last executing test programs: 36m2.032825329s ago: executing program 2 (id=113): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x8004e500, &(0x7f0000000040)={0x3, 0x800000, 0x5, 0x2}) 36m1.765631537s ago: executing program 2 (id=119): r0 = syz_open_procfs(0x0, &(0x7f0000004640)='net/fib_trie\x00') read$FUSE(r0, &(0x7f00000051c0)={0x2020}, 0x2020) 36m1.494864239s ago: executing program 2 (id=124): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000005080)=""/180, 0xb4, 0xcc0e) 36m1.324029321s ago: executing program 2 (id=127): fsopen(&(0x7f0000000000)='nfs\x00', 0x0) 36m1.124106709s ago: executing program 2 (id=132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x800, 0x14, 0x16}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x11, 0x0, @multicast2, @loopback}}}}, 0x3e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getcwd(&(0x7f0000000540)=""/4096, 0x1000) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0xf00) 35m56.470971664s ago: executing program 2 (id=144): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c385b9fe0000000000000000000000000000000000000000f10379f930fd388c25ded2ba4bcb5e4923a8cd755571f5b0c918490dbe0ff8b5d08dda680368a2f9ebac70991ed8fe737a97639b2210f576fd1bcfea96e238c746ed27d5a3"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0) write$char_usb(r6, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000100)={{}, 0x2, 0x80000000, 0x1}) (async) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000100)={{}, 0x2, 0x80000000, 0x1}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000001010104ea000000000000000a00000344000180060002"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20000094) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000c5497fff75f9f486274afd41860000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r11, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="09000000000000000000bf90000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000c5497fff75f9f486274afd41860000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r11, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="09000000000000000000bf90000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$kcm(0x10, 0x2, 0x10) (async) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x0) 35m41.121287496s ago: executing program 32 (id=144): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c385b9fe0000000000000000000000000000000000000000f10379f930fd388c25ded2ba4bcb5e4923a8cd755571f5b0c918490dbe0ff8b5d08dda680368a2f9ebac70991ed8fe737a97639b2210f576fd1bcfea96e238c746ed27d5a3"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0) write$char_usb(r6, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000100)={{}, 0x2, 0x80000000, 0x1}) (async) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000100)={{}, 0x2, 0x80000000, 0x1}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000001010104ea000000000000000a00000344000180060002"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20000094) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000c5497fff75f9f486274afd41860000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r11, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="09000000000000000000bf90000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000c5497fff75f9f486274afd41860000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r11, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="09000000000000000000bf90000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$kcm(0x10, 0x2, 0x10) (async) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x0) 34m9.914485669s ago: executing program 3 (id=514): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0xc, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}}, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0x5f4b1cf6, 0x0, 0x100000000, 0x7f, 0x7fffffffffffffff, 0x401}, &(0x7f0000000180)={0x8, 0x5, 0x6, 0x2, 0x10001, 0x9, 0x7f}, &(0x7f00000001c0)={0x51, 0x3, 0x1, 0x938e, 0x0, 0x5a28, 0xfffffffffffffff7, 0x5aa}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x200, 0x3]}, 0x8}) (async) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x59aa, &(0x7f00000002c0)={0x0, 0x7946, 0x40, 0x1, 0x3f}, &(0x7f0000000340), &(0x7f0000000380)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[r1, r4], 0x2) (async) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x2) (async) r6 = gettid() read$FUSE(r5, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = getpid() (async) r9 = openat$cgroup(r5, &(0x7f0000002640)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002680)={0x80000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x41}, &(0x7f0000000540)=""/47, 0x2f, &(0x7f0000000580)=""/7, &(0x7f0000002600)=[r6, r7, r8], 0x3, {r9}}, 0x58) (async) io_setup(0xfffffeff, &(0x7f0000002700)=0x0) io_cancel(r10, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x7, 0x8, r5, &(0x7f0000002740)="614a21bf4c05d7a57b8ab0ef563b37715c6fad30994daf832236f387d038d68a9b4616efaefcf8e5360d36917d4d325525411ee3a00776e3f3a3a0ec76a84027ce64170ca9d9d7eaf4c52e423c53905f5495338018d1697345c7ca295645ce34e7d3c4fb9fb7cdce448a56666022fa1d3fee0feafdf10768aae4a6aaf8fec60879c065c78c95002485eba819c48dd64fafc554eeb2f4d2", 0x97, 0x9, 0x0, 0x1cea3b6b3edaab75}, &(0x7f0000002840)) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000002880)) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f00000028c0)) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002940), r5) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0xb0000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x28, r11, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdc7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xe304a1fd5b5e9dfe}, 0x840) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)=@getrule={0x14, 0x22, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8c800) (async) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000002b40)=0x6, 0x4) (async) clock_gettime(0x0, &(0x7f0000002cc0)={0x0, 0x0}) io_pgetevents(r10, 0xc8, 0xa, &(0x7f0000002b80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002d00)={r12, r13+10000000}, 0x0) (async) r14 = openat$qrtrtun(0xffffff9c, &(0x7f0000002d40), 0x8c00) mmap$qrtrtun(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x13, r14, 0x8000) io_pgetevents(r10, 0x0, 0x2, &(0x7f0000002d80)=[{}, {}], &(0x7f0000002dc0)={0x0, 0x989680}, &(0x7f0000002e40)={&(0x7f0000002e00)={[0x4, 0xd76]}, 0x8}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002ec0)=@generic={&(0x7f0000002e80)='./file0\x00', 0x0, 0x10}, 0x14) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x6) 34m9.443194305s ago: executing program 3 (id=516): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) add_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000500)="9782cb6183baff140baafd525288a1b362491b565d1a85c52048190229dd61ae237f476c76c1c98c7bbee445de2bd986aac68ab1062345fb4d8374b05beb3608592e198d72962bed0c5c796163b3f48c5bded4e7a9e54a676e0ebac7a9aeaf4afa3a0fd8426dff64a528c0fd55748b7e2b11a433397d3f8f72bbe725986a25c567cb7d38c17ada8695082fbfaaa535a760be67359459f99f6fd8565129ec", 0xff6f, 0xfffffffffffffffe) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x4, 0x7d, 0x5, 0x80000003, 0x53, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8000, 0x700, 0x90000b8, 0x8001}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) (async) r5 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x7, 0x0, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x13, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2380}, 0x1}) (async) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300050004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r4, 0x8, 0x1, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000380)}, 0x40) (async) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r2, 0x406, r1) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f00000000c0)={0xb0a, 0xe}) (async) r12 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x4, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x5, 0x34524742, [0x1000, 0x7], [0x3, 0xfff], 0x108}}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x1, 0x4) (async) socket(0x23, 0x1, 0x9) socket$nl_route(0x10, 0x3, 0x0) 34m8.998566753s ago: executing program 3 (id=520): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064d0, &(0x7f0000000940)={0x2, 0x0, 0xfffffffc}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000019000100000000000000000080"], 0x50}}, 0x4000900) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @mcast1, 0xe6f}, 0x1c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}]}]}, 0x84}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@mcast2, @empty, @dev, 0x0, 0x0, 0x0, 0x400, 0xfffffffffffffffd, 0x80600087, r5}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000257a54c407d077a6201000102030109022c0001810720050904c90103033879050905ec"], 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x308, 0x24, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xd, 0x6}, {0x5, 0xfff2}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xa}, @TCA_CODEL_TARGET={0x8, 0x1, 0xc0}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0x0, 0x2, 0x100, 0x2, 0x3, 0x6, 0x6}}, {0x10, 0x2, [0xfffa, 0x2, 0x400, 0x9, 0xfffb, 0x6]}}, {{0x1c, 0x1, {0x5, 0x2, 0x1000, 0x1, 0x0, 0x0, 0x10000, 0x2}}, {0x8, 0x2, [0x5, 0xb]}}, {{0x1c, 0x1, {0x3, 0xed, 0x7f, 0x5, 0x2, 0x1, 0xc, 0x5}}, {0xe, 0x2, [0x2, 0x2, 0x101, 0x8, 0x5]}}, {{0x1c, 0x1, {0x93, 0x2, 0x72, 0x1, 0x2, 0x8, 0x3, 0x9}}, {0x16, 0x2, [0x7, 0x0, 0x3ff, 0x7fff, 0x6, 0x6, 0x3, 0x8, 0xfff2]}}, {{0x1c, 0x1, {0x3, 0xb, 0x6, 0x5, 0x1, 0x3db0, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x7, 0xff, 0x85, 0x53, 0x0, 0xffff, 0x5, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x9, 0x1, 0x9, 0xa7, 0x0, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x2]}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xb125}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}, @TCA_RATE={0x6, 0x5, {0xa0, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xd56d5ec5}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5}]}}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x8, 0xe, 0x1, 0x9, 0x8, 0x3}}, {0xa, 0x2, [0xffff, 0x9, 0x40]}}, {{0x1c, 0x1, {0x6, 0x0, 0x8, 0x9, 0x1, 0x18957da0, 0x80000000, 0x5}}, {0xe, 0x2, [0x5, 0x3, 0x5, 0x556d, 0x6]}}, {{0x1c, 0x1, {0x9, 0xb, 0x3, 0x2, 0x0, 0x9, 0xbb, 0x9}}, {0x16, 0x2, [0x5829, 0x7, 0x3, 0x200, 0xff1b, 0x4, 0x5, 0x3, 0x331]}}, {{0x1c, 0x1, {0x4, 0xcc, 0x40, 0x7fffffff, 0x0, 0x9, 0xfffffff9, 0x3}}, {0xa, 0x2, [0x3, 0x3, 0xfff7]}}, {{0x1c, 0x1, {0x9, 0x6c, 0x208, 0x10001, 0x0, 0x5, 0x81, 0x3}}, {0xa, 0x2, [0x3, 0x400, 0xfffb]}}, {{0x1c, 0x1, {0x80, 0x9, 0x3f, 0x3, 0x2, 0xffff0b34, 0x6, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xc, 0x4, 0x401, 0x3, 0x0, 0xfffffffb, 0x9, 0x5}}, {0xe, 0x2, [0x4, 0x9, 0x3, 0x3, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x308}, 0x1, 0x0, 0x0, 0x80}, 0x4044001) 34m8.539211583s ago: executing program 3 (id=525): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0405619, &(0x7f0000000080)={0x4, 0xff06ff, "fb019d2709eac6952e93274226a515759adce82a5bb74854", {0x6, 0x8}, 0x9}) r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r3, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='stack\x00') io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000440)={0x1000000, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2, r8}]) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x2, 0x0, 0x0, "f700", 'e\t\x00', "0600", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x43, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r10, 0x0, 0x0) 34m7.415336798s ago: executing program 3 (id=530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x400040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000180)={{0xffffffffffffffff, 0xfffffff7}, {0x3, 0xffff}, 0x15}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 34m7.298753494s ago: executing program 3 (id=531): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x38}}, 0x20000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, @CTA_NAT_V4_MINIP={0xfffffffffffffcdd, 0x1, @multicast1}]}]}, 0x84}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 34m6.720912052s ago: executing program 33 (id=531): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x38}}, 0x20000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, @CTA_NAT_V4_MINIP={0xfffffffffffffcdd, 0x1, @multicast1}]}]}, 0x84}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 21.344963367s ago: executing program 4 (id=9064): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffff9, 0x80000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000180)={0x6, 0x20, 0x1, 0x3, "fb5e53d1c05538a7cdd01fc826a7abca623c45b60f1dc75bee85b0f03f952cd0"}) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_usb_connect(0x2, 0x3d, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100, 0x0, 0x10000000}, &(0x7f0000000100), &(0x7f0000000140)) (async) r4 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100, 0x0, 0x10000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 12.470414232s ago: executing program 6 (id=9093): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x10}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 12.068706995s ago: executing program 6 (id=9096): syz_open_dev$media(&(0x7f0000000000), 0xa, 0x8100) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000540)={0x0, 0x18, 0xc, {0xc, 0x1, "f5ca8233507cd9e53319"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x14, &(0x7f00000002c0)={0x0, 0x11, 0x51, {0x51, 0x3, "4441c5cf9d6617acb0b61aa3f97b825d13cb384262da120d5dee13632e13662632d1894b2b87922fa503f882c602ca8c4cea629bbc450df0bb3801a8e35d0d63cb3244cb7fef3bc917e4c06d8b9f18"}}, &(0x7f0000000340)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "da8f9957fa1db3ae10f1f4ab0407916c9773008156a3d1ecffe1f6b94d3789fd2614835a2bf44327cf607436a7e995fa7f2a1456f832bf84f260392ab0a5e867e8ee7e578419b7de75585783ac5b6fddf9273efb3efbd15d5a7e37baf3db5a9878682c2710b63cf2a1c3cf4ba01a141a28bb116460506be817"}}, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, '7'}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xe1b}}}}, &(0x7f00000007c0)={0x18, &(0x7f0000000600)={0x40, 0x9, 0xea, "002c9abd9008a6f6b187fb0baffc7f13ae1e198dbf74c744b620a958b865300594cd73e0f710dd22e8c16e60188e4da9671cbc3243d513cf4836d87588217187de4abcba78750a387b174c4029f498bb4b3bf865ab4d8f5ab15bd256139c33040be8e9fd60cba3466b1b3b571a7de76c34708be1b54f183ce1b8058de32f6622cbaf482c537910e8e1b14543122a583b1003508f8217eb8d9320c8b91df980ffc1c14dd85180d5d08dddcee4ce3ba5273ea4db6bcad68441aabeac81e42897c9735a388a1547eef35abd50f1fdb550934ba31ff17baf09ceb8d2faa4890672024abe1a60013f1172c80d"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xb1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x57}, &(0x7f0000000700)={0x20, 0x1, 0x8c, "b788911e09fa6147c2a7b06aac5b9522c63d0f68a4a1f9d433953f5a1e03ec9054cac84f5c35882751ceac29b11983ed78f41ec76dc6abcc63f5f87122824a5a6a41e2b6c0c49625aa2db46d8e1262747e11df1e0d23f4013c8ad2db43db64bb41693fc59e52f938259ef320a2f379b4e0b4c2028df6dc4e015a36537dbaf58ff4c92384ef0fc9b53f6eb241"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x2140}, {r1, 0xc40a}, {r2, 0x1004}], 0x3, &(0x7f0000000200)={r4, r5+60000000}, &(0x7f0000000240)={[0x2]}, 0x8) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000d40)="9f3f", 0x2}], 0x1}, 0x2004c055) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) 8.790565288s ago: executing program 6 (id=9106): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x86, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@local, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}}]}]}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r3, 0xd3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r2) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x1, 0x45, {0x45, 0xe, "f9d9855d539b05fb0f4526c99263e5d04046bd6e0be4b2368edc697a47e365f91576f85e877a54394e0516a6516a69f346f27665c294e6d0be5c203fe45ffba21b1ee6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.568801547s ago: executing program 1 (id=9107): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000180)=ANY=[]) (async) read$char_usb(r2, &(0x7f0000000200)=""/66, 0x42) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20008850) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x2000, 0x820, 0x4, 0x0, 0x20, 0x80, 0xc, r6}, {@in=@multicast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0xc1, 0x1, {{'sha256\x00'}, 0x3c8, "3ba7455bf6ba995a773e1ff16737dda38b18b4d6f6ce41090000008bdc51055eaac0ef49cd6d29f30289cb48997dd726aa0f0a9649e86c679a829e5d6e7dd49b20018000000000000000c43271fcb9f7cb888bff11c2ad1d6a690478f2241a27c1f6a3a627bc014b8b3b24e48f2657d774cd30dc9a334444f7"}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000001b400b4956010100000002120001420400000904c305000e01000700000000"], 0x0) 8.532219674s ago: executing program 0 (id=9108): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f00000010c0)=@target={'target ', {'PCI:', '17', ':', '9', ':', 'e', '.', '0'}}, 0x14) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002780)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000004280)=ANY=[@ANYBLOB="af5c2290073f2ddb358e26582e35e3c831267ed139f4a8898682dcb6a16639e0dedb91bc9028b3c032c836cecb6c362e035a22d1abe2da0d8ba4a459eeccd09cb0a7bd7321292666b24e9eee84a53db0ab2a91fb985a2ea2ae803b640695d476abd1d43d52d5af1554b51e79a9cd54c4143f768c0cd0fba2961b4a94a8b065aa61b06d0e0c197b138095c4a8a34a528a4cbaacb1ca", @ANYRESDEC=r3], 0x150}, 0x1, 0x0, 0x0, 0x20000811}, 0x810) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) geteuid() getresgid(&(0x7f00000049c0), &(0x7f0000004a00), &(0x7f0000004a40)) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000002180)={0x0, "04ef39865ec71973eacdb0ec46eceae918793a92c7293c6df8cf23e489fd85e0", 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004a80)={{{@in6=@empty, @in6=@private0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, 0x0) stat(&(0x7f00000051c0)='./file0\x00', &(0x7f0000005200)) stat(0x0, &(0x7f0000004200)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000000c0)="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", 0x2000, &(0x7f0000005580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x60, 0x0, 0x8, {{0x8, 0x80, 0x200, 0x1, 0x7, 0xfff, 0x40, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)={0x10}, &(0x7f0000004c00)={0x10, 0xfffffffffffffffe, 0xc}, 0x0, 0x0, 0x0}) 7.434238711s ago: executing program 0 (id=9109): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@remote, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x8002, 0xa, 0x0, 0x70}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x3ffffffd, 0x8, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x1, 0x2}}, 0xb4}}, 0x40) sendto$inet6(r0, &(0x7f0000000000)="8a", 0x1, 0x8072, &(0x7f0000000080)={0xa, 0x3, 0x1, @remote, 0x6}, 0x1c) (fail_nth: 23) 6.510953741s ago: executing program 0 (id=9110): pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4880) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x4, 0x8, 0x0, 0x1}}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) r4 = socket(0x11, 0x3, 0x800) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x2017be01}) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40018002, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES8=r6], 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x1494) socket(0x21, 0x5, 0x8) fcntl$setstatus(r7, 0x4, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r8, 0x6, 0x1b, 0x0, &(0x7f0000001840)) fcntl$setstatus(r7, 0x4, 0x42400) 5.621851764s ago: executing program 6 (id=9111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r4}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x3754, 0x4, 0x4, 0x804, 0x7, 0xd, 