phys_addr_symbol+0x2f/0x70 [ 139.145901][ T7427] ? __check_object_size+0x47a/0x730 [ 139.151214][ T7427] netlink_sendmsg+0x8e4/0xcb0 [ 139.156009][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.161337][ T7427] ? __pfx_lock_release+0x10/0x10 [ 139.166388][ T7427] ? aa_sock_msg_perm+0x91/0x160 [ 139.171356][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.176661][ T7427] __sock_sendmsg+0x221/0x270 [ 139.181366][ T7427] ____sys_sendmsg+0x52a/0x7e0 [ 139.186159][ T7427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.191482][ T7427] __sys_sendmsg+0x269/0x350 [ 139.196090][ T7427] ? __pfx_lock_release+0x10/0x10 [ 139.201148][ T7427] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.206306][ T7427] ? __pfx_vfs_write+0x10/0x10 [ 139.211121][ T7427] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 139.217730][ T7427] ? lockdep_hardirqs_on+0x99/0x150 [ 139.222955][ T7427] __do_fast_syscall_32+0xb4/0x110 [ 139.228089][ T7427] ? exc_page_fault+0x590/0x8b0 [ 139.232969][ T7427] do_fast_syscall_32+0x34/0x80 [ 139.237844][ T7427] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.244189][ T7427] RIP: 0023:0xf7f30579 [ 139.248270][ T7427] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 139.267894][ T7427] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 139.276335][ T7427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000500 [ 139.284321][ T7427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.292307][ T7427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.300292][ T7427] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.308277][ T7427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.316277][ T7427] [ 139.654537][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 139.744412][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 140.286640][ T7374] tipc: Started in network mode [ 140.291637][ T7374] tipc: Node identity , cluster identity 4711 [ 140.355041][ T7374] tipc: Failed to set node id, please configure manually [ 140.413290][ T7374] tipc: Enabling of bearer rejected, failed to enable media [ 140.591562][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 140.604466][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 140.631383][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 140.672625][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 140.689624][ T941] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 140.765380][ T941] usb 6-1: USB disconnect, device number 8 [ 140.998672][ T7450] binder: 7444:7450 ioctl 4018620d 0 returned -22 [ 141.094559][ T119] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 141.105067][ T7450] binder: 7444:7450 ioctl c0306201 20000380 returned -11 [ 141.153322][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807fb64400: rx timeout, send abort [ 141.163504][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c941000: rx timeout, send abort [ 141.171923][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807fb64400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 141.187761][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c941000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 141.370944][ T119] usb 3-1: config 54 has an invalid descriptor of length 215, skipping remainder of the config [ 141.475270][ T119] usb 3-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 141.494504][ T119] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 141.504520][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.512547][ T119] usb 3-1: Product: syz [ 141.517298][ T119] usb 3-1: Manufacturer: syz [ 141.521927][ T119] usb 3-1: SerialNumber: syz [ 141.747168][ T119] usb 3-1: USB disconnect, device number 22 [ 142.740370][ T5884] ------------[ cut here ]------------ [ 142.745961][ T5884] URB ffff88805c1f7400 submitted while active [ 142.753192][ T5884] WARNING: CPU: 0 PID: 5884 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x1930 [ 142.763172][ T5884] Modules linked in: [ 142.767221][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: kworker/0:5 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 142.778193][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 142.788384][ T5884] Workqueue: usb_hub_wq hub_event [ 142.793535][ T5884] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 142.799494][ T5884] Code: 00 eb 66 e8 79 db 5d fa e9 79 f0 ff ff e8 6f db 5d fa c6 05 3c 15 c2 08 01 90 48 c7 c7 60 97 af 8c 4c 89 ee e8 28 7f 1e fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 49 db 5d fa eb 12 e8 42 db 5d fa 41 [ 142.819326][ T5884] RSP: 0018:ffffc90004486c50 EFLAGS: 00010246 [ 142.825595][ T5884] RAX: 6af3094b9a229a00 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 142.834021][ T5884] RDX: ffffc9001b8a1000 RSI: 000000000002b002 RDI: 000000000002b003 [ 142.842699][ T5884] RBP: ffff88805c1f7408 R08: ffffffff81602a82 R09: 1ffff110170c519a [ 142.850888][ T5884] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88807b8760a8 [ 142.859294][ T5884] R13: ffff88805c1f7400 R14: dffffc0000000000 R15: ffff88807b876000 [ 142.867355][ T5884] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 142.876373][ T5884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.882986][ T5884] CR2: 00007ffede5a1e88 CR3: 000000006aa40000 CR4: 00000000003526f0 [ 142.891042][ T5884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.899109][ T5884] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.907155][ T5884] Call Trace: [ 142.910464][ T5884] [ 142.913419][ T5884] ? __warn+0x165/0x4d0 [ 142.917745][ T5884] ? usb_submit_urb+0x1039/0x1930 [ 142.922827][ T5884] ? report_bug+0x2b3/0x500 [ 142.927393][ T5884] ? usb_submit_urb+0x1039/0x1930 [ 142.932450][ T5884] ? handle_bug+0x60/0x90 [ 142.937030][ T5884] ? exc_invalid_op+0x1a/0x50 [ 142.941708][ T5884] ? asm_exc_invalid_op+0x1a/0x20 [ 142.946977][ T5884] ? __warn_printk+0x292/0x360 [ 142.951782][ T5884] ? usb_submit_urb+0x1039/0x1930 [ 142.956969][ T5884] iguanair_get_features+0x1c8/0x7c0 [ 142.962374][ T5884] iguanair_probe+0xb1c/0x1540 [ 142.967296][ T5884] usb_probe_interface+0x641/0xbb0 [ 142.972524][ T5884] ? __pfx_usb_probe_interface+0x10/0x10 [ 142.978324][ T5884] really_probe+0x2b8/0xad0 [ 142.982954][ T5884] __driver_probe_device+0x1a2/0x390 [ 142.988412][ T5884] driver_probe_device+0x50/0x430 [ 142.993651][ T5884] __device_attach_driver+0x2d6/0x530 [ 142.999232][ T5884] bus_for_each_drv+0x24e/0x2e0 [ 143.004186][ T5884] ? __pfx___device_attach_driver+0x10/0x10 [ 143.010254][ T5884] ? __pfx_bus_for_each_drv+0x10/0x10 [ 143.015786][ T5884] __device_attach+0x333/0x520 [ 143.020664][ T5884] ? __pfx_lock_release+0x10/0x10 [ 143.026843][ T5884] ? __pfx___device_attach+0x10/0x10 [ 143.032281][ T5884] ? do_raw_spin_unlock+0x13c/0x8b0 [ 143.038024][ T5884] bus_probe_device+0x189/0x260 [ 143.042934][ T5884] device_add+0x856/0xbf0 [ 143.047694][ T5884] usb_set_configuration+0x1976/0x1fb0 [ 143.053335][ T5884] usb_generic_driver_probe+0x88/0x140 [ 143.059023][ T5884] usb_probe_device+0x1b8/0x380 [ 143.063987][ T5884] ? __pfx_usb_probe_device+0x10/0x10 [ 143.069587][ T5884] really_probe+0x2b8/0xad0 [ 143.074226][ T5884] __driver_probe_device+0x1a2/0x390 [ 143.079949][ T5884] driver_probe_device+0x50/0x430 [ 143.085206][ T5884] __device_attach_driver+0x2d6/0x530 [ 143.090695][ T5884] bus_for_each_drv+0x24e/0x2e0 [ 143.095729][ T5884] ? __pfx___device_attach_driver+0x10/0x10 [ 143.101749][ T5884] ? __pfx_bus_for_each_drv+0x10/0x10 [ 143.107326][ T5884] __device_attach+0x333/0x520 [ 143.112231][ T5884] ? __pfx___device_attach+0x10/0x10 [ 143.117721][ T5884] bus_probe_device+0x189/0x260 [ 143.123056][ T5884] device_add+0x856/0xbf0 [ 143.127576][ T5884] usb_new_device+0x104a/0x19a0 [ 143.132617][ T5884] ? __pfx_usb_new_device+0x10/0x10 [ 143.138368][ T5884] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.144042][ T5884] ? lockdep_hardirqs_on+0x99/0x150 [ 143.149713][ T5884] hub_event+0x2d6d/0x5150 [ 143.154936][ T5884] ? __pfx_hub_event+0x10/0x10 [ 143.159848][ T5884] ? __pfx_lock_acquire+0x10/0x10 [ 143.165008][ T5884] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.171107][ T5884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.177695][ T5884] ? process_scheduled_works+0x976/0x1840 [ 143.183524][ T5884] process_scheduled_works+0xa66/0x1840 [ 143.189300][ T5884] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.195538][ T5884] ? assign_work+0x364/0x3d0 [ 143.200292][ T5884] worker_thread+0x870/0xd30 [ 143.205081][ T5884] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 143.211128][ T5884] ? __kthread_parkme+0x169/0x1d0 [ 143.216350][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 143.221566][ T5884] kthread+0x2f0/0x390 [ 143.225766][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 143.230977][ T5884] ? __pfx_kthread+0x10/0x10 [ 143.235719][ T5884] ret_from_fork+0x4b/0x80 [ 143.240167][ T5884] ? __pfx_kthread+0x10/0x10 [ 143.245165][ T5884] ret_from_fork_asm+0x1a/0x30 [ 143.249993][ T5884] [ 143.253041][ T5884] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.260328][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: kworker/0:5 Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 143.271107][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.281176][ T5884] Workqueue: usb_hub_wq hub_event [ 143.286225][ T5884] Call Trace: [ 143.289512][ T5884] [ 143.292463][ T5884] dump_stack_lvl+0x241/0x360 [ 143.297163][ T5884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.302377][ T5884] ? __pfx__printk+0x10/0x10 [ 143.306991][ T5884] ? vscnprintf+0x5d/0x90 [ 143.311336][ T5884] panic+0x349/0x880 [ 143.315247][ T5884] ? __warn+0x174/0x4d0 [ 143.319413][ T5884] ? __pfx_panic+0x10/0x10 [ 143.323821][ T5884] ? ret_from_fork_asm+0x1a/0x30 [ 143.328744][ T5884] __warn+0x344/0x4d0 [ 143.332734][ T5884] ? usb_submit_urb+0x1039/0x1930 [ 143.337758][ T5884] report_bug+0x2b3/0x500 [ 143.342088][ T5884] ? usb_submit_urb+0x1039/0x1930 [ 143.347108][ T5884] handle_bug+0x60/0x90 [ 143.351247][ T5884] exc_invalid_op+0x1a/0x50 [ 143.355734][ T5884] asm_exc_invalid_op+0x1a/0x20 [ 143.360575][ T5884] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 143.366207][ T5884] Code: 00 eb 66 e8 79 db 5d fa e9 79 f0 ff ff e8 6f db 5d fa c6 05 3c 15 c2 08 01 90 48 c7 c7 60 97 af 8c 4c 89 ee e8 28 7f 1e fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 49 db 5d fa eb 12 e8 42 db 5d fa 41 [ 143.385807][ T5884] RSP: 0018:ffffc90004486c50 EFLAGS: 00010246 [ 143.391885][ T5884] RAX: 6af3094b9a229a00 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 143.399861][ T5884] RDX: ffffc9001b8a1000 RSI: 000000000002b002 RDI: 000000000002b003 [ 143.407836][ T5884] RBP: ffff88805c1f7408 R08: ffffffff81602a82 R09: 1ffff110170c519a [ 143.415800][ T5884] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88807b8760a8 [ 143.423763][ T5884] R13: ffff88805c1f7400 R14: dffffc0000000000 R15: ffff88807b876000 [ 143.431761][ T5884] ? __warn_printk+0x292/0x360 [ 143.436535][ T5884] iguanair_get_features+0x1c8/0x7c0 [ 143.441813][ T5884] iguanair_probe+0xb1c/0x1540 [ 143.446582][ T5884] usb_probe_interface+0x641/0xbb0 [ 143.451697][ T5884] ? __pfx_usb_probe_interface+0x10/0x10 [ 143.457315][ T5884] really_probe+0x2b8/0xad0 [ 143.461811][ T5884] __driver_probe_device+0x1a2/0x390 [ 143.467084][ T5884] driver_probe_device+0x50/0x430 [ 143.472096][ T5884] __device_attach_driver+0x2d6/0x530 [ 143.477461][ T5884] bus_for_each_drv+0x24e/0x2e0 [ 143.482299][ T5884] ? __pfx___device_attach_driver+0x10/0x10 [ 143.488175][ T5884] ? __pfx_bus_for_each_drv+0x10/0x10 [ 143.493543][ T5884] __device_attach+0x333/0x520 [ 143.498294][ T5884] ? __pfx_lock_release+0x10/0x10 [ 143.503326][ T5884] ? __pfx___device_attach+0x10/0x10 [ 143.508606][ T5884] ? do_raw_spin_unlock+0x13c/0x8b0 [ 143.513795][ T5884] bus_probe_device+0x189/0x260 [ 143.519155][ T5884] device_add+0x856/0xbf0 [ 143.523470][ T5884] usb_set_configuration+0x1976/0x1fb0 [ 143.528945][ T5884] usb_generic_driver_probe+0x88/0x140 [ 143.534390][ T5884] usb_probe_device+0x1b8/0x380 [ 143.539227][ T5884] ? __pfx_usb_probe_device+0x10/0x10 [ 143.544580][ T5884] really_probe+0x2b8/0xad0 [ 143.549096][ T5884] __driver_probe_device+0x1a2/0x390 [ 143.554390][ T5884] driver_probe_device+0x50/0x430 [ 143.559421][ T5884] __device_attach_driver+0x2d6/0x530 [ 143.564798][ T5884] bus_for_each_drv+0x24e/0x2e0 [ 143.569634][ T5884] ? __pfx___device_attach_driver+0x10/0x10 [ 143.575513][ T5884] ? __pfx_bus_for_each_drv+0x10/0x10 [ 143.580876][ T5884] __device_attach+0x333/0x520 [ 143.585635][ T5884] ? __pfx___device_attach+0x10/0x10 [ 143.590915][ T5884] bus_probe_device+0x189/0x260 [ 143.595778][ T5884] device_add+0x856/0xbf0 [ 143.600094][ T5884] usb_new_device+0x104a/0x19a0 [ 143.604947][ T5884] ? __pfx_usb_new_device+0x10/0x10 [ 143.610136][ T5884] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.615322][ T5884] ? lockdep_hardirqs_on+0x99/0x150 [ 143.620511][ T5884] hub_event+0x2d6d/0x5150 [ 143.624949][ T5884] ? __pfx_hub_event+0x10/0x10 [ 143.629696][ T5884] ? __pfx_lock_acquire+0x10/0x10 [ 143.634724][ T5884] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.640691][ T5884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.647006][ T5884] ? process_scheduled_works+0x976/0x1840 [ 143.652713][ T5884] process_scheduled_works+0xa66/0x1840 [ 143.658263][ T5884] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.664234][ T5884] ? assign_work+0x364/0x3d0 [ 143.668823][ T5884] worker_thread+0x870/0xd30 [ 143.673403][ T5884] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 143.679286][ T5884] ? __kthread_parkme+0x169/0x1d0 [ 143.684560][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 143.689652][ T5884] kthread+0x2f0/0x390 [ 143.693711][ T5884] ? __pfx_worker_thread+0x10/0x10 [ 143.698803][ T5884] ? __pfx_kthread+0x10/0x10 [ 143.703397][ T5884] ret_from_fork+0x4b/0x80 [ 143.707797][ T5884] ? __pfx_kthread+0x10/0x10 [ 143.712374][ T5884] ret_from_fork_asm+0x1a/0x30 [ 143.717131][ T5884] [ 143.720443][ T5884] Kernel Offset: disabled [ 143.724934][ T5884] Rebooting in 86400 seconds..