0xd507, 0xff, 0xffffffffffffbfff, 0x9, 0x8000000000000007, 0x0, 0x8001, 0x9, 0x400000000000006, 0x2006], 0xdddd1000, 0x110204}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={r9, 0xa}, &(0x7f0000000100)=0x2b) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) preadv(r10, &(0x7f0000000840), 0x0, 0x6, 0x5) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r11 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7f, 0x80, 0x3, 0x35c}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x41, 0x4004, @fd, 0xffffffffffffffff, 0xfffffffffffffab2, 0x7, 0x5, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f0000000800), 0x0) io_uring_enter(r11, 0x54, 0x0, 0x0, 0x0, 0x0) r14 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r14, &(0x7f00000001c0)={0x2, 0x0, @broadcast, 0x2}, 0x10) 5.330847545s ago: executing program 5 (id=9112): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600020906ffffffffffffffff03003e0000000000000100000000000040000000000000009a010000000000000000000000003800030000000100000051e574640900000087000000000000000e0000000000000000000000000000800500000000000000bf04000000000000ffffffffffffffff0700000003000000ff03000000000000030000000000000005000000000000000500000000000000000000000000001004000000000000000300000004000000e500000000000000000000000000000006000000000000006d"], 0xe8) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x2000800) 5.098413294s ago: executing program 1 (id=9113): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x104, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd4, 0x2, [@TCA_CGROUP_ACT={0xd0, 0x1, [@m_gact={0xcc, 0x1d, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x403, 0x7ff, 0x8, 0x40, 0xff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x40, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17d5, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x2000000a, 0x80000001, 0x4ea}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x8, 0x5, 0x800, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x40, 0x4, 0x1, 0xfffffff6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf42, 0xffff, 0x3, 0x9, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x104}}, 0x0) 5.097865398s ago: executing program 5 (id=9114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4f21, @local}, 0x42) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 4.761187507s ago: executing program 1 (id=9115): setsockopt$inet6_int(0xffffffffffffffff, 0x84, 0x3c, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x2, 0x103) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0xfffffff5) 4.438712376s ago: executing program 1 (id=9116): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0xccf1, "287302d5000000000000000300", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"fd04070b00000500aa00000000e90000000004000200a9b20000000000000006", r2}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'g<\n%', 0x4, 0x4, 0x4, 0x199c, 0x1, "d9ea8d5eca656b2923aee16a9e9e5d", "cc4dfceb", '10x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000058020000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.046896033s ago: executing program 4 (id=9118): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00200013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.003583939s ago: executing program 4 (id=9119): syz_emit_ethernet(0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa000000000000008864450000280000000000069078ac1414bbe000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c46700e4904a00027afd92bccfd2fec10f0053f380ef9af5444d285a6d92fb632270bae9d19d2808cb45ae7305ef5b2b26139431ef6ea25f7279a30d69a65cba38c1e83ca3b7799f60e97456cdafdca5c2f5bdbbfdf2"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x10, 0x1405, 0x1, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc004}, 0xc880) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x1027}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./control\x00', 0x0) openat(r6, &(0x7f0000000280)='./control\x00', 0x0, 0x0) unlinkat(r6, &(0x7f0000000140)='./control\x00', 0x200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000480)="b8050000000f01c10f46a78900000066ba2100b06795ee49ee492000b000ee6d6c2f800000c00f32d9f50f3066b808008ed0660f38806f008ee0", 0x3a}], 0x15555555555555a3, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000440)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000200)=""/26, 0x1a}], 0x2, &(0x7f0000000400)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x12000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xeeee0000, 0x4, 0x7fff, 0x5, 0x0, [{0x7f, 0x7, 0xa, '\x00', 0x2}, {0x3, 0x7, 0x0, '\x00', 0x2f}, {0xff, 0x3, 0x7f, '\x00', 0xc}, {0x7, 0x9, 0x3, '\x00', 0x2}, {0x9, 0x3, 0xb9}, {0xff, 0x1, 0x9}, {0x2, 0x59, 0xb, '\x00', 0x80}, {0x3, 0x1, 0x2, '\x00', 0x2}, {0x8, 0x20, 0x4, '\x00', 0x3}, {0x2, 0x3a, 0x6, '\x00', 0x7}, {0x2, 0x0, 0x4, '\x00', 0x9}, {0x2, 0xd1, 0x49, '\x00', 0x2}, {0x1, 0x2, 0x1, '\x00', 0x53}, {0x8, 0x4, 0x4, '\x00', 0xfe}, {0xfc, 0x44, 0xf, '\x00', 0x5}, {0x7, 0x8, 0x8, '\x00', 0x6}, {0x40, 0x8, 0x5, '\x00', 0xa4}, {0x7, 0x1, 0x0, '\x00', 0x2}, {0x4, 0xf, 0x4a, '\x00', 0x3}, {0x3, 0xe, 0x7, '\x00', 0xa}, {0x5, 0xd5, 0x3, '\x00', 0x4}, {0xb, 0x2, 0x8, '\x00', 0x8}, {0xc, 0x7, 0x7, '\x00', 0xff}, {0xa, 0x8, 0x4, '\x00', 0x7f}]}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x181, 0x7, 0xffffffffffffffff, 0xef, 0x18, 0x8000000000000, 0x4, 0x0, 0x100000000000009, 0x0, 0x8, 0x7, 0x8], 0x1, 0x200}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r10, &(0x7f0000000580)=[{&(0x7f0000000840)=""/79, 0x4f}], 0x1, 0x400000b, 0x3) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 3.375513673s ago: executing program 5 (id=9120): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x86, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@local, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}}]}]}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r3, 0xd3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r2) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x1, 0x45, {0x45, 0xe, "f9d9855d539b05fb0f4526c99263e5d04046bd6e0be4b2368edc697a47e365f91576f85e877a54394e0516a6516a69f346f27665c294e6d0be5c203fe45ffba21b1ee6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.315238652s ago: executing program 4 (id=9121): unshare(0x42000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) syz_clone(0x80020000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000240)="8d06993b57b48cb9760caa6cbd991e64fdac2954f5a95d72a555e8012ab9d0aba8d53ce81c7f83819ac605b49fce8a216e191881b79b7028e8ac671015e8f8da5eccad49aedfc07dbab4576ba2a458ef6a35450e6237dca1b5ed61bcf84660f8cc04cf14097506181a7c19359b1f6a776a1fe652ace583f07397cef9d343b0eca97d51b9fdab6a5992984021b434fe29df96d9f3fa04ab7c73e9821353788292d848160528f72c2cf67305d7fc7fc3f03ae6fe6ec6d7c038cc3c1808d62f9a5f0754649226") setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000002004e21e0"], 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) unshare(0x20800) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) r4 = signalfd4(r0, &(0x7f0000000000)={[0x0, 0x2]}, 0x8, 0x800) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000740)={0xff, {{0x2, 0x4e24, @rand_addr=0x5}}, 0x1, 0x5, [{{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x7f, 0x0}}}, {{0x2, 0x4e22, @broadcast}}]}, 0x30c) sendmsg$NFT_BATCH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.227015825s ago: executing program 0 (id=9122): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010005"], 0x44}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24084041}, 0x5) 2.954727068s ago: executing program 0 (id=9123): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[@ANYRES64=r1], &(0x7f0000000080)={0x0, 0x2003, [0x3e3, 0xb48, 0x828, 0x26f]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x79, &(0x7f0000000280)=""/121, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[r5, 0x1], &(0x7f0000000340)=[{0x4, 0x3, 0x10, 0xa}, {0x3, 0x4, 0x10, 0x6}, {0x4, 0x4, 0x3, 0x9}, {0x3, 0x2, 0xa, 0xc}, {0x3, 0x4, 0xc, 0x7}, {0x3, 0x2, 0x4, 0x6}, {0x3, 0x3, 0x9, 0x1}], 0x10, 0x4, @void, @value}, 0x94) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='io\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r6, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/94, 0x5e}], 0x1, 0x0, 0x0) r7 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r0, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r7, 0x7b3, &(0x7f0000000080)) listen(r0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@fallback=r0, 0xffffffffffffffff, 0xc, 0x20, 0xffffffffffffffff, @void, @void, @void, @value}, 0x20) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1.974618402s ago: executing program 0 (id=9124): futex(&(0x7f0000000000)=0x1, 0x0, 0x1, &(0x7f0000000140), 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={r2, 0x8, "b6532c4dc768b8a4"}, &(0x7f0000000240)=0x10) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfff993ee77e6c29d0ead909eef0be59f7a008ec6abc3f1bcd24727556bf638c48f063b9d0037846eb2de4b52905b72c2cfd12d406533c5b21fe1129d43a1db9b4cdf21dab5548547c9889ca512968f0e4bc4a2ca2ab1867545d11ad32b150b5c290a1f4e2707a39128e573d1e1819d922aa22967819215e495bdc92b7bf91a29b66d6d26d6aa1f27dcce154cd930ea0e263de9192194e71dc03bb91e4497e8d9dc2f66c504c8e68b34d74071ab802ea773a5ffc84"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x8000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8201) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r7, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={r3, 0x2}, &(0x7f0000000340)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a200000001a0a0514000000000000000001000000090001"], 0xa0}}, 0x0) 1.369982828s ago: executing program 1 (id=9125): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x104, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd4, 0x2, [@TCA_CGROUP_ACT={0xd0, 0x1, [@m_gact={0xcc, 0x1d, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x403, 0x7ff, 0x8, 0x40, 0xff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x40, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17d5, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x2000000a, 0x80000001, 0x4ea}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x8, 0x5, 0x800, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x40, 0x4, 0x1, 0xfffffff6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf42, 0xffff, 0x3, 0x9, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x104}}, 0x0) 1.18007555s ago: executing program 1 (id=9126): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0xfffffeea, 0x42, 0xa01, 0xffffffff, 0x0, {0xc}}, 0x14}}, 0x800) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001080)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="00002e000000b808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.019459352s ago: executing program 6 (id=9127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x3, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7801, 0x20, 0x1}}) getdents64(0xffffffffffffffff, 0x0, 0x300) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000440)={0x1, 0xff, 0x81, 0x0, 0x10000}) syz_emit_ethernet(0x52, &(0x7f0000000480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@generic={0xd, "fa28c27c12c06b6c653e9c2120c15e0e4b45a61ba0acc099473df6758490b6bd6d28c7da3197d5b5beef816a982dc5ac20af57c1e4c0cc99d5afe593e7df9fd9d4038f55"}}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x31, 0x70, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a5aba36d35"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xcc93, 0x2, 0x8}, {0x6, 0x24, 0x1a, 0x7f, 0xd}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x5e, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xc, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x7b}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x1, 0x70, 0xc, 0xff, 0x48}, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="010071908fc0c6a1cd39a18cd5fc87a79a94c5a15a57945d9a1661b647dcefb4ad732606c60968e61d0e1e6db915866c82d15218ff89d67e0b8fa3e0500e631c22fcf407d606a87da8c7fecaf9b68bdac80a2070af6e6bf3720dddfd77f1fe08e807a86860575cc600000000000000040529e5d8"], 0x1, [{0x0, 0x0}]}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x44) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup3(r8, r7, 0x80000) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 458.5771ms ago: executing program 5 (id=9128): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x3ac}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x130, 0x154, 0x0, {}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @mcast2, [], [], 'pimreg0\x00', 'vcan0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'pim6reg1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5bc) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) 325.817296ms ago: executing program 5 (id=9129): r0 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="6b7987fd88b70147af51eb3c017e451764486f9caf6f80f08da40a2d76421f34d902bb1d2a6d851ae6c48e72162d7231bf5ba0c27adfd0893599dde9089380120cc4277d7b6de6eaa9d1d8aae8cabcf5611a4651aa9d81c224a450eaaca90163dee22870a4d59033a7d9d24460535da86af9bdffb40e830f0f24", 0x7a, 0x20004080, 0x0, 0x0) 279.382557ms ago: executing program 5 (id=9130): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setown(r1, 0x8, 0xffffffffffffffff) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x98) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x804) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000003c000900000000000000000002000000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd54, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x6a98047402e98331, 0xfffffffd}, 0xfffffffffffffe7a}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)={0x6c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd292}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7e3b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000000}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x240000c4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x5) syz_emit_ethernet(0x62, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x2c, 0x6, 0x0, @remote, @private0, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa9, {[@timestamp={0x8, 0xa, 0x2b24, 0xae2}, @fastopen={0x22, 0xb, "51982851a6984d8933"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8010000090780000080a00"/20], 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc25c4110, &(0x7f0000000ec0)={0x0, [[0x1, 0x0, 0x7ffe, 0x0, 0x0, 0xed26], [0x2, 0x0, 0x9, 0x20000000, 0x0, 0x1], [0x2, 0xfffffff7, 0x0, 0x4, 0x9b, 0xfffffffd, 0x3]], '\x00', [{}, {}, {0x10000, 0x8}, {}, {0x0, 0x1}, {0x2ea}, {}, {}, {}, {0x8}, {}, {0x6}], '\x00', 0x4, 0x0, 0x0, 0x2}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') sendmsg$inet(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4623, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="37b275612cc7edf52454f56369b45af98a2b6492a4a7c1b796fd20651dbd8770756f7727c5cd51fea179092ee2b1656d2e77f45c140660db68d6ab01", 0x3c}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffc00}}], 0x3c}, 0x40000) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000cc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040001) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x28, 0x107, 0x8000000, 0x0, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}}, 0x40080c0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r5) 0s ago: executing program 4 (id=9131): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff04003a533c980800451000780000000000019078ac1e0001ac1414aa05019078e00000e0470000000000000000110000ac14148a0000000083030083072d7f000001443c0003640101010000000000000000000000007f00000100000000ac1414bb000000000000000000000000ac1414bb000000008b1635f07cb6a87c0000aae8aea0a8f9125c3056d7dbd39ead779ca2a2845166f466c73214f248f858b1b444794c0ec9bab3de91b00c5306562600059a4b0e5f2c6386b48166489bf0fd8d22185bf39f92f247a211e2c3a905aed5cf0693bf1749567d2f7a"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x7f, 0x4, 0x19, 0x0, 0x9, 0x0, 0x8b, 0x4c, 0x4, 0xd, 0x3, 0x34, 0x0, 0x100, 0x19a, 0x4, 0x67, 0x59, 0x4c, '\x00', 0x5, 0x1341}) ioctl$KVM_RUN(r2, 0xae80, 0xf0) kernel console output (not intermixed with test programs): mber 82 using dummy_hcd [ 2189.160848][T31626] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2189.176722][T31633] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2189.188340][T31626] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2189.246195][T31626] usb 1-1: string descriptor 0 read error: -22 [ 2189.283375][T31626] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2189.316331][T31626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.357630][T31626] usb 1-1: bad CDC descriptors [ 2189.406987][T31633] usb 6-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2189.507011][T31633] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2189.524584][T31633] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2189.541127][T31633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.697943][T31633] usb 6-1: config 0 descriptor?? [ 2189.699238][T31626] usb 1-1: USB disconnect, device number 82 [ 2190.005746][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8739'. [ 2190.993671][ T4960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8740'. [ 2191.912955][T31633] usbhid 6-1:0.0: can't add hid device: -71 [ 2191.923666][T31633] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2191.944755][T31633] usb 6-1: USB disconnect, device number 23 [ 2192.584676][ T4982] Invalid logical block size (1048576) [ 2192.985547][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8750'. [ 2193.786683][T31626] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 2193.951305][T31626] usb 6-1: config 0 has no interfaces? [ 2193.978732][T31626] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2193.988255][T31626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.996464][T31626] usb 6-1: Product: syz [ 2194.002409][T31626] usb 6-1: Manufacturer: syz [ 2194.011501][T31626] usb 6-1: SerialNumber: syz [ 2194.021381][T31626] usb 6-1: config 0 descriptor?? [ 2194.782675][T31626] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 2194.985566][T31626] usb 2-1: config 0 has no interfaces? [ 2194.999260][T31626] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2195.008949][T31626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.018300][T31626] usb 2-1: Product: syz [ 2195.022675][T31626] usb 2-1: Manufacturer: syz [ 2195.029015][T31626] usb 2-1: SerialNumber: syz [ 2195.050895][T31626] usb 2-1: config 0 descriptor?? [ 2195.180227][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8757'. [ 2195.754208][T29210] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2195.931645][T29210] usb 1-1: Using ep0 maxpacket: 16 [ 2195.956653][T29210] usb 1-1: config 0 interface 0 altsetting 234 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2196.006062][T29210] usb 1-1: config 0 interface 0 altsetting 234 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2196.064252][T29210] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2196.139771][T29210] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2196.157138][T29210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.173848][T29210] usb 1-1: config 0 descriptor?? [ 2196.524723][T31626] usb 6-1: USB disconnect, device number 24 [ 2196.691913][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.701278][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.925483][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.945697][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.987662][T29210] usbhid 1-1:0.0: can't add hid device: -71 [ 2196.993690][T29210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2197.042985][T29210] usb 1-1: USB disconnect, device number 83 [ 2197.425470][T31633] usb 2-1: USB disconnect, device number 49 [ 2197.888251][ T5026] delete_channel: no stack [ 2199.227110][T29210] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2199.396051][T29210] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2199.405337][T29210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.413407][T29210] usb 6-1: Product: syz [ 2199.417682][T29210] usb 6-1: Manufacturer: syz [ 2199.422288][T29210] usb 6-1: SerialNumber: syz [ 2199.442814][T29210] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2199.550543][T31626] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2200.195502][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.228490][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.491421][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8776'. [ 2200.696727][T31626] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2200.704146][T31626] ath9k_htc: Failed to initialize the device [ 2200.876876][T29210] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2200.984721][T31626] usb 6-1: ath9k_htc: USB layer deinitialized [ 2201.018373][T31633] usb 6-1: USB disconnect, device number 25 [ 2201.046659][T29210] usb 1-1: Using ep0 maxpacket: 16 [ 2201.054342][T29210] usb 1-1: config 0 interface 0 altsetting 234 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.084492][T29210] usb 1-1: config 0 interface 0 altsetting 234 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2201.116623][T29210] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2201.123650][T29210] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2201.170944][T29210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.213219][T29210] usb 1-1: config 0 descriptor?? [ 2201.646773][ T5083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.673912][ T5083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.916839][T29210] usbhid 1-1:0.0: can't add hid device: -71 [ 2201.922860][T29210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2201.951844][T29210] usb 1-1: USB disconnect, device number 84 [ 2203.137598][T29210] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2203.316489][T29210] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2203.334304][T29210] usb 6-1: config 1 has an invalid descriptor of length 65, skipping remainder of the config [ 2203.415496][T29210] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2203.442932][T29210] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2203.466668][T29210] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2203.493007][T29210] usb 6-1: Product: syz [ 2203.500701][T29210] usb 6-1: Manufacturer: syz [ 2203.515929][T29210] cdc_wdm 6-1:1.0: skipping garbage [ 2203.525612][T29210] cdc_wdm 6-1:1.0: skipping garbage [ 2203.544164][T29210] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2203.552367][T29210] cdc_wdm 6-1:1.0: Unknown control protocol [ 2203.771536][T29210] usb 6-1: USB disconnect, device number 26 [ 2204.046640][T29688] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 2204.233915][T29688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2204.248275][T29688] usb 1-1: not running at top speed; connect to a high speed hub [ 2204.317770][T29688] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 2204.661954][T29688] usb 1-1: config 0 has no interface number 0 [ 2204.802651][T29688] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 2204.846607][T29688] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2204.863507][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8793'. [ 2204.884049][T29688] usb 1-1: config 0 interface 88 has no altsetting 0 [ 2204.959110][T29688] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 2204.969807][T29688] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 2204.991985][T29688] usb 1-1: Product: syz [ 2205.106349][T29688] usb 1-1: Manufacturer: syz [ 2205.119829][T29688] usb 1-1: SerialNumber: syz [ 2205.181710][T29688] usb 1-1: config 0 descriptor?? [ 2205.464281][ T5121] vivid-001: ================= START STATUS ================= [ 2205.477010][ T5121] vivid-001: Radio HW Seek Mode: Bounded [ 2205.484791][ T5121] vivid-001: Radio Programmable HW Seek: false [ 2205.496847][ T5121] vivid-001: RDS Rx I/O Mode: Block I/O [ 2205.509421][ T5121] vivid-001: Generate RBDS Instead of RDS: false [ 2205.533972][ T5121] vivid-001: RDS Reception: true [ 2205.546344][ T5121] vivid-001: RDS Program Type: 0 inactive [ 2205.554415][ T5121] vivid-001: RDS PS Name: inactive [ 2205.560556][ T5121] vivid-001: RDS Radio Text: inactive [ 2205.566973][ T5121] vivid-001: RDS Traffic Announcement: false inactive [ 2205.584647][ T5121] vivid-001: RDS Traffic Program: false inactive [ 2205.591871][ T5121] vivid-001: RDS Music: false inactive [ 2205.598455][ T5121] vivid-001: ================== END STATUS ================== [ 2206.176762][T31626] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2206.337432][T31626] usb 6-1: Using ep0 maxpacket: 32 [ 2206.347620][T31626] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 2206.369642][T31626] usb 6-1: config 0 has no interface number 0 [ 2206.391404][T31626] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2206.405433][T31626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.423196][T31626] usb 6-1: Product: syz [ 2206.436941][T31626] usb 6-1: Manufacturer: syz [ 2206.448781][T31626] usb 6-1: SerialNumber: syz [ 2206.474669][T31626] usb 6-1: config 0 descriptor?? [ 2206.903477][T29688] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input97 [ 2207.001256][T31626] radio-si470x 6-1:0.35: this is not a si470x device. [ 2207.054352][T29688] usb 1-1: USB disconnect, device number 85 [ 2207.075477][T31626] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 2207.274711][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8801'. [ 2207.284523][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8801'. [ 2207.293751][ T5159] netlink: 'syz.0.8801': attribute type 19 has an invalid length. [ 2207.311399][ T5159] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2207.320966][ T5159] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2207.330221][ T5159] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2207.340228][ T5159] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2207.497451][T31626] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2207.657218][T31626] usb 2-1: Using ep0 maxpacket: 16 [ 2207.683910][T31626] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.709860][T31626] usb 2-1: config 0 has no interfaces? [ 2207.715407][T31626] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2207.725777][T31626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.737651][T31626] usb 2-1: config 0 descriptor?? [ 2208.301621][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8804'. [ 2208.479938][T20164] usb 2-1: USB disconnect, device number 50 [ 2209.307431][T31633] usb 6-1: USB disconnect, device number 27 [ 2210.384744][ T5196] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8810'. [ 2210.394377][ T5196] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8810'. [ 2210.404721][ T5196] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8810'. [ 2210.427926][ T5196] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2211.010929][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8815'. [ 2211.153143][ T5220] FAULT_INJECTION: forcing a failure. [ 2211.153143][ T5220] name failslab, interval 1, probability 0, space 0, times 0 [ 2211.206355][ T5220] CPU: 0 UID: 0 PID: 5220 Comm: syz.0.8816 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2211.206387][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2211.206401][ T5220] Call Trace: [ 2211.206409][ T5220] [ 2211.206419][ T5220] dump_stack_lvl+0x241/0x360 [ 2211.206457][ T5220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2211.206487][ T5220] ? __pfx__printk+0x10/0x10 [ 2211.206523][ T5220] ? __pfx___might_resched+0x10/0x10 [ 2211.206548][ T5220] should_fail_ex+0x424/0x570 [ 2211.206585][ T5220] should_failslab+0xac/0x100 [ 2211.206608][ T5220] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 2211.206648][ T5220] ? __alloc_skb+0x1c2/0x480 [ 2211.206699][ T5220] __alloc_skb+0x1c2/0x480 [ 2211.206734][ T5220] ? __pfx___alloc_skb+0x10/0x10 [ 2211.206771][ T5220] ? netlink_ack_tlv_len+0x6e/0x200 [ 2211.206799][ T5220] netlink_ack+0x147/0xa70 [ 2211.206822][ T5220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2211.206848][ T5220] ? __lock_acquire+0xad5/0xd80 [ 2211.206895][ T5220] netlink_rcv_skb+0x296/0x480 [ 2211.206930][ T5220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2211.206959][ T5220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2211.207005][ T5220] ? netlink_deliver_tap+0x2e/0x1b0 [ 2211.207035][ T5220] ? netlink_deliver_tap+0x2e/0x1b0 [ 2211.207062][ T5220] netlink_unicast+0x7f8/0x9a0 [ 2211.207096][ T5220] ? __pfx_netlink_unicast+0x10/0x10 [ 2211.207122][ T5220] ? skb_put+0x114/0x1f0 [ 2211.207157][ T5220] netlink_sendmsg+0x8c3/0xcd0 [ 2211.207198][ T5220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2211.207229][ T5220] ? aa_sock_msg_perm+0x91/0x160 [ 2211.207263][ T5220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2211.207288][ T5220] __sock_sendmsg+0x221/0x270 [ 2211.207318][ T5220] ____sys_sendmsg+0x523/0x860 [ 2211.207360][ T5220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2211.207410][ T5220] __sys_sendmsg+0x271/0x360 [ 2211.207449][ T5220] ? __pfx___sys_sendmsg+0x10/0x10 [ 2211.207536][ T5220] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2211.207559][ T5220] ? lockdep_hardirqs_on+0x9d/0x150 [ 2211.207583][ T5220] __do_fast_syscall_32+0xb4/0x110 [ 2211.207606][ T5220] ? exc_page_fault+0x5f8/0x920 [ 2211.207632][ T5220] do_fast_syscall_32+0x34/0x80 [ 2211.207656][ T5220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2211.207682][ T5220] RIP: 0023:0xf705d539 [ 2211.207701][ T5220] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2211.207718][ T5220] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2211.207741][ T5220] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680 [ 2211.207757][ T5220] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2211.207769][ T5220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2211.207781][ T5220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2211.207794][ T5220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2211.207823][ T5220] [ 2211.902675][ T5231] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8813'. [ 2211.915478][ T5231] caif0: entered allmulticast mode [ 2211.976706][T29210] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2212.239952][ T5237] program syz.0.8820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2212.570604][T29210] usb 6-1: config 0 has no interfaces? [ 2212.714822][T29210] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2212.765896][T29210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.785877][T29210] usb 6-1: Product: syz [ 2212.801927][T29210] usb 6-1: Manufacturer: syz [ 2212.825342][T29210] usb 6-1: SerialNumber: syz [ 2212.847291][T29210] usb 6-1: config 0 descriptor?? [ 2212.946771][T20164] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2213.242729][T20164] usb 1-1: Using ep0 maxpacket: 16 [ 2213.265807][T20164] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.318067][T20164] usb 1-1: config 0 has no interfaces? [ 2213.376691][T20164] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2213.385851][T20164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.405770][T20164] usb 1-1: config 0 descriptor?? [ 2213.643876][ T5241] syz.0.8822: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 2213.693318][ T5241] CPU: 0 UID: 0 PID: 5241 Comm: syz.0.8822 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2213.693352][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2213.693370][ T5241] Call Trace: [ 2213.693379][ T5241] [ 2213.693388][ T5241] dump_stack_lvl+0x241/0x360 [ 2213.693427][ T5241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2213.693459][ T5241] ? __pfx__printk+0x10/0x10 [ 2213.693492][ T5241] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2213.693520][ T5241] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2213.693544][ T5241] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 2213.693570][ T5241] warn_alloc+0x27c/0x410 [ 2213.693598][ T5241] ? alloc_pages_mpol+0x4e6/0x690 [ 2213.693618][ T5241] ? __vmalloc_node_range_noprof+0xe6f/0x1390 [ 2213.693642][ T5241] ? __pfx_warn_alloc+0x10/0x10 [ 2213.693680][ T5241] ? rcu_is_watching+0x15/0xb0 [ 2213.693708][ T5241] ? alloc_pages_noprof+0x13d/0x190 [ 2213.693733][ T5241] __vmalloc_node_range_noprof+0x1097/0x1390 [ 2213.693791][ T5241] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2213.693824][ T5241] ? rcu_is_watching+0x15/0xb0 [ 2213.693848][ T5241] ? copy_process+0x5dc/0x3d10 [ 2213.693864][ T5241] __vmalloc_node_noprof+0x80/0xa0 [ 2213.693882][ T5241] ? copy_process+0x5dc/0x3d10 [ 2213.693899][ T5241] dup_task_struct+0x3f7/0x870 [ 2213.693913][ T5241] ? _raw_spin_unlock_irq+0x23/0x50 [ 2213.693940][ T5241] copy_process+0x5dc/0x3d10 [ 2213.693959][ T5241] ? stack_depot_save_flags+0x44/0x940 [ 2213.693985][ T5241] ? __pfx_path_openat+0x10/0x10 [ 2213.694003][ T5241] ? stack_trace_save+0x11a/0x1d0 [ 2213.694025][ T5241] ? kasan_save_track+0x51/0x80 [ 2213.694056][ T5241] ? kasan_save_track+0x3f/0x80 [ 2213.694076][ T5241] ? create_io_worker+0xae/0x5e0 [ 2213.694090][ T5241] ? io_wq_enqueue+0x7b7/0xa10 [ 2213.694111][ T5241] ? io_queue_iowq+0x433/0x670 [ 2213.694131][ T5241] ? io_queue_async+0x3f9/0x4e0 [ 2213.694144][ T5241] ? io_submit_sqes+0xdfc/0x1ce0 [ 2213.694164][ T5241] ? __se_sys_io_uring_enter+0x2cd/0x34d0 [ 2213.694187][ T5241] ? __pfx_copy_process+0x10/0x10 [ 2213.694209][ T5241] ? __pfx_io_wq_worker+0x10/0x10 [ 2213.694224][ T5241] ? __pfx_io_wq_worker+0x10/0x10 [ 2213.694258][ T5241] create_io_thread+0x16c/0x1e0 [ 2213.694277][ T5241] ? __pfx_create_io_thread+0x10/0x10 [ 2213.694300][ T5241] ? __pfx_io_wq_worker+0x10/0x10 [ 2213.694320][ T5241] ? __raw_spin_lock_init+0x45/0x100 [ 2213.694340][ T5241] ? __init_swait_queue_head+0xae/0x150 [ 2213.694361][ T5241] ? create_io_worker+0x27/0x5e0 [ 2213.694375][ T5241] create_io_worker+0x186/0x5e0 [ 2213.694394][ T5241] io_wq_enqueue+0x7b7/0xa10 [ 2213.694423][ T5241] ? __pfx_io_wq_enqueue+0x10/0x10 [ 2213.694446][ T5241] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 2213.694471][ T5241] io_queue_iowq+0x433/0x670 [ 2213.694496][ T5241] io_queue_async+0x3f9/0x4e0 [ 2213.694516][ T5241] io_submit_sqes+0xdfc/0x1ce0 [ 2213.694561][ T5241] __se_sys_io_uring_enter+0x2cd/0x34d0 [ 2213.694590][ T5241] ? rcu_read_lock_any_held+0xbb/0x160 [ 2213.694608][ T5241] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2213.694627][ T5241] ? vfs_write+0xb29/0xd10 [ 2213.694655][ T5241] ? ksys_write+0x24e/0x2d0 [ 2213.694685][ T5241] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2213.694715][ T5241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2213.694731][ T5241] ? __fget_files+0x2a/0x420 [ 2213.694748][ T5241] ? __fget_files+0x2a/0x420 [ 2213.694767][ T5241] ? fput+0x9b/0xd0 [ 2213.694783][ T5241] ? ksys_write+0x275/0x2d0 [ 2213.694821][ T5241] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2213.694844][ T5241] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2213.694882][ T5241] __do_fast_syscall_32+0xb4/0x110 [ 2213.694908][ T5241] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2213.694945][ T5241] ? lockdep_hardirqs_on+0x9d/0x150 [ 2213.694962][ T5241] do_fast_syscall_32+0x34/0x80 [ 2213.694979][ T5241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2213.694996][ T5241] RIP: 0023:0xf705d539 [ 2213.695010][ T5241] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2213.695022][ T5241] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2213.695038][ T5241] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000003516 [ 2213.695049][ T5241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2213.695058][ T5241] RBP: 00000000fffffdcf R08: 0000000000000000 R09: 0000000000000000 [ 2213.695067][ T5241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2213.695075][ T5241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2213.695096][ T5241] [ 2214.156372][ T5241] Mem-Info: [ 2214.160859][ T5241] active_anon:8520 inactive_anon:5 isolated_anon:0 [ 2214.160859][ T5241] active_file:15794 inactive_file:3381 isolated_file:0 [ 2214.160859][ T5241] unevictable:768 dirty:235 writeback:0 [ 2214.160859][ T5241] slab_reclaimable:6591 slab_unreclaimable:120784 [ 2214.160859][ T5241] mapped:33001 shmem:1499 pagetables:1378 [ 2214.160859][ T5241] sec_pagetables:0 bounce:0 [ 2214.160859][ T5241] kernel_misc_reclaimable:0 [ 2214.160859][ T5241] free:1315779 free_pcp:2270 free_cma:0 [ 2214.208195][ T5241] Node 0 active_anon:34080kB inactive_anon:20kB active_file:63176kB inactive_file:13516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132004kB dirty:940kB writeback:0kB shmem:4460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12752kB pagetables:5512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2214.242900][ T5241] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2214.274851][ T5241] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2214.304227][ T5241] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2214.315386][ T5241] Node 0 DMA32 free:1339760kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:34072kB inactive_anon:20kB active_file:63176kB inactive_file:13432kB unevictable:1536kB writepending:940kB present:3129332kB managed:2547264kB mlocked:0kB bounce:0kB free_pcp:4652kB local_pcp:2888kB free_cma:0kB [ 2214.375356][ T5241] lowmem_reserve[]: 0 0 0 0 0 [ 2214.388530][ T5241] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 2214.496665][T31633] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2214.518320][ T5241] lowmem_reserve[]: 0 0 0 0 0 [ 2214.597002][ T5241] Node 1 Normal free:3907772kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4524kB local_pcp:4524kB free_cma:0kB [ 2214.629141][ T5241] lowmem_reserve[]: 0 0 0 0 0 [ 2214.642752][ T5241] Node 0 DMA: 0*4kB 0*8kB 0*16kB [ 2214.656676][T31633] usb 2-1: Using ep0 maxpacket: 32 [ 2214.658648][ T5241] 0*32kB [ 2214.710465][T31633] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.739545][T31633] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.751361][ T5241] 0*64kB 0*128kB 0*256kB 0*512kB [ 2214.752681][T31633] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2214.767026][ T5241] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2214.781315][T31633] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2214.790273][ T5241] Node 0 DMA32: 1956*4kB (UME) 1398*8kB (UME) 1248*16kB (UME) 821*32kB (UME) 747*64kB (UME) 214*128kB (UME) 117*256kB (UME) 39*512kB (UME) 37*1024kB (UME) 5*2048kB (UM) [ 2214.790664][T31633] usb 2-1: Product: syz [ 2214.812056][ T5241] 271*4096kB [ 2214.812161][T31633] usb 2-1: Manufacturer: syz [ 2214.820074][ T5241] (UM) = 1348512kB [ 2214.823878][ T5241] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2214.849097][ T5241] Node 1 Normal: 7*4kB [ 2214.853780][T31633] hub 2-1:4.0: USB hub found [ 2214.887008][T20164] usb 6-1: USB disconnect, device number 28 [ 2214.896852][ T5241] (UE) 6*8kB (UME) 31*16kB (UME) 256*32kB (UME) 98*64kB (UME) 36*128kB (UME) 12*256kB (UME) 8*512kB (UM) 6*1024kB (UME) 6*2048kB (UME) 943*4096kB (UM) = 3907772kB [ 2214.972385][ T5241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2214.988645][ T5257] syzkaller0: entered allmulticast mode [ 2215.056152][T31633] hub 2-1:4.0: 2 ports detected [ 2215.069934][ T5257] syzkaller0: mtu less than device minimum [ 2215.177830][ T5241] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2215.200106][ T5241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2215.265152][ T5253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2215.306841][ T5241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2215.323385][ T5241] 20684 total pagecache pages [ 2215.329008][ T5241] 5 pages in swap cache [ 2215.333269][ T5241] Free swap = 124976kB [ 2215.338148][ T5241] Total swap = 124996kB [ 2215.345967][ T5241] 2097051 pages RAM [ 2215.352320][ T5241] 0 pages HighMem/MovableOnly [ 2215.357874][ T5241] 428577 pages reserved [ 2215.366629][ T5241] 0 pages cma reserved [ 2215.435160][ T5253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2215.490696][ T1563] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2215.501144][T29210] usb 1-1: USB disconnect, device number 86 [ 2215.569199][ T5253] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 2215.598768][ T5253] Context (ID=0x0) not attached to queue pair (handle=0x2:0x5) [ 2215.632930][ T5266] FAULT_INJECTION: forcing a failure. [ 2215.632930][ T5266] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.647557][T31633] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 2215.672190][T31633] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 2215.677993][ T1563] usb 6-1: config 0 has no interfaces? [ 2215.695808][ T5266] CPU: 1 UID: 0 PID: 5266 Comm: syz.6.8827 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2215.695842][ T5266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2215.695856][ T5266] Call Trace: [ 2215.695865][ T5266] [ 2215.695876][ T5266] dump_stack_lvl+0x241/0x360 [ 2215.695914][ T5266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2215.695946][ T5266] ? __pfx__printk+0x10/0x10 [ 2215.695981][ T5266] ? __pfx___might_resched+0x10/0x10 [ 2215.696007][ T5266] should_fail_ex+0x424/0x570 [ 2215.696045][ T5266] should_failslab+0xac/0x100 [ 2215.696070][ T5266] __kmalloc_noprof+0xdf/0x4d0 [ 2215.696091][ T5266] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 2215.696120][ T5266] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 2215.696156][ T5266] tomoyo_realpath_from_path+0xcf/0x5e0 [ 2215.696189][ T5266] ? kern_path+0x3f/0x50 [ 2215.696220][ T5266] tomoyo_realpath_nofollow+0xbe/0x100 [ 2215.696250][ T5266] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 2215.696285][ T5266] ? tomoyo_find_next_domain+0x276/0x1dd0 [ 2215.696324][ T5266] tomoyo_find_next_domain+0x27e/0x1dd0 [ 2215.696352][ T5266] ? __lock_acquire+0xad5/0xd80 [ 2215.696385][ T5266] ? __pfx___kernel_read+0x10/0x10 [ 2215.696418][ T5266] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 2215.696453][ T5266] ? bprm_execve+0x240/0x1430 [ 2215.696478][ T5266] ? tomoyo_bprm_check_security+0xee/0x180 [ 2215.696514][ T5266] tomoyo_bprm_check_security+0x11a/0x180 [ 2215.696550][ T5266] security_bprm_check+0x86/0x250 [ 2215.696577][ T5266] bprm_execve+0x903/0x1430 [ 2215.696622][ T5266] ? __pfx_bprm_execve+0x10/0x10 [ 2215.696658][ T5266] ? copy_string_kernel+0x1d3/0x240 [ 2215.696685][ T5266] ? put_arg_page+0x10f/0x240 [ 2215.696710][ T5266] ? copy_string_kernel+0x200/0x240 [ 2215.696741][ T5266] do_execveat_common+0x57c/0x710 [ 2215.696781][ T5266] __ia32_compat_sys_execveat+0xca/0xe0 [ 2215.696814][ T5266] __do_fast_syscall_32+0xb4/0x110 [ 2215.696839][ T5266] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2215.696860][ T5266] ? lockdep_hardirqs_on+0x9d/0x150 [ 2215.696884][ T5266] do_fast_syscall_32+0x34/0x80 [ 2215.696907][ T5266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2215.696932][ T5266] RIP: 0023:0xf7f43539 [ 2215.696949][ T5266] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2215.696967][ T5266] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 2215.696989][ T5266] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 2215.697004][ T5266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 2215.697016][ T5266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2215.697028][ T5266] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2215.697041][ T5266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2215.697070][ T5266] [ 2216.000352][ T1563] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2216.009518][ T1563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.017626][ T1563] usb 6-1: Product: syz [ 2216.021816][ T1563] usb 6-1: Manufacturer: syz [ 2216.026442][ T1563] usb 6-1: SerialNumber: syz [ 2216.041096][T31633] usb 2-1: USB disconnect, device number 51 [ 2216.042396][ T5266] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2216.060417][ T1563] usb 6-1: config 0 descriptor?? [ 2216.363519][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8829'. [ 2216.722424][ T5283] program syz.6.8832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2216.779538][ T1563] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2216.966694][ T1563] usb 2-1: Using ep0 maxpacket: 16 [ 2216.974619][ T1563] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.991108][ T1563] usb 2-1: config 0 has no interfaces? [ 2217.021747][ T1563] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2217.038332][ T1563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.056217][ T1563] usb 2-1: config 0 descriptor?? [ 2218.129395][ T1563] usb 6-1: USB disconnect, device number 29 [ 2218.719129][T31633] usb 2-1: USB disconnect, device number 52 [ 2219.210787][ T5324] program syz.0.8846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2219.434067][ T5330] netlink: 'syz.1.8847': attribute type 1 has an invalid length. [ 2219.447390][ T5326] netlink: 'syz.1.8847': attribute type 1 has an invalid length. [ 2219.926647][ T1563] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2220.110274][ T1563] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2220.140342][ T1563] usb 2-1: config 0 has no interface number 0 [ 2220.193011][ T1563] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=c8.a9 [ 2220.216761][ T1563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.274679][ T1563] usb 2-1: Product: syz [ 2220.568911][ T1563] usb 2-1: Manufacturer: syz [ 2220.623124][ T1563] usb 2-1: SerialNumber: syz [ 2220.645170][ T1563] usb 2-1: config 0 descriptor?? [ 2220.777628][T31633] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2220.875897][ T1563] ath6kl: Failed to submit usb control message: -71 [ 2220.885242][ T1563] ath6kl: unable to send the bmi data to the device: -71 [ 2220.903000][ T1563] ath6kl: Unable to send get target info: -71 [ 2220.921420][ T1563] ath6kl: Failed to init ath6kl core: -71 [ 2220.929939][ T1563] ath6kl_usb 2-1:0.12: probe with driver ath6kl_usb failed with error -71 [ 2220.990785][ T1563] usb 2-1: USB disconnect, device number 53 [ 2221.046177][T31633] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2221.070532][T31633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2221.110773][T31633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2221.191773][T31633] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2221.231879][T31633] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2221.272799][T31633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.322321][T31633] usb 1-1: config 0 descriptor?? [ 2221.365323][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8857'. [ 2221.446133][ T5363] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8858'. [ 2221.837277][T31633] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 2221.903847][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.912197][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.032993][T31633] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2222.095450][T31633] usb 1-1: USB disconnect, device number 87 [ 2222.116788][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8855'. [ 2223.706655][T31633] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2223.726694][T31632] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2223.734810][T31626] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2223.867301][T31633] usb 1-1: Using ep0 maxpacket: 16 [ 2223.874260][T31633] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 2223.883006][T31633] usb 1-1: config 0 has no interface number 0 [ 2223.890104][T31633] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2223.902602][T31632] usb 6-1: config 0 has no interfaces? [ 2223.908555][T31633] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2223.913956][T31626] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2223.923198][T31632] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2223.936323][T31632] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.939563][T31626] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 2223.944729][T31633] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2223.962398][T31632] usb 6-1: Product: syz [ 2223.964126][T31626] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.966716][T31632] usb 6-1: Manufacturer: syz [ 2223.966738][T31632] usb 6-1: SerialNumber: syz [ 2223.986254][T31633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.987718][T31626] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 2223.997763][T31632] usb 6-1: config 0 descriptor?? [ 2224.011561][T31626] usb 2-1: config 13 has no interface number 0 [ 2224.018177][T31633] usb 1-1: Product: syz [ 2224.019011][T31626] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 2224.023298][T31633] usb 1-1: Manufacturer: syz [ 2224.036408][T31626] usb 2-1: config 13 interface 50 has no altsetting 0 [ 2224.054116][T31626] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 2224.064200][T31626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.072713][T31626] usb 2-1: Product: syz [ 2224.077615][T31626] usb 2-1: Manufacturer: syz [ 2224.082261][T31633] usb 1-1: SerialNumber: syz [ 2224.082318][T31626] usb 2-1: SerialNumber: syz [ 2224.105736][T31633] usb 1-1: config 0 descriptor?? [ 2224.113704][ T5398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2224.129247][ T5398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2224.350888][ T5398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2224.363354][ T5398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2224.551923][T31626] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2224.556824][ T754] usb 2-1: Failed to submit usb control message: -71 [ 2224.570083][ T754] usb 2-1: unable to send the bmi data to the device: -71 [ 2224.579357][ T754] usb 2-1: unable to get target info from device [ 2224.585759][ T754] usb 2-1: could not get target info (-71) [ 2224.592940][ T754] usb 2-1: could not probe fw (-71) [ 2224.607407][T31626] usb 2-1: USB disconnect, device number 54 [ 2225.003052][ T5398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.013287][ T5398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.054382][ T5398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.073037][ T5398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.106178][T31633] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2225.137599][T31633] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 2225.157086][T31633] asix 1-1:0.251: probe with driver asix failed with error -32 [ 2225.344691][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8877'. [ 2225.458123][ T5419] FAULT_INJECTION: forcing a failure. [ 2225.458123][ T5419] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.500831][ T5419] CPU: 1 UID: 0 PID: 5419 Comm: syz.1.8878 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2225.500865][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2225.500879][ T5419] Call Trace: [ 2225.500888][ T5419] [ 2225.500897][ T5419] dump_stack_lvl+0x241/0x360 [ 2225.500936][ T5419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2225.500967][ T5419] ? __pfx__printk+0x10/0x10 [ 2225.501001][ T5419] ? __pfx___might_resched+0x10/0x10 [ 2225.501029][ T5419] should_fail_ex+0x424/0x570 [ 2225.501067][ T5419] should_failslab+0xac/0x100 [ 2225.501091][ T5419] __kmalloc_cache_noprof+0x73/0x370 [ 2225.501113][ T5419] ? rtnl_newlink+0x144/0x1fe0 [ 2225.501144][ T5419] rtnl_newlink+0x144/0x1fe0 [ 2225.501171][ T5419] ? stack_depot_save_flags+0x44/0x940 [ 2225.501212][ T5419] ? kasan_save_track+0x51/0x80 [ 2225.501240][ T5419] ? kasan_save_track+0x3f/0x80 [ 2225.501266][ T5419] ? kasan_save_free_info+0x40/0x50 [ 2225.501289][ T5419] ? __kasan_slab_free+0x59/0x70 [ 2225.501319][ T5419] ? __pfx_rtnl_newlink+0x10/0x10 [ 2225.501343][ T5419] ? __netlink_deliver_tap+0x561/0x7f0 [ 2225.501368][ T5419] ? netlink_deliver_tap+0x19d/0x1b0 [ 2225.501392][ T5419] ? netlink_unicast+0x7c6/0x9a0 [ 2225.501411][ T5419] ? netlink_sendmsg+0x8c3/0xcd0 [ 2225.501435][ T5419] ? __sock_sendmsg+0x221/0x270 [ 2225.501457][ T5419] ? ____sys_sendmsg+0x523/0x860 [ 2225.501487][ T5419] ? __sys_sendmsg+0x271/0x360 [ 2225.501515][ T5419] ? __do_fast_syscall_32+0xb4/0x110 [ 2225.501537][ T5419] ? do_fast_syscall_32+0x34/0x80 [ 2225.501558][ T5419] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2225.501620][ T5419] ? kasan_quarantine_put+0xdc/0x230 [ 2225.501647][ T5419] ? lockdep_hardirqs_on+0x9d/0x150 [ 2225.501672][ T5419] ? nlmon_xmit+0xaf/0x100 [ 2225.501717][ T5419] ? __local_bh_enable_ip+0x168/0x200 [ 2225.501747][ T5419] ? lockdep_hardirqs_on+0x9d/0x150 [ 2225.501777][ T5419] ? aa_get_newest_label+0x101/0x6f0 [ 2225.501812][ T5419] ? __lock_acquire+0xad5/0xd80 [ 2225.501864][ T5419] ? __pfx_rtnl_newlink+0x10/0x10 [ 2225.501893][ T5419] rtnetlink_rcv_msg+0x80f/0xd70 [ 2225.501918][ T5419] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 2225.501949][ T5419] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2225.501984][ T5419] ? ref_tracker_free+0x63e/0x7e0 [ 2225.502013][ T5419] netlink_rcv_skb+0x208/0x480 [ 2225.502040][ T5419] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2225.502069][ T5419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2225.502113][ T5419] ? netlink_deliver_tap+0x2e/0x1b0 [ 2225.502143][ T5419] ? netlink_deliver_tap+0x2e/0x1b0 [ 2225.502171][ T5419] netlink_unicast+0x7f8/0x9a0 [ 2225.502204][ T5419] ? __pfx_netlink_unicast+0x10/0x10 [ 2225.502229][ T5419] ? skb_put+0x114/0x1f0 [ 2225.502264][ T5419] netlink_sendmsg+0x8c3/0xcd0 [ 2225.502304][ T5419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2225.502336][ T5419] ? aa_sock_msg_perm+0x91/0x160 [ 2225.502369][ T5419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2225.502392][ T5419] __sock_sendmsg+0x221/0x270 [ 2225.502422][ T5419] ____sys_sendmsg+0x523/0x860 [ 2225.502454][ T5419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2225.502489][ T5419] __sys_sendmsg+0x271/0x360 [ 2225.502517][ T5419] ? __pfx___sys_sendmsg+0x10/0x10 [ 2225.502576][ T5419] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2225.502592][ T5419] ? lockdep_hardirqs_on+0x9d/0x150 [ 2225.502609][ T5419] __do_fast_syscall_32+0xb4/0x110 [ 2225.502625][ T5419] ? exc_page_fault+0x5f8/0x920 [ 2225.502643][ T5419] do_fast_syscall_32+0x34/0x80 [ 2225.502660][ T5419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2225.502679][ T5419] RIP: 0023:0xf7f14539 [ 2225.502699][ T5419] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2225.502712][ T5419] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2225.502729][ T5419] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2225.502740][ T5419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2225.502749][ T5419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2225.502758][ T5419] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2225.502767][ T5419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2225.502788][ T5419] [ 2226.459410][T31626] usb 6-1: USB disconnect, device number 30 [ 2226.511528][ T5436] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8882'. [ 2226.530225][ T5436] vlan0: entered promiscuous mode [ 2227.003819][ T5445] netlink: 'syz.1.8883': attribute type 39 has an invalid length. [ 2227.306648][T29210] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2227.467251][T29210] usb 2-1: Using ep0 maxpacket: 16 [ 2227.484563][T29210] usb 2-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 2227.517027][T29210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2227.561409][T29210] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2227.591252][T29210] usb 2-1: New USB device found, idVendor=0d57, idProduct=e999, bcdDevice=a7.63 [ 2227.613573][T29210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.627486][T29210] usb 2-1: Product: syz [ 2227.633050][T29210] usb 2-1: Manufacturer: syz [ 2227.638378][T29210] usb 2-1: SerialNumber: syz [ 2227.648669][T29210] usb 2-1: config 0 descriptor?? [ 2227.845466][T31633] usb 1-1: USB disconnect, device number 88 [ 2227.856343][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.887099][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2227.915975][T29210] usb 2-1: USB disconnect, device number 55 [ 2228.040343][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8889'. [ 2228.082896][ T5462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8891'. [ 2228.200205][ T5467] tun0: tun_chr_ioctl cmd 1074025675 [ 2228.205769][ T5467] tun0: persist enabled [ 2228.211365][ T5467] tun0: tun_chr_ioctl cmd 1074025675 [ 2228.217392][ T5467] tun0: persist enabled [ 2228.341805][ T5473] openvswitch: netlink: Missing key (keys=40, expected=80) [ 2228.406709][T29210] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 2228.594474][T29210] usb 1-1: config 0 has no interfaces? [ 2228.638741][T29210] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2228.656202][T29210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.674634][T29210] usb 1-1: Product: syz [ 2228.681080][T29210] usb 1-1: Manufacturer: syz [ 2228.685838][T29210] usb 1-1: SerialNumber: syz [ 2228.704207][T29210] usb 1-1: config 0 descriptor?? [ 2228.876931][T31632] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 2229.058789][T31632] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 2229.073356][T31632] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.085447][T31632] usb 2-1: config 0 has no interface number 0 [ 2229.092491][T31632] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 2229.103862][T31632] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2229.113746][T31632] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2229.127166][T31632] usb 2-1: config 0 interface 52 has no altsetting 0 [ 2229.136023][T31632] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 2229.145598][T31632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 2229.153844][T31632] usb 2-1: SerialNumber: syz [ 2229.161304][T31632] usb 2-1: config 0 descriptor?? [ 2229.378045][T31632] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 2229.397578][T31632] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 2229.574132][T31633] usb 2-1: USB disconnect, device number 56 [ 2229.654492][ T5484] IPVS: length: 123 != 8 [ 2230.027683][ T5493] gretap0: left allmulticast mode [ 2230.033721][ T5493] netlink: 136 bytes leftover after parsing attributes in process `syz.6.8904'. [ 2230.043438][ T5493] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2230.459166][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8908'. [ 2230.546958][T31633] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 2230.709628][T31633] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 2230.722933][T31633] usb 2-1: config 0 has no interface number 0 [ 2230.733847][T31633] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 2230.743590][T31633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.752368][T31633] usb 2-1: Product: syz [ 2230.757060][T31633] usb 2-1: Manufacturer: syz [ 2230.761707][T31633] usb 2-1: SerialNumber: syz [ 2230.770027][T31633] usb 2-1: config 0 descriptor?? [ 2230.983622][T31633] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 2230.996454][T31633] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2231.005960][T31633] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 2231.015011][T31633] usb 2-1: media controller created [ 2231.023989][T31633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2231.068380][T31633] DVB: Unable to find symbol dib7000p_attach() [ 2231.074794][T31633] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 2231.083814][T31633] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2231.101312][T31633] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 2231.115525][T31633] usb 2-1: media controller created [ 2231.134415][T31633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2231.158519][T31633] dib0700: the master dib7090 has to be initialized first [ 2231.159467][ T1563] usb 1-1: USB disconnect, device number 89 [ 2231.166200][T31633] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 2231.412986][T31633] rc_core: IR keymap rc-dib0700-rc5 not found [ 2231.433915][T31633] Registered IR keymap rc-empty [ 2231.443200][T31633] dvb-usb: could not initialize remote control. [ 2231.486744][T31633] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 2231.523715][T31633] usb 2-1: USB disconnect, device number 57 [ 2231.555208][T31633] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 2231.916170][ T5529] batadv1: entered allmulticast mode [ 2231.923118][ T5529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2231.931828][ T5529] bridge0: port 3(batadv1) entered blocking state [ 2231.940959][ T5529] bridge0: port 3(batadv1) entered disabled state [ 2231.950196][ T5529] batadv1: entered promiscuous mode [ 2231.955989][ T5529] bridge0: port 3(batadv1) entered blocking state [ 2231.962660][ T5529] bridge0: port 3(batadv1) entered forwarding state [ 2231.970638][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8918'. [ 2232.120934][T29210] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2232.277003][T29210] usb 1-1: Using ep0 maxpacket: 8 [ 2232.287080][T29210] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2232.296230][T29210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.317363][T29210] usb 1-1: Product: syz [ 2232.321795][T29210] usb 1-1: Manufacturer: syz [ 2232.326423][T29210] usb 1-1: SerialNumber: syz [ 2232.339508][T29688] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 2232.349227][T29210] usb 1-1: config 0 descriptor?? [ 2232.362952][T29210] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2232.375185][ T5546] FAULT_INJECTION: forcing a failure. [ 2232.375185][ T5546] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.388597][ T5546] CPU: 0 UID: 0 PID: 5546 Comm: syz.5.8923 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2232.388626][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2232.388641][ T5546] Call Trace: [ 2232.388649][ T5546] [ 2232.388659][ T5546] dump_stack_lvl+0x241/0x360 [ 2232.388698][ T5546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2232.388730][ T5546] ? __pfx__printk+0x10/0x10 [ 2232.388765][ T5546] ? __pfx___might_resched+0x10/0x10 [ 2232.388793][ T5546] should_fail_ex+0x424/0x570 [ 2232.388831][ T5546] should_failslab+0xac/0x100 [ 2232.388855][ T5546] __kvmalloc_node_noprof+0x170/0x5a0 [ 2232.388879][ T5546] ? alloc_netdev_mqs+0xac6/0x1210 [ 2232.388921][ T5546] alloc_netdev_mqs+0xac6/0x1210 [ 2232.388951][ T5546] rtnl_create_link+0x2f9/0xc90 [ 2232.388981][ T5546] rtnl_newlink_create+0x2f2/0xcb0 [ 2232.389012][ T5546] ? __mutex_lock+0x380/0x10c0 [ 2232.389037][ T5546] ? __pfx_aa_get_newest_label+0x10/0x10 [ 2232.389068][ T5546] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2232.389120][ T5546] ? __pfx___mutex_lock+0x10/0x10 [ 2232.389157][ T5546] ? ns_capable+0x8a/0xf0 [ 2232.389181][ T5546] rtnl_newlink+0x18b0/0x1fe0 [ 2232.389219][ T5546] ? stack_depot_save_flags+0x44/0x940 [ 2232.389267][ T5546] ? __pfx_rtnl_newlink+0x10/0x10 [ 2232.389293][ T5546] ? __netlink_deliver_tap+0x561/0x7f0 [ 2232.389319][ T5546] ? netlink_deliver_tap+0x19d/0x1b0 [ 2232.389343][ T5546] ? netlink_unicast+0x7c6/0x9a0 [ 2232.389363][ T5546] ? netlink_sendmsg+0x8c3/0xcd0 [ 2232.389388][ T5546] ? __sock_sendmsg+0x221/0x270 [ 2232.389412][ T5546] ? ____sys_sendmsg+0x523/0x860 [ 2232.389442][ T5546] ? __sys_sendmsg+0x271/0x360 [ 2232.389472][ T5546] ? __do_fast_syscall_32+0xb4/0x110 [ 2232.389494][ T5546] ? do_fast_syscall_32+0x34/0x80 [ 2232.389515][ T5546] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2232.389580][ T5546] ? kasan_quarantine_put+0xdc/0x230 [ 2232.389607][ T5546] ? lockdep_hardirqs_on+0x9d/0x150 [ 2232.389632][ T5546] ? nlmon_xmit+0xaf/0x100 [ 2232.389669][ T5546] ? __local_bh_enable_ip+0x168/0x200 [ 2232.389700][ T5546] ? lockdep_hardirqs_on+0x9d/0x150 [ 2232.389731][ T5546] ? aa_get_newest_label+0x101/0x6f0 [ 2232.389765][ T5546] ? __lock_acquire+0xad5/0xd80 [ 2232.389819][ T5546] ? __pfx_rtnl_newlink+0x10/0x10 [ 2232.389848][ T5546] rtnetlink_rcv_msg+0x80f/0xd70 [ 2232.389874][ T5546] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 2232.389906][ T5546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2232.389942][ T5546] ? ref_tracker_free+0x63e/0x7e0 [ 2232.389970][ T5546] netlink_rcv_skb+0x208/0x480 [ 2232.390000][ T5546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2232.390029][ T5546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2232.390076][ T5546] ? netlink_deliver_tap+0x2e/0x1b0 [ 2232.390105][ T5546] ? netlink_deliver_tap+0x2e/0x1b0 [ 2232.390139][ T5546] netlink_unicast+0x7f8/0x9a0 [ 2232.390172][ T5546] ? __pfx_netlink_unicast+0x10/0x10 [ 2232.390198][ T5546] ? skb_put+0x114/0x1f0 [ 2232.390240][ T5546] netlink_sendmsg+0x8c3/0xcd0 [ 2232.390280][ T5546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2232.390313][ T5546] ? aa_sock_msg_perm+0x91/0x160 [ 2232.390359][ T5546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2232.390383][ T5546] __sock_sendmsg+0x221/0x270 [ 2232.390412][ T5546] ____sys_sendmsg+0x523/0x860 [ 2232.390454][ T5546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2232.390502][ T5546] __sys_sendmsg+0x271/0x360 [ 2232.390539][ T5546] ? __pfx___sys_sendmsg+0x10/0x10 [ 2232.390625][ T5546] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2232.390647][ T5546] ? lockdep_hardirqs_on+0x9d/0x150 [ 2232.390671][ T5546] __do_fast_syscall_32+0xb4/0x110 [ 2232.390693][ T5546] ? exc_page_fault+0x5f8/0x920 [ 2232.390720][ T5546] do_fast_syscall_32+0x34/0x80 [ 2232.390742][ T5546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2232.390767][ T5546] RIP: 0023:0xf70ed539 [ 2232.390785][ T5546] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2232.390803][ T5546] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2232.390824][ T5546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2232.390840][ T5546] RDX: 0000000004000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2232.390853][ T5546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2232.390865][ T5546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2232.390878][ T5546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2232.390908][ T5546] [ 2232.841116][ T3001] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 2232.850661][ T3001] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 2232.951217][T29688] usb 2-1: config 0 has no interfaces? [ 2232.959254][T29688] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2232.968773][T29688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.977086][T29688] usb 2-1: Product: syz [ 2232.981371][T29688] usb 2-1: Manufacturer: syz [ 2232.985992][T29688] usb 2-1: SerialNumber: syz [ 2232.994169][T29688] usb 2-1: config 0 descriptor?? [ 2234.879085][ T5569] sctp: [Deprecated]: syz.6.8928 (pid 5569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2234.879085][ T5569] Use struct sctp_sack_info instead [ 2235.040868][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.067352][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.195375][T31633] usb 2-1: USB disconnect, device number 58 [ 2235.250188][T29210] gspca_sonixj: reg_w1 err -71 [ 2235.297923][T29210] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 2235.314978][T29210] usb 1-1: USB disconnect, device number 90 [ 2235.333411][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8931'. [ 2235.576512][ T5582] openvswitch: netlink: Key type 257 is out of range max 32 [ 2235.584944][ T5580] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8930'. [ 2235.636691][ T1563] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2236.326714][ T1563] usb 2-1: Using ep0 maxpacket: 8 [ 2236.366691][ T1563] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2236.398162][ T1563] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 2236.420730][ T1563] usb 2-1: config 0 has no interface number 0 [ 2236.441588][ T1563] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2236.476771][ T1563] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2236.487013][ T1563] usb 2-1: config 0 interface 88 has no altsetting 0 [ 2236.501140][ T1563] usb 2-1: language id specifier not provided by device, defaulting to English [ 2236.518659][ T1563] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 2236.534596][ T1563] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 2236.543257][ T1563] usb 2-1: Product: syz [ 2236.547816][ T1563] usb 2-1: SerialNumber: syz [ 2236.556305][ T1563] usb 2-1: config 0 descriptor?? [ 2236.790679][ T1563] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input100 [ 2236.994147][ T1563] usb 2-1: USB disconnect, device number 59 [ 2238.231639][ T5606] tipc: Started in network mode [ 2238.246074][ T5606] tipc: Node identity 4, cluster identity 4711 [ 2238.272491][ T5606] tipc: Node number set to 4 [ 2238.664405][ T5614] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 2238.776739][T31633] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 2239.091257][T31633] usb 1-1: config 0 has no interfaces? [ 2239.175768][T31633] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2239.202256][T31633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.223075][T31633] usb 1-1: Product: syz [ 2239.252384][T31633] usb 1-1: Manufacturer: syz [ 2239.286583][T31633] usb 1-1: SerialNumber: syz [ 2239.393811][T31633] usb 1-1: config 0 descriptor?? [ 2240.137639][ T5636] fuse: Bad value for 'group_id' [ 2240.143842][ T5636] fuse: Bad value for 'group_id' [ 2240.183276][ T5636] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8949'. [ 2241.073752][ T5643] netlink: 'syz.5.8951': attribute type 9 has an invalid length. [ 2241.142661][ T5643] netlink: 'syz.5.8951': attribute type 7 has an invalid length. [ 2241.183526][ T5643] netlink: 'syz.5.8951': attribute type 8 has an invalid length. [ 2242.948253][T31633] usb 1-1: USB disconnect, device number 91 [ 2243.178041][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8960'. [ 2243.184749][ T5680] netlink: 'syz.1.8962': attribute type 10 has an invalid length. [ 2243.261348][ T5680] bridge0: port 3(batadv1) entered disabled state [ 2243.268151][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 2243.276010][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 2243.330294][ T30] audit: type=1326 audit(1745522359.615:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.351645][ T5684] netlink: 'syz.1.8962': attribute type 10 has an invalid length. [ 2243.363542][ T5681] tipc: Enabling of bearer rejected, failed to enable media [ 2243.397873][ T5685] syzkaller1: entered promiscuous mode [ 2243.407862][ T5685] syzkaller1: entered allmulticast mode [ 2243.431225][ T30] audit: type=1326 audit(1745522359.615:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.474581][ T30] audit: type=1326 audit(1745522359.615:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.496643][ C0] vkms_vblank_simulate: vblank timer overrun [ 2243.556075][ T30] audit: type=1326 audit(1745522359.615:8702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.740703][ T30] audit: type=1326 audit(1745522359.615:8703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.782643][ T30] audit: type=1326 audit(1745522359.615:8704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.814821][ T30] audit: type=1326 audit(1745522359.615:8705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.842516][ T30] audit: type=1326 audit(1745522359.615:8706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.864549][ C0] vkms_vblank_simulate: vblank timer overrun [ 2243.876648][ T30] audit: type=1326 audit(1745522359.755:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.898658][ C0] vkms_vblank_simulate: vblank timer overrun [ 2243.905999][ T30] audit: type=1326 audit(1745522359.755:8708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.1.8962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000 [ 2243.931736][ T5691] netem: incorrect ge model size [ 2243.937471][ T5691] netem: change failed [ 2244.202045][ T5697] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2244.882356][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8967'. [ 2244.980390][ T53] bridge_slave_1: left allmulticast mode [ 2244.986067][ T53] bridge_slave_1: left promiscuous mode [ 2245.073505][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 2245.107180][T29210] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2245.157273][ T53] bridge_slave_0: left allmulticast mode [ 2245.185494][ T53] bridge_slave_0: left promiscuous mode [ 2245.226744][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 2245.308987][T29210] usb 2-1: config 0 has no interfaces? [ 2245.328213][T29210] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2245.349380][T29210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.368331][T29210] usb 2-1: Product: syz [ 2245.382882][T29210] usb 2-1: Manufacturer: syz [ 2245.389119][T29210] usb 2-1: SerialNumber: syz [ 2245.433189][T29210] usb 2-1: config 0 descriptor?? [ 2246.430385][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2246.439900][ T53] bond_slave_0: left promiscuous mode [ 2246.447533][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2246.457009][ T53] bond_slave_1: left promiscuous mode [ 2246.464816][ T53] bond0 (unregistering): (slave team0): Releasing backup interface [ 2246.473461][ T53] team0: left promiscuous mode [ 2246.478425][ T53] team_slave_0: left promiscuous mode [ 2246.483986][ T53] team_slave_1: left promiscuous mode [ 2246.494846][ T53] bond0 (unregistering): Released all slaves [ 2246.640975][ T53] bond1 (unregistering): Released all slaves [ 2246.659572][ T53] bond2 (unregistering): (slave batadv1): Releasing active interface [ 2246.667844][ T53] batadv1: left promiscuous mode [ 2246.677326][ T53] bond2 (unregistering): Released all slaves [ 2247.120291][ T5717] netem: incorrect ge model size [ 2247.128286][ T53] : left promiscuous mode [ 2247.226750][ T53] tipc: Left network mode [ 2247.720477][ T53] hsr_slave_0: left promiscuous mode [ 2247.732658][ T53] hsr_slave_1: left promiscuous mode [ 2247.744953][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2247.755986][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2247.778693][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2247.788143][ T53] veth1_to_batadv: left promiscuous mode [ 2248.228822][T29210] usb 2-1: USB disconnect, device number 60 [ 2249.074577][ T53] team0 (unregistering): Port device team_slave_1 removed [ 2249.270043][ T53] team0 (unregistering): Port device team_slave_0 removed [ 2250.414316][ T5774] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8991'. [ 2250.425072][ T5774] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2250.519135][T20164] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2250.578558][ T5780] FAULT_INJECTION: forcing a failure. [ 2250.578558][ T5780] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.593750][ T5780] CPU: 0 UID: 0 PID: 5780 Comm: syz.1.8992 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2250.593782][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2250.593796][ T5780] Call Trace: [ 2250.593805][ T5780] [ 2250.593814][ T5780] dump_stack_lvl+0x241/0x360 [ 2250.593852][ T5780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2250.593883][ T5780] ? __pfx__printk+0x10/0x10 [ 2250.593918][ T5780] ? __pfx___might_resched+0x10/0x10 [ 2250.593944][ T5780] should_fail_ex+0x424/0x570 [ 2250.593982][ T5780] should_failslab+0xac/0x100 [ 2250.594007][ T5780] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 2250.594031][ T5780] ? __alloc_skb+0x1c2/0x480 [ 2250.594064][ T5780] __alloc_skb+0x1c2/0x480 [ 2250.594095][ T5780] ? dev_mc_del+0xca/0x110 [ 2250.594117][ T5780] ? __pfx___alloc_skb+0x10/0x10 [ 2250.594147][ T5780] ? debug_object_assert_init+0x30e/0x4d0 [ 2250.594185][ T5780] inet_ifmcaddr_notify+0xf5/0x200 [ 2250.594214][ T5780] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 2250.594255][ T5780] __ip_mc_dec_group+0x41c/0x700 [ 2250.594285][ T5780] inetdev_event+0x2f2/0x1740 [ 2250.594321][ T5780] ? __pfx_inetdev_event+0x10/0x10 [ 2250.594351][ T5780] ? cfg802154_netdev_notifier_call+0xde/0x910 [ 2250.594391][ T5780] notifier_call_chain+0x1a5/0x3f0 [ 2250.594420][ T5780] __dev_notify_flags+0x209/0x410 [ 2250.594457][ T5780] ? __pfx___dev_notify_flags+0x10/0x10 [ 2250.594486][ T5780] ? __dev_change_flags+0x517/0x700 [ 2250.594522][ T5780] ? __pfx___dev_change_flags+0x10/0x10 [ 2250.594550][ T5780] ? validate_linkmsg+0x82a/0xa40 [ 2250.594579][ T5780] ? __pfx_validate_linkmsg+0x10/0x10 [ 2250.594604][ T5780] netif_change_flags+0xf0/0x1a0 [ 2250.594649][ T5780] do_setlink+0xee3/0x4390 [ 2250.594689][ T5780] ? stack_trace_save+0x11a/0x1d0 [ 2250.594718][ T5780] ? __lock_acquire+0xad5/0xd80 [ 2250.594751][ T5780] ? do_raw_spin_lock+0x151/0x370 [ 2250.594775][ T5780] ? __pfx_do_setlink+0x10/0x10 [ 2250.594817][ T5780] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 2250.594847][ T5780] ? lockdep_hardirqs_on+0x9d/0x150 [ 2250.594870][ T5780] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 2250.594902][ T5780] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2250.594939][ T5780] ? rcu_is_watching+0x15/0xb0 [ 2250.594965][ T5780] ? __mutex_lock+0xbe3/0x10c0 [ 2250.594994][ T5780] ? __mutex_lock+0x5f3/0x10c0 [ 2250.595020][ T5780] ? rtnl_newlink+0xd68/0x1fe0 [ 2250.595047][ T5780] ? __pfx___mutex_lock+0x10/0x10 [ 2250.595080][ T5780] ? ns_capable+0x8a/0xf0 [ 2250.595102][ T5780] ? rtnl_link_get_net_capable+0x168/0x340 [ 2250.595136][ T5780] rtnl_newlink+0x17e2/0x1fe0 [ 2250.595162][ T5780] ? stack_depot_save_flags+0x44/0x940 [ 2250.595209][ T5780] ? __pfx_rtnl_newlink+0x10/0x10 [ 2250.595234][ T5780] ? __netlink_deliver_tap+0x561/0x7f0 [ 2250.595259][ T5780] ? netlink_deliver_tap+0x19d/0x1b0 [ 2250.595283][ T5780] ? netlink_unicast+0x7c6/0x9a0 [ 2250.595303][ T5780] ? netlink_sendmsg+0x8c3/0xcd0 [ 2250.595327][ T5780] ? __sock_sendmsg+0x221/0x270 [ 2250.595350][ T5780] ? ____sys_sendmsg+0x523/0x860 [ 2250.595379][ T5780] ? __sys_sendmsg+0x271/0x360 [ 2250.595408][ T5780] ? __do_fast_syscall_32+0xb4/0x110 [ 2250.595430][ T5780] ? do_fast_syscall_32+0x34/0x80 [ 2250.595451][ T5780] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2250.595514][ T5780] ? kasan_quarantine_put+0xdc/0x230 [ 2250.595542][ T5780] ? lockdep_hardirqs_on+0x9d/0x150 [ 2250.595567][ T5780] ? nlmon_xmit+0xaf/0x100 [ 2250.595604][ T5780] ? __local_bh_enable_ip+0x168/0x200 [ 2250.595645][ T5780] ? lockdep_hardirqs_on+0x9d/0x150 [ 2250.595675][ T5780] ? aa_get_newest_label+0x101/0x6f0 [ 2250.595709][ T5780] ? __lock_acquire+0xad5/0xd80 [ 2250.595765][ T5780] ? __pfx_rtnl_newlink+0x10/0x10 [ 2250.595794][ T5780] rtnetlink_rcv_msg+0x80f/0xd70 [ 2250.595820][ T5780] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 2250.595852][ T5780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2250.595887][ T5780] ? ref_tracker_free+0x63e/0x7e0 [ 2250.595916][ T5780] netlink_rcv_skb+0x208/0x480 [ 2250.595944][ T5780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2250.595973][ T5780] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2250.596019][ T5780] ? netlink_deliver_tap+0x2e/0x1b0 [ 2250.596049][ T5780] ? netlink_deliver_tap+0x2e/0x1b0 [ 2250.596078][ T5780] netlink_unicast+0x7f8/0x9a0 [ 2250.596111][ T5780] ? __pfx_netlink_unicast+0x10/0x10 [ 2250.596137][ T5780] ? skb_put+0x114/0x1f0 [ 2250.596173][ T5780] netlink_sendmsg+0x8c3/0xcd0 [ 2250.596213][ T5780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.596245][ T5780] ? aa_sock_msg_perm+0x91/0x160 [ 2250.596279][ T5780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.596304][ T5780] __sock_sendmsg+0x221/0x270 [ 2250.596333][ T5780] ____sys_sendmsg+0x523/0x860 [ 2250.596375][ T5780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2250.596427][ T5780] __sys_sendmsg+0x271/0x360 [ 2250.596465][ T5780] ? __pfx___sys_sendmsg+0x10/0x10 [ 2250.596551][ T5780] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2250.596575][ T5780] ? lockdep_hardirqs_on+0x9d/0x150 [ 2250.596600][ T5780] __do_fast_syscall_32+0xb4/0x110 [ 2250.596629][ T5780] ? exc_page_fault+0x5f8/0x920 [ 2250.596655][ T5780] do_fast_syscall_32+0x34/0x80 [ 2250.596678][ T5780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2250.596704][ T5780] RIP: 0023:0xf7f14539 [ 2250.596722][ T5780] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2250.596742][ T5780] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2250.596765][ T5780] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000040 [ 2250.596780][ T5780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2250.596793][ T5780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2250.596805][ T5780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2250.596818][ T5780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2250.596849][ T5780] [ 2251.159099][ C0] vkms_vblank_simulate: vblank timer overrun [ 2251.209699][ T5780] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8992'. [ 2251.219138][ T5780] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 2251.246352][ T5782] hsr0: left allmulticast mode [ 2251.256936][T20164] usb 1-1: Using ep0 maxpacket: 16 [ 2251.266226][T20164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2251.277960][T20164] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 2251.287139][T20164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.309908][T20164] usb 1-1: config 0 descriptor?? [ 2251.701810][ T5800] netlink: 136 bytes leftover after parsing attributes in process `syz.4.9000'. [ 2251.711370][ T5800] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 2251.730552][T20164] apple 0003:05AC:024B.0055: item fetching failed at offset 2/69 [ 2251.739271][T20164] apple 0003:05AC:024B.0055: parse failed [ 2251.745155][T20164] apple 0003:05AC:024B.0055: probe with driver apple failed with error -22 [ 2251.833343][ T5804] fuse: Unknown parameter 'ft' [ 2251.856636][ T1563] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2251.942021][T29210] usb 1-1: USB disconnect, device number 92 [ 2252.039132][ T1563] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 2252.047887][ T1563] usb 2-1: config 0 has no interface number 0 [ 2252.054025][ T1563] usb 2-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2252.068666][ T1563] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 2252.083811][ T1563] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.094360][ T1563] usb 2-1: Product: syz [ 2252.104160][ T1563] usb 2-1: Manufacturer: syz [ 2252.111158][ T1563] usb 2-1: SerialNumber: syz [ 2252.125254][ T1563] usb 2-1: config 0 descriptor?? [ 2252.139465][ T1563] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 2252.146115][ T1563] usb 2-1: No valid video chain found. [ 2252.351996][ T1563] usb 2-1: USB disconnect, device number 61 [ 2252.813157][ T5820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2253.505971][ T5832] netlink: 'syz.5.9011': attribute type 5 has an invalid length. [ 2253.857042][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9013'. [ 2254.044873][ T5842] FAULT_INJECTION: forcing a failure. [ 2254.044873][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 2254.071710][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz.5.9014 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2254.071744][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2254.071759][ T5842] Call Trace: [ 2254.071768][ T5842] [ 2254.071778][ T5842] dump_stack_lvl+0x241/0x360 [ 2254.071817][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2254.071848][ T5842] ? __pfx__printk+0x10/0x10 [ 2254.071874][ T5842] ? __lock_acquire+0xad5/0xd80 [ 2254.071907][ T5842] ? do_raw_spin_lock+0x151/0x370 [ 2254.071939][ T5842] should_fail_ex+0x424/0x570 [ 2254.071977][ T5842] should_failslab+0xac/0x100 [ 2254.072002][ T5842] __kmalloc_cache_noprof+0x73/0x370 [ 2254.072024][ T5842] ? __io_queue_proc+0x273/0x540 [ 2254.072057][ T5842] __io_queue_proc+0x273/0x540 [ 2254.072085][ T5842] ? __pfx_io_async_queue_proc+0x10/0x10 [ 2254.072115][ T5842] snd_pcm_oss_poll+0x4ed/0x940 [ 2254.072149][ T5842] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 2254.072183][ T5842] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 2254.072210][ T5842] __io_arm_poll_handler+0x34b/0x9d0 [ 2254.072251][ T5842] io_arm_poll_handler+0x778/0xc80 [ 2254.072288][ T5842] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 2254.072314][ T5842] ? __pfx_io_async_queue_proc+0x10/0x10 [ 2254.072353][ T5842] ? __pfx_io_import_rw_buffer+0x10/0x10 [ 2254.072377][ T5842] ? __pfx_io_issue_sqe+0x10/0x10 [ 2254.072413][ T5842] io_queue_async+0xa4/0x4e0 [ 2254.072441][ T5842] io_submit_sqes+0xdfc/0x1ce0 [ 2254.072507][ T5842] __se_sys_io_uring_enter+0x2cd/0x34d0 [ 2254.072548][ T5842] ? rcu_read_lock_any_held+0xbb/0x160 [ 2254.072571][ T5842] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2254.072599][ T5842] ? vfs_write+0xb29/0xd10 [ 2254.072638][ T5842] ? ksys_write+0x24e/0x2d0 [ 2254.072674][ T5842] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2254.072714][ T5842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2254.072737][ T5842] ? __fget_files+0x2a/0x420 [ 2254.072761][ T5842] ? __fget_files+0x2a/0x420 [ 2254.072787][ T5842] ? fput+0x9b/0xd0 [ 2254.072809][ T5842] ? ksys_write+0x275/0x2d0 [ 2254.072848][ T5842] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2254.072871][ T5842] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2254.072908][ T5842] __do_fast_syscall_32+0xb4/0x110 [ 2254.072932][ T5842] ? exc_page_fault+0x5f8/0x920 [ 2254.072959][ T5842] do_fast_syscall_32+0x34/0x80 [ 2254.072983][ T5842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2254.073009][ T5842] RIP: 0023:0xf70ed539 [ 2254.073029][ T5842] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2254.073048][ T5842] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2254.073071][ T5842] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000048e9 [ 2254.073086][ T5842] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 2254.073099][ T5842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2254.073112][ T5842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2254.073125][ T5842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2254.073156][ T5842] [ 2254.478345][ T5842] "syz.5.9014" (5842) uses obsolete ecb(arc4) skcipher [ 2254.707008][T20164] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2254.866838][T20164] usb 1-1: Using ep0 maxpacket: 16 [ 2254.873645][T20164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2254.873685][T20164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 2254.873714][T20164] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2254.873758][T20164] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 2254.873783][T20164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.876992][T20164] usb 1-1: config 0 descriptor?? [ 2255.156740][ T5846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9016'. [ 2255.257943][T27536] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2255.419348][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2255.419648][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2255.538363][T27536] usb 2-1: Using ep0 maxpacket: 32 [ 2255.556132][T27536] usb 2-1: no configurations [ 2255.565054][T27536] usb 2-1: can't read configurations, error -22 [ 2255.627751][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9021'. [ 2255.736999][T27536] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2255.906645][T27536] usb 2-1: Using ep0 maxpacket: 32 [ 2255.913289][T27536] usb 2-1: no configurations [ 2255.918159][T27536] usb 2-1: can't read configurations, error -22 [ 2255.928445][T27536] usb usb2-port1: attempt power cycle [ 2256.326885][T27536] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2256.353865][T20164] usbhid 1-1:0.0: can't add hid device: -71 [ 2256.360814][T20164] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2256.387484][T27536] usb 2-1: Using ep0 maxpacket: 32 [ 2256.393482][T27536] usb 2-1: no configurations [ 2256.406905][T20164] usb 1-1: USB disconnect, device number 93 [ 2256.467142][T27536] usb 2-1: can't read configurations, error -22 [ 2256.686765][T27536] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2256.707371][T27536] usb 2-1: Using ep0 maxpacket: 32 [ 2256.715590][T27536] usb 2-1: no configurations [ 2256.732368][T27536] usb 2-1: can't read configurations, error -22 [ 2256.744787][T27536] usb usb2-port1: unable to enumerate USB device [ 2257.412721][ T5879] Invalid logical block size (3328) [ 2257.649886][ T5883] netlink: 'syz.0.9026': attribute type 2 has an invalid length. [ 2257.710566][ T5883] : entered promiscuous mode [ 2258.121083][T21545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2258.139474][T21545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2258.232774][T21545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2258.240985][T21545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2258.248974][T21545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2258.742521][ T754] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.753306][ T1563] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2258.949166][ T1563] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2258.964468][ T1563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.980091][ T1563] usb 1-1: config 0 descriptor?? [ 2258.989372][ T1563] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2259.072229][ T754] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.196350][ T1563] gspca_sunplus: reg_w_riv err -71 [ 2259.203096][ T1563] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 2259.213778][ T1563] usb 1-1: USB disconnect, device number 94 [ 2259.299031][ T754] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.431294][ T754] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.585453][ T5907] netlink: 'syz.4.9033': attribute type 5 has an invalid length. [ 2259.617727][T31626] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 2259.696230][ T5907] ip6erspan0: entered promiscuous mode [ 2259.808060][T31626] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2259.816296][T31626] usb 2-1: config 0 has no interface number 0 [ 2259.831806][ T5886] Bluetooth: hci5: command 0x0406 tx timeout [ 2259.836752][T31626] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2259.864773][T31626] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2259.902963][T31626] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2259.911015][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 2259.920786][T31626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.935137][T31626] usb 2-1: config 0 descriptor?? [ 2259.945710][ T5903] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2259.964726][T31626] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2260.132567][ T754] macsec0: left allmulticast mode [ 2260.155980][ T754] veth1_macvtap: left allmulticast mode [ 2260.183937][ T754] macsec0: left promiscuous mode [ 2260.221708][ T754] bridge0: port 1(macsec0) entered disabled state [ 2260.243700][T31626] usb 2-1: USB disconnect, device number 66 [ 2260.249843][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2260.282749][ T5914] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:19971 [ 2260.303276][ T5886] Bluetooth: hci3: command tx timeout [ 2260.645229][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9037'. [ 2261.186637][T20164] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2261.359159][T20164] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2261.370552][T20164] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2261.381317][T20164] usb 1-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2261.394893][T20164] usb 1-1: config 16 interface 0 has no altsetting 0 [ 2261.429588][T20164] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 2261.459437][T20164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.547432][ T5919] syzkaller1: entered promiscuous mode [ 2261.582977][ T5919] syzkaller1: entered allmulticast mode [ 2261.602683][ T754] tipc: Left network mode [ 2262.038007][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 2262.050487][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.068814][ T5943] FAULT_INJECTION: forcing a failure. [ 2262.068814][ T5943] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.086027][ T5891] bridge_slave_0: entered allmulticast mode [ 2262.114850][ T5891] bridge_slave_0: entered promiscuous mode [ 2262.143800][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: syz.6.9041 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2262.143833][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2262.143847][ T5943] Call Trace: [ 2262.143856][ T5943] [ 2262.143866][ T5943] dump_stack_lvl+0x241/0x360 [ 2262.143908][ T5943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2262.143939][ T5943] ? __pfx__printk+0x10/0x10 [ 2262.143973][ T5943] ? __pfx___might_resched+0x10/0x10 [ 2262.144000][ T5943] should_fail_ex+0x424/0x570 [ 2262.144037][ T5943] should_failslab+0xac/0x100 [ 2262.144062][ T5943] __kmalloc_noprof+0xdf/0x4d0 [ 2262.144084][ T5943] ? rds_info_getsockopt+0x201/0x620 [ 2262.144113][ T5943] rds_info_getsockopt+0x201/0x620 [ 2262.144145][ T5943] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 2262.144173][ T5943] ? __might_fault+0xaa/0x120 [ 2262.144202][ T5943] ? rds_getsockopt+0x31c/0x530 [ 2262.144234][ T5943] ? __pfx_rds_getsockopt+0x10/0x10 [ 2262.144267][ T5943] do_sock_getsockopt+0x391/0x740 [ 2262.144307][ T5943] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2262.144338][ T5943] ? __fget_files+0x2a/0x420 [ 2262.144360][ T5943] ? __fget_files+0x39d/0x420 [ 2262.144380][ T5943] ? __fget_files+0x2a/0x420 [ 2262.144408][ T5943] __ia32_sys_getsockopt+0x231/0x310 [ 2262.144450][ T5943] ? __pfx___ia32_sys_getsockopt+0x10/0x10 [ 2262.144488][ T5943] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2262.144512][ T5943] ? lockdep_hardirqs_on+0x9d/0x150 [ 2262.144538][ T5943] __do_fast_syscall_32+0xb4/0x110 [ 2262.144562][ T5943] ? exc_page_fault+0x5f8/0x920 [ 2262.144589][ T5943] do_fast_syscall_32+0x34/0x80 [ 2262.144614][ T5943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2262.144640][ T5943] RIP: 0023:0xf7f43539 [ 2262.144659][ T5943] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2262.144678][ T5943] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 2262.144709][ T5943] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 2262.144724][ T5943] RDX: 0000000000002718 RSI: 0000000080019440 RDI: 00000000800000c0 [ 2262.144739][ T5943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2262.144752][ T5943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2262.144766][ T5943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2262.144796][ T5943] [ 2262.386992][ T5886] Bluetooth: hci3: command tx timeout [ 2262.458101][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 2262.465708][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2262.475312][ T5891] bridge_slave_1: entered allmulticast mode [ 2262.482898][ T5891] bridge_slave_1: entered promiscuous mode [ 2262.680137][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2262.710041][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2262.815545][ T754] hsr_slave_0: left promiscuous mode [ 2262.837544][ T754] hsr_slave_1: left promiscuous mode [ 2262.888564][ T754] veth1_macvtap: left promiscuous mode [ 2262.914537][ T754] veth0_macvtap: left promiscuous mode [ 2263.908651][T20164] usb 1-1: string descriptor 0 read error: -71 [ 2263.927400][T20164] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 2263.935552][T20164] imon 1-1:16.0: unable to initialize intf0, err -19 [ 2263.984294][T20164] imon:imon_probe: failed to initialize context! [ 2264.008945][T20164] imon 1-1:16.0: unable to register, err -19 [ 2264.027719][T20164] usb 1-1: USB disconnect, device number 95 [ 2264.466597][ T5886] Bluetooth: hci3: command tx timeout [ 2264.954767][ T5958] vlan2: entered allmulticast mode [ 2264.966733][ T5958] bond0: entered allmulticast mode [ 2264.971928][ T5958] bond_slave_0: entered allmulticast mode [ 2265.005209][ T5958] bond_slave_1: entered allmulticast mode [ 2265.085409][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9050'. [ 2265.094867][ T5963] FAULT_INJECTION: forcing a failure. [ 2265.094867][ T5963] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.109020][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: syz.4.9050 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2265.109052][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2265.109066][ T5963] Call Trace: [ 2265.109075][ T5963] [ 2265.109084][ T5963] dump_stack_lvl+0x241/0x360 [ 2265.109124][ T5963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2265.109154][ T5963] ? __pfx__printk+0x10/0x10 [ 2265.109190][ T5963] ? __pfx___might_resched+0x10/0x10 [ 2265.109216][ T5963] should_fail_ex+0x424/0x570 [ 2265.109255][ T5963] should_failslab+0xac/0x100 [ 2265.109280][ T5963] __kmalloc_cache_noprof+0x73/0x370 [ 2265.109303][ T5963] ? nfnetlink_rcv+0x1037/0x28f0 [ 2265.109340][ T5963] nfnetlink_rcv+0x1037/0x28f0 [ 2265.109371][ T5963] ? __kernel_text_address+0xd/0x40 [ 2265.109442][ T5963] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2265.109493][ T5963] ? __lock_acquire+0xad5/0xd80 [ 2265.109572][ T5963] ? netlink_deliver_tap+0x2e/0x1b0 [ 2265.109603][ T5963] ? netlink_deliver_tap+0x2e/0x1b0 [ 2265.109632][ T5963] netlink_unicast+0x7f8/0x9a0 [ 2265.109666][ T5963] ? __pfx_netlink_unicast+0x10/0x10 [ 2265.109691][ T5963] ? skb_put+0x114/0x1f0 [ 2265.109727][ T5963] netlink_sendmsg+0x8c3/0xcd0 [ 2265.109768][ T5963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2265.109800][ T5963] ? aa_sock_msg_perm+0x91/0x160 [ 2265.109834][ T5963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2265.109859][ T5963] __sock_sendmsg+0x221/0x270 [ 2265.109888][ T5963] ____sys_sendmsg+0x523/0x860 [ 2265.109931][ T5963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2265.109982][ T5963] __sys_sendmsg+0x271/0x360 [ 2265.110021][ T5963] ? __pfx___sys_sendmsg+0x10/0x10 [ 2265.110109][ T5963] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2265.110133][ T5963] ? lockdep_hardirqs_on+0x9d/0x150 [ 2265.110158][ T5963] __do_fast_syscall_32+0xb4/0x110 [ 2265.110182][ T5963] ? exc_page_fault+0x5f8/0x920 [ 2265.110209][ T5963] do_fast_syscall_32+0x34/0x80 [ 2265.110233][ T5963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2265.110259][ T5963] RIP: 0023:0xf7fa5539 [ 2265.110277][ T5963] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2265.110296][ T5963] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2265.110318][ T5963] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2265.110334][ T5963] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2265.110346][ T5963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2265.110358][ T5963] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2265.110371][ T5963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2265.110408][ T5963] [ 2265.111835][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9049'. [ 2265.480698][ T5891] team0: Port device team_slave_0 added [ 2265.587902][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9051'. [ 2265.590970][ T5891] team0: Port device team_slave_1 added [ 2265.787974][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2265.794996][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.876404][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2265.924269][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2265.924294][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.924325][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2266.174309][ T5891] hsr_slave_0: entered promiscuous mode [ 2266.228065][ T5891] hsr_slave_1: entered promiscuous mode [ 2266.228805][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2266.228910][ T5891] Cannot create hsr debugfs directory [ 2266.446677][T20164] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2266.536978][ T5886] Bluetooth: hci3: command tx timeout [ 2266.560009][ T754] IPVS: stop unused estimator thread 0... [ 2266.578282][T20164] usb 2-1: device descriptor read/64, error -71 [ 2266.847863][T20164] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2267.010991][T20164] usb 2-1: device descriptor read/64, error -71 [ 2267.146970][T20164] usb usb2-port1: attempt power cycle [ 2267.491423][ T5891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2267.498534][T20164] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2267.542550][ T5891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2267.550333][T20164] usb 2-1: device descriptor read/8, error -71 [ 2267.580804][ T5891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2267.615988][ T5891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2267.806689][T20164] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2267.829839][T20164] usb 2-1: device descriptor read/8, error -71 [ 2267.917849][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2267.957087][T20164] usb usb2-port1: unable to enumerate USB device [ 2267.980906][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 2268.014923][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 2268.022216][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2268.072002][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 2268.079317][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2268.350470][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2268.461442][ T5891] veth0_vlan: entered promiscuous mode [ 2268.501057][ T5891] veth1_vlan: entered promiscuous mode [ 2268.601626][ T5891] veth0_macvtap: entered promiscuous mode [ 2268.626468][ T5891] veth1_macvtap: entered promiscuous mode [ 2268.680812][ T6026] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9060'. [ 2268.689295][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2268.737149][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.769948][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2268.822646][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2268.851839][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.881755][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2268.925060][ T5891] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.975736][ T5891] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.996110][ T5891] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.031088][ T5891] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.058020][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9062'. [ 2269.402963][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2269.437166][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2269.507509][ T5926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2269.535210][ T5926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2270.079433][T31632] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2270.110726][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9067'. [ 2270.257488][T31632] usb 2-1: config 0 has no interfaces? [ 2270.285846][T31632] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2270.325676][T31632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.367393][T31632] usb 2-1: Product: syz [ 2270.376103][T31632] usb 2-1: Manufacturer: syz [ 2270.381905][T31632] usb 2-1: SerialNumber: syz [ 2270.393856][T31632] usb 2-1: config 0 descriptor?? [ 2271.966601][T31632] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 2272.012824][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9073'. [ 2272.160413][T31632] usb 1-1: config 0 has no interfaces? [ 2272.207316][T31632] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2272.229830][T31632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.243390][T31632] usb 1-1: Product: syz [ 2272.250262][T31632] usb 1-1: Manufacturer: syz [ 2272.256111][T31632] usb 1-1: SerialNumber: syz [ 2272.267561][T31632] usb 1-1: config 0 descriptor?? [ 2272.525192][T27536] usb 1-1: USB disconnect, device number 96 [ 2272.692642][T31632] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2272.790060][T29210] usb 2-1: USB disconnect, device number 71 [ 2272.873565][T31632] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.910120][T31632] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.945807][T31632] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2272.960954][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2272.960975][ T30] audit: type=1326 audit(1745522389.245:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.1.9078" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x0 [ 2272.968423][T31632] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2273.008366][T31632] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 2273.026883][T31632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.055207][T31632] usb 6-1: config 0 descriptor?? [ 2273.183820][ T1206] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2273.197109][ T1206] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2273.205843][ T1206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2273.216062][ T1206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2273.225495][ T1206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2273.317209][ T30] audit: type=1326 audit(1745522389.605:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.9079" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x0 [ 2273.564467][T31632] cypress 0003:04B4:0001.0056: unknown main item tag 0x0 [ 2273.586338][T31632] cypress 0003:04B4:0001.0056: unknown main item tag 0x0 [ 2273.602870][T31632] cypress 0003:04B4:0001.0056: unknown main item tag 0x0 [ 2273.617024][T31632] cypress 0003:04B4:0001.0056: unknown main item tag 0x0 [ 2273.635093][T31632] cypress 0003:04B4:0001.0056: unknown main item tag 0x0 [ 2273.642746][T31632] cypress 0003:04B4:0001.0056: unknown main item tag 0x0 [ 2273.650372][T31632] cypress 0003:04B4:0001.0056: unknown main item tag 0x0 [ 2273.663845][T31632] cypress 0003:04B4:0001.0056: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.5-1/input0 [ 2273.795496][T19864] bond0: (slave netdevsim0): Releasing backup interface [ 2273.833198][ T6111] chnl_net:caif_netlink_parms(): no params data found [ 2274.050927][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 2274.070913][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 2274.105762][ T6111] bridge_slave_0: entered allmulticast mode [ 2274.114467][ T6111] bridge_slave_0: entered promiscuous mode [ 2274.123124][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 2274.133763][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 2274.148020][ T6111] bridge_slave_1: entered allmulticast mode [ 2274.156095][ T6111] bridge_slave_1: entered promiscuous mode [ 2274.335760][ T6122] fuse: Unknown parameter 'T³;Â"ÚÝ7' [ 2274.513412][ T6111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2274.653287][T19864] batadv1: left promiscuous mode [ 2274.664973][T19864] bridge0: port 1(batadv1) entered disabled state [ 2275.033131][ T6133] netlink: 1476 bytes leftover after parsing attributes in process `syz.1.9083'. [ 2275.181240][T19864] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2275.257959][ T1206] Bluetooth: hci0: command tx timeout [ 2275.265218][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9084'. [ 2275.347229][T31632] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2275.370085][T19864] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2275.487768][T29210] usb 6-1: USB disconnect, device number 31 [ 2275.542643][T31632] usb 2-1: Using ep0 maxpacket: 16 [ 2275.552680][T31632] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2275.578568][T31632] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2275.696375][ T6144] Cannot find set identified by id 0 to match [ 2276.016140][T31632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.196086][T31632] usb 2-1: config 0 descriptor?? [ 2276.209024][T31632] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input101 [ 2276.760502][T19864] bond0 (unregistering): (slave team0): Releasing backup interface [ 2276.773242][T19864] bond0 (unregistering): Released all slaves [ 2277.396732][ T1206] Bluetooth: hci0: command tx timeout [ 2277.780499][ T6159] netlink: 'syz.0.9091': attribute type 1 has an invalid length. [ 2277.814822][T19864] bond1 (unregistering): Released all slaves [ 2277.906794][T29210] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2277.988196][T19864] bond2 (unregistering): Released all slaves [ 2278.006934][ T6111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2278.062101][T29210] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2278.072994][T29210] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2278.087048][T29210] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2278.109915][T29210] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2278.133999][ T5198] bcm5974 2-1:0.0: could not read from device [ 2278.205775][ T6164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9092'. [ 2278.212280][T31632] usb 2-1: USB disconnect, device number 72 [ 2278.244882][ T6160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2278.254930][ T6160] bond1: (slave bond2): making interface the new active one [ 2278.263178][ T6160] bond1: (slave bond2): Enslaving as an active interface with an up link [ 2278.267850][ T5198] bcm5974 2-1:0.0: could not read from device [ 2278.314530][ T6111] team0: Port device team_slave_0 added [ 2278.329324][T29210] usb 6-1: string descriptor 0 read error: -22 [ 2278.351726][T29210] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2278.370648][T29210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.401285][ T5198] bcm5974 2-1:0.0: could not read from device [ 2278.441105][ T6111] team0: Port device team_slave_1 added [ 2278.495194][T19864] tipc: Disabling bearer [ 2278.553705][T19864] tipc: Left network mode [ 2278.787467][ T6181] netlink: 'syz.1.9095': attribute type 10 has an invalid length. [ 2278.870891][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2278.896677][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2278.924876][ T6111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2278.966927][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2278.982939][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2279.051506][ T6111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2279.264786][T19864] hsr_slave_0: left promiscuous mode [ 2279.281504][T19864] hsr_slave_1: left promiscuous mode [ 2279.420471][ T1206] Bluetooth: hci0: command tx timeout [ 2280.049482][T29210] cdc_ncm 6-1:1.0: bind() failure [ 2280.085987][T29210] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 2280.116733][T29210] cdc_ncm 6-1:1.1: bind() failure [ 2280.159965][T29210] usb 6-1: USB disconnect, device number 32 [ 2280.195502][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9102'. [ 2280.486632][T27536] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2280.648926][T27536] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2280.674530][T27536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2280.685546][T27536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2280.711672][T27536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 246, changing to 11 [ 2280.724390][T27536] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 2280.737855][T27536] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 2280.748616][T27536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.775523][T27536] usb 2-1: config 0 descriptor?? [ 2280.826884][T29210] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 2280.990443][T29210] usb 1-1: not running at top speed; connect to a high speed hub [ 2281.004989][T29210] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2281.024591][T29210] usb 1-1: config 1 has no interface number 1 [ 2281.031395][T29210] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2281.047775][T29210] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2281.057387][T29210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2281.065490][T29210] usb 1-1: Product: syz [ 2281.070220][T29210] usb 1-1: Manufacturer: syz [ 2281.074922][T29210] usb 1-1: SerialNumber: syz [ 2281.150532][ T6111] hsr_slave_0: entered promiscuous mode [ 2281.162285][ T6111] hsr_slave_1: entered promiscuous mode [ 2281.175053][ T6111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2281.183217][ T6111] Cannot create hsr debugfs directory [ 2281.208954][T27536] apple 0003:05AC:027A.0057: hidraw0: USB HID vff.fe Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 2281.296838][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2281.318911][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2281.397717][T29210] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 2281.415941][T27536] usb 2-1: USB disconnect, device number 73 [ 2281.435542][T29210] usb 1-1: failed to enable PITCH for EP 0x82 [ 2281.474833][T29210] usb 1-1: 2:1: cannot set freq 8525114 to ep 0x82 [ 2281.498374][ T1206] Bluetooth: hci0: command tx timeout [ 2281.583384][T29210] usb 1-1: USB disconnect, device number 97 [ 2281.731439][T27327] udevd[27327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2282.089968][T19864] IPVS: stop unused estimator thread 0... [ 2282.097145][T27536] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2282.344009][T27536] usb 6-1: Using ep0 maxpacket: 16 [ 2282.382300][T27536] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2282.418993][T27536] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2282.467556][T29210] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2282.483905][T27536] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2282.543337][T27536] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 2282.564205][T27536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.603255][T27536] usb 6-1: Product: syz [ 2282.615134][T27536] usb 6-1: Manufacturer: syz [ 2282.628993][T27536] usb 6-1: SerialNumber: syz [ 2282.636659][T29210] usb 2-1: Using ep0 maxpacket: 32 [ 2282.644537][T29210] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2282.658729][T29210] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2282.693409][T29210] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2282.751306][T29210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2282.784997][T29210] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2282.795566][T29210] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2282.815022][T29210] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2282.831693][T29210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.857530][T29210] usb 2-1: config 0 descriptor?? [ 2283.082361][T29210] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2283.136015][T29210] usb 2-1: USB disconnect, device number 74 [ 2283.150104][ T6111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2283.173313][T29210] usblp0: removed [ 2283.193691][ T6111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2283.223123][ T6111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2283.253259][ T6111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2283.311497][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.352214][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.359682][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.423523][ T6249] FAULT_INJECTION: forcing a failure. [ 2283.423523][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.437433][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2283.457158][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.0.9109 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2283.457189][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2283.457202][ T6249] Call Trace: [ 2283.457229][ T6249] [ 2283.457239][ T6249] dump_stack_lvl+0x241/0x360 [ 2283.457280][ T6249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2283.457312][ T6249] ? __pfx__printk+0x10/0x10 [ 2283.457356][ T6249] should_fail_ex+0x424/0x570 [ 2283.457396][ T6249] should_failslab+0xac/0x100 [ 2283.457423][ T6249] __kmalloc_cache_noprof+0x73/0x370 [ 2283.457447][ T6249] ? sctp_add_bind_addr+0x89/0x3a0 [ 2283.457479][ T6249] sctp_add_bind_addr+0x89/0x3a0 [ 2283.457510][ T6249] sctp_copy_local_addr_list+0x313/0x500 [ 2283.457539][ T6249] ? sctp_copy_local_addr_list+0xad/0x500 [ 2283.457567][ T6249] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2283.457604][ T6249] ? sctp_v6_is_any+0x60/0x70 [ 2283.457633][ T6249] ? sctp_copy_one_addr+0x94/0x360 [ 2283.457664][ T6249] sctp_bind_addr_copy+0xad/0x3b0 [ 2283.457691][ T6249] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 2283.457731][ T6249] sctp_connect_new_asoc+0x337/0x700 [ 2283.457766][ T6249] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2283.457796][ T6249] ? sctp_sendmsg+0xf30/0x3620 [ 2283.457833][ T6249] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 2283.457867][ T6249] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2283.457902][ T6249] sctp_sendmsg+0x2009/0x3620 [ 2283.457958][ T6249] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2283.457993][ T6249] ? aa_sk_perm+0x96f/0xac0 [ 2283.458038][ T6249] ? inet_sendmsg+0x330/0x390 [ 2283.458064][ T6249] __sock_sendmsg+0x1a6/0x270 [ 2283.458095][ T6249] __sys_sendto+0x365/0x4c0 [ 2283.458132][ T6249] ? __pfx___sys_sendto+0x10/0x10 [ 2283.458178][ T6249] ? __fget_files+0x2a/0x420 [ 2283.458224][ T6249] __ia32_sys_sendto+0xdd/0x100 [ 2283.458260][ T6249] __do_fast_syscall_32+0xb4/0x110 [ 2283.458285][ T6249] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2283.458308][ T6249] ? lockdep_hardirqs_on+0x9d/0x150 [ 2283.458334][ T6249] do_fast_syscall_32+0x34/0x80 [ 2283.458358][ T6249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2283.458384][ T6249] RIP: 0023:0xf705d539 [ 2283.458404][ T6249] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2283.458423][ T6249] RSP: 002b:00000000f504d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2283.458447][ T6249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2283.458463][ T6249] RDX: 0000000000000001 RSI: 0000000000008072 RDI: 0000000080000080 [ 2283.458477][ T6249] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2283.458490][ T6249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2283.458503][ T6249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2283.458535][ T6249] [ 2283.748215][T29210] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2283.810257][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2283.831890][ T6111] 8021q: adding VLAN 0 to HW filter on device team0 [ 2283.878138][ T6111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2283.889392][ T6111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2283.923343][T29210] usb 2-1: Using ep0 maxpacket: 32 [ 2283.939578][ T6111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2283.984082][ T6111] veth0_vlan: entered promiscuous mode [ 2283.997395][ T6111] veth1_vlan: entered promiscuous mode [ 2284.030991][ T6111] veth0_macvtap: entered promiscuous mode [ 2284.041876][ T6111] veth1_macvtap: entered promiscuous mode [ 2284.063569][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.075648][T29210] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2284.087958][T29210] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2284.115084][T29210] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2284.133381][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.160029][T29210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2284.193635][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2284.303663][T29210] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2284.321706][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.347831][T29210] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2284.382972][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2284.402865][T29210] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2284.428432][T22731] bridge0: port 1(bridge_slave_0) entered blocking state [ 2284.435636][T22731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2284.454485][T29210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.483960][T22731] bridge0: port 2(bridge_slave_1) entered blocking state [ 2284.491299][T22731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2284.508594][T29210] usb 2-1: config 0 descriptor?? [ 2284.715855][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.716868][T20164] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 2284.729758][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2284.757000][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.767623][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2284.799362][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.816922][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.841334][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2284.866679][ T6111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2284.867101][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.896792][ T6111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2284.916659][T20164] usb 1-1: Invalid ep0 maxpacket: 64 [ 2284.956328][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2284.989395][T29210] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2285.067024][T20164] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 2285.084749][ T6111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.107098][T29210] usb 2-1: USB disconnect, device number 75 [ 2285.144407][T29210] usblp0: removed [ 2285.148621][ T6111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.216868][ T6111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.257420][ T6111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.302570][T27536] usbhid 6-1:1.0: can't add hid device: -71 [ 2285.323243][T20164] usb 1-1: Invalid ep0 maxpacket: 64 [ 2285.331488][T27536] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2285.348535][T20164] usb usb1-port1: attempt power cycle [ 2285.389988][T27536] usb 6-1: USB disconnect, device number 33 [ 2285.619735][T29841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.639076][T29841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.719632][T22731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.734646][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9113'. [ 2285.747241][T20164] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 2285.767440][T22731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.808801][T20164] usb 1-1: Invalid ep0 maxpacket: 64 [ 2285.956871][T20164] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 2286.047395][T20164] usb 1-1: Invalid ep0 maxpacket: 64 [ 2286.083095][T20164] usb usb1-port1: unable to enumerate USB device [ 2286.626844][ T1561] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2286.799605][ T1561] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.855666][ T1561] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2286.866763][ T1561] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2286.907030][ T1561] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2286.913804][ T1561] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 2286.923132][ T1561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.959939][ T1561] usb 2-1: config 0 descriptor?? [ 2287.481692][ T1561] cypress 0003:04B4:0001.0058: unknown main item tag 0x0 [ 2287.505597][ T1561] cypress 0003:04B4:0001.0058: unknown main item tag 0x0 [ 2287.525941][ T1561] cypress 0003:04B4:0001.0058: unknown main item tag 0x0 [ 2287.545828][ T1561] cypress 0003:04B4:0001.0058: unknown main item tag 0x0 [ 2287.555730][ T1561] cypress 0003:04B4:0001.0058: unknown main item tag 0x0 [ 2287.574678][ T1561] cypress 0003:04B4:0001.0058: unknown main item tag 0x0 [ 2287.595328][ T1561] cypress 0003:04B4:0001.0058: unknown main item tag 0x0 [ 2287.605640][ T6316] bond3: entered promiscuous mode [ 2287.615828][ T1561] cypress 0003:04B4:0001.0058: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 2287.637669][T20164] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2287.645535][ T6316] bond3: entered allmulticast mode [ 2287.661051][ T6316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2287.812899][T20164] usb 6-1: Using ep0 maxpacket: 16 [ 2287.828319][T20164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2287.850888][ T30] audit: type=1326 audit(1745522404.135:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.0.9123" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0 [ 2287.867586][T20164] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 2287.912076][T20164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.963611][T20164] usb 6-1: config 0 descriptor?? [ 2288.996762][T29210] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2289.145664][T20164] apple 0003:05AC:024B.0059: item fetching failed at offset 2/69 [ 2289.156950][T29210] usb 1-1: Using ep0 maxpacket: 16 [ 2289.167341][T20164] apple 0003:05AC:024B.0059: parse failed [ 2289.173205][T20164] apple 0003:05AC:024B.0059: probe with driver apple failed with error -22 [ 2289.175463][T29210] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 2289.204967][T29210] usb 1-1: config 0 has no interface number 0 [ 2289.213763][T29210] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 62, changing to 9 [ 2289.231486][T29210] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 33279, setting to 1024 [ 2289.246264][T29210] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2289.307244][ T1561] usb 2-1: USB disconnect, device number 76 [ 2289.360525][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9125'. [ 2289.373759][T29210] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2289.383324][T29210] usb 1-1: Product: syz [ 2289.393709][ T1562] usb 6-1: USB disconnect, device number 34 [ 2289.412466][T29210] usb 1-1: SerialNumber: syz [ 2289.443835][T29210] usb 1-1: config 0 descriptor?? [ 2289.455086][T29210] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 2289.469852][T29210] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input102 [ 2289.865066][T20164] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2289.962931][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 2289.970150][ C1] cm109_urb_ctl_callback: 9 callbacks suppressed [ 2289.970169][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2289.983996][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2289.991376][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2289.998605][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2290.007095][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2290.014351][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2290.021514][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2290.028681][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2290.035819][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2290.042969][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2290.050091][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2290.059858][ T1562] usb 1-1: USB disconnect, device number 102 [ 2290.159244][T20164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2290.170168][ T1562] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2290.211717][T20164] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2290.278998][T20164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2290.326696][T20164] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2290.345110][T20164] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2290.371215][T20164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.408885][T20164] usb 2-1: config 0 descriptor?? [ 2290.669419][T20164] hdpvr 2-1:0.0: firmware version 0x8 dated [ 2290.743828][ T6351] [ 2290.746192][ T6351] ===================================================== [ 2290.753120][ T6351] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2290.760588][ T6351] 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 Not tainted [ 2290.767684][ T6351] ----------------------------------------------------- [ 2290.774622][ T6351] syz.5.9130/6351 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2290.782250][ T6351] ffffffff8ea0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x108/0x390 [ 2290.790894][ T6351] [ 2290.790894][ T6351] and this task is already holding: [ 2290.798262][ T6351] ffff888032ad7b20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x37/0x390 [ 2290.806884][ T6351] which would create a new lock dependency: [ 2290.812764][ T6351] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 2290.820351][ T6351] [ 2290.820351][ T6351] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2290.829800][ T6351] (&dev->event_lock#2){..-.}-{3:3} [ 2290.829837][ T6351] [ 2290.829837][ T6351] ... which became SOFTIRQ-irq-safe at: [ 2290.842735][ T6351] lock_acquire+0x116/0x2f0 [ 2290.847346][ T6351] _raw_spin_lock_irqsave+0xd8/0x130 [ 2290.852729][ T6351] input_event+0x8c/0xe0 [ 2290.857070][ T6351] hidinput_report_event+0x93/0x100 [ 2290.862370][ T6351] hid_report_raw_event+0x1582/0x17c0 [ 2290.867840][ T6351] hid_input_report+0x419/0x500 [ 2290.872793][ T6351] hid_ctrl+0x1d8/0x520 [ 2290.877038][ T6351] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 2290.882502][ T6351] dummy_timer+0x84b/0x4670 [ 2290.887094][ T6351] __hrtimer_run_queues+0x5a6/0xd40 [ 2290.892380][ T6351] hrtimer_run_softirq+0x19a/0x2c0 [ 2290.897577][ T6351] handle_softirqs+0x2d6/0x9b0 [ 2290.902442][ T6351] __irq_exit_rcu+0xfb/0x220 [ 2290.907118][ T6351] irq_exit_rcu+0x9/0x30 [ 2290.911458][ T6351] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2290.917192][ T6351] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2290.923265][ T6351] _raw_spin_unlock_irqrestore+0xd9/0x140 [ 2290.929089][ T6351] __wake_up_common_lock+0x18c/0x1e0 [ 2290.934482][ T6351] __unix_dgram_recvmsg+0x61a/0x12e0 [ 2290.939877][ T6351] sock_recvmsg_nosec+0x18e/0x1d0 [ 2290.945019][ T6351] ____sys_recvmsg+0x3d4/0x480 [ 2290.949884][ T6351] do_recvmmsg+0x53e/0xab0 [ 2290.954395][ T6351] __sys_recvmmsg+0x1aa/0x280 [ 2290.959162][ T6351] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 2290.965423][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2290.970640][ T6351] do_fast_syscall_32+0x34/0x80 [ 2290.975583][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2290.982005][ T6351] [ 2290.982005][ T6351] to a SOFTIRQ-irq-unsafe lock: [ 2290.989022][ T6351] (tasklist_lock){.+.+}-{3:3} [ 2290.989055][ T6351] [ 2290.989055][ T6351] ... which became SOFTIRQ-irq-unsafe at: [ 2291.001687][ T6351] ... [ 2291.001698][ T6351] lock_acquire+0x116/0x2f0 [ 2291.008869][ T6351] _raw_read_lock+0x36/0x50 [ 2291.013481][ T6351] __do_wait+0x132/0x850 [ 2291.017826][ T6351] do_wait+0x1fe/0x510 [ 2291.022002][ T6351] kernel_wait+0xeb/0x240 [ 2291.026429][ T6351] call_usermodehelper_exec_work+0xbd/0x230 [ 2291.032428][ T6351] process_scheduled_works+0xac3/0x18e0 [ 2291.038078][ T6351] worker_thread+0x870/0xd50 [ 2291.042758][ T6351] kthread+0x7b7/0x940 [ 2291.046916][ T6351] ret_from_fork+0x4b/0x80 [ 2291.051456][ T6351] ret_from_fork_asm+0x1a/0x30 [ 2291.056327][ T6351] [ 2291.056327][ T6351] other info that might help us debug this: [ 2291.056327][ T6351] [ 2291.066573][ T6351] Chain exists of: [ 2291.066573][ T6351] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 2291.066573][ T6351] [ 2291.079650][ T6351] Possible interrupt unsafe locking scenario: [ 2291.079650][ T6351] [ 2291.087987][ T6351] CPU0 CPU1 [ 2291.093356][ T6351] ---- ---- [ 2291.098724][ T6351] lock(tasklist_lock); [ 2291.102984][ T6351] local_irq_disable(); [ 2291.109737][ T6351] lock(&dev->event_lock#2); [ 2291.116954][ T6351] lock(&f_owner->lock); [ 2291.123836][ T6351] [ 2291.127292][ T6351] lock(&dev->event_lock#2); [ 2291.132163][ T6351] [ 2291.132163][ T6351] *** DEADLOCK *** [ 2291.132163][ T6351] [ 2291.140311][ T6351] 5 locks held by syz.5.9130/6351: [ 2291.145418][ T6351] #0: ffff8880326be420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 2291.154586][ T6351] #1: ffff8880585bf858 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x262/0x510 [ 2291.165237][ T6351] #2: ffffffff9a7adbb0 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x78d/0x2310 [ 2291.174742][ T6351] #3: ffff8880656aa4e8 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x61/0x460 [ 2291.184431][ T6351] #4: ffff888032ad7b20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x37/0x390 [ 2291.193519][ T6351] [ 2291.193519][ T6351] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2291.203931][ T6351] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2291.209779][ T6351] IN-SOFTIRQ-W at: [ 2291.214030][ T6351] lock_acquire+0x116/0x2f0 [ 2291.220723][ T6351] _raw_spin_lock_irqsave+0xd8/0x130 [ 2291.228280][ T6351] input_event+0x8c/0xe0 [ 2291.234708][ T6351] hidinput_report_event+0x93/0x100 [ 2291.242097][ T6351] hid_report_raw_event+0x1582/0x17c0 [ 2291.249651][ T6351] hid_input_report+0x419/0x500 [ 2291.256700][ T6351] hid_ctrl+0x1d8/0x520 [ 2291.263029][ T6351] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 2291.270580][ T6351] dummy_timer+0x84b/0x4670 [ 2291.277258][ T6351] __hrtimer_run_queues+0x5a6/0xd40 [ 2291.284631][ T6351] hrtimer_run_softirq+0x19a/0x2c0 [ 2291.291916][ T6351] handle_softirqs+0x2d6/0x9b0 [ 2291.298863][ T6351] __irq_exit_rcu+0xfb/0x220 [ 2291.305622][ T6351] irq_exit_rcu+0x9/0x30 [ 2291.312056][ T6351] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2291.319876][ T6351] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2291.328031][ T6351] _raw_spin_unlock_irqrestore+0xd9/0x140 [ 2291.335941][ T6351] __wake_up_common_lock+0x18c/0x1e0 [ 2291.343429][ T6351] __unix_dgram_recvmsg+0x61a/0x12e0 [ 2291.351330][ T6351] sock_recvmsg_nosec+0x18e/0x1d0 [ 2291.358534][ T6351] ____sys_recvmsg+0x3d4/0x480 [ 2291.365470][ T6351] do_recvmmsg+0x53e/0xab0 [ 2291.372058][ T6351] __sys_recvmmsg+0x1aa/0x280 [ 2291.378907][ T6351] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 2291.387245][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2291.394532][ T6351] do_fast_syscall_32+0x34/0x80 [ 2291.401556][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2291.410060][ T6351] INITIAL USE at: [ 2291.414218][ T6351] lock_acquire+0x116/0x2f0 [ 2291.420822][ T6351] _raw_spin_lock_irqsave+0xd8/0x130 [ 2291.428212][ T6351] input_inject_event+0xc8/0x360 [ 2291.435244][ T6351] kbd_led_trigger_activate+0xb8/0x100 [ 2291.442804][ T6351] led_trigger_set+0x53e/0x9e0 [ 2291.449665][ T6351] led_trigger_set_default+0x229/0x260 [ 2291.457218][ T6351] led_classdev_register_ext+0x778/0x980 [ 2291.464942][ T6351] input_leds_connect+0x491/0x640 [ 2291.472068][ T6351] input_register_device+0xce2/0x10c0 [ 2291.479535][ T6351] atkbd_connect+0x759/0xa30 [ 2291.486208][ T6351] serio_driver_probe+0x7f/0xa0 [ 2291.493153][ T6351] really_probe+0x2b9/0xad0 [ 2291.499746][ T6351] __driver_probe_device+0x1a2/0x390 [ 2291.507124][ T6351] driver_probe_device+0x50/0x430 [ 2291.514238][ T6351] __driver_attach+0x45f/0x710 [ 2291.521091][ T6351] bus_for_each_dev+0x23e/0x2b0 [ 2291.528054][ T6351] serio_handle_event+0x1c7/0x920 [ 2291.535173][ T6351] process_scheduled_works+0xac3/0x18e0 [ 2291.542818][ T6351] worker_thread+0x870/0xd50 [ 2291.549502][ T6351] kthread+0x7b7/0x940 [ 2291.555662][ T6351] ret_from_fork+0x4b/0x80 [ 2291.562167][ T6351] ret_from_fork_asm+0x1a/0x30 [ 2291.569021][ T6351] } [ 2291.571779][ T6351] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2291.581075][ T6351] -> (&client->buffer_lock){....}-{3:3} { [ 2291.586997][ T6351] INITIAL USE at: [ 2291.591067][ T6351] lock_acquire+0x116/0x2f0 [ 2291.597493][ T6351] _raw_spin_lock+0x2e/0x40 [ 2291.603919][ T6351] evdev_pass_values+0xf8/0xaf0 [ 2291.610694][ T6351] evdev_events+0x1c2/0x300 [ 2291.617127][ T6351] input_pass_values+0x268/0x890 [ 2291.623984][ T6351] input_event_dispose+0x31b/0x610 [ 2291.631014][ T6351] input_handle_event+0xa9c/0xc10 [ 2291.637962][ T6351] input_inject_event+0x221/0x360 [ 2291.644905][ T6351] evdev_write+0x409/0x5e0 [ 2291.651255][ T6351] vfs_write+0x2bc/0xd10 [ 2291.657426][ T6351] ksys_write+0x19d/0x2d0 [ 2291.663677][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2291.670704][ T6351] do_fast_syscall_32+0x34/0x80 [ 2291.677470][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2291.685714][ T6351] } [ 2291.688384][ T6351] ... key at: [] evdev_open.__key.23+0x0/0x20 [ 2291.696723][ T6351] ... acquired at: [ 2291.700720][ T6351] lock_acquire+0x116/0x2f0 [ 2291.705424][ T6351] _raw_spin_lock+0x2e/0x40 [ 2291.710248][ T6351] evdev_pass_values+0xf8/0xaf0 [ 2291.715286][ T6351] evdev_events+0x1c2/0x300 [ 2291.719976][ T6351] input_pass_values+0x268/0x890 [ 2291.725105][ T6351] input_event_dispose+0x31b/0x610 [ 2291.730402][ T6351] input_handle_event+0xa9c/0xc10 [ 2291.735610][ T6351] input_inject_event+0x221/0x360 [ 2291.740816][ T6351] evdev_write+0x409/0x5e0 [ 2291.745418][ T6351] vfs_write+0x2bc/0xd10 [ 2291.749855][ T6351] ksys_write+0x19d/0x2d0 [ 2291.754371][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2291.759664][ T6351] do_fast_syscall_32+0x34/0x80 [ 2291.764712][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2291.771231][ T6351] [ 2291.773559][ T6351] -> (&new->fa_lock){....}-{3:3} { [ 2291.778788][ T6351] INITIAL USE at: [ 2291.782774][ T6351] lock_acquire+0x116/0x2f0 [ 2291.789033][ T6351] _raw_write_lock_irq+0xd3/0x120 [ 2291.795799][ T6351] fasync_remove_entry+0xec/0x1b0 [ 2291.802589][ T6351] lease_modify+0x1ba/0x3a0 [ 2291.808849][ T6351] locks_remove_file+0x5a1/0x10d0 [ 2291.815624][ T6351] __fput+0x352/0x9f0 [ 2291.821356][ T6351] task_work_run+0x251/0x310 [ 2291.827700][ T6351] syscall_exit_to_user_mode+0x13f/0x340 [ 2291.835078][ T6351] __do_fast_syscall_32+0xc1/0x110 [ 2291.841936][ T6351] do_fast_syscall_32+0x34/0x80 [ 2291.848532][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2291.856613][ T6351] INITIAL READ USE at: [ 2291.861043][ T6351] lock_acquire+0x116/0x2f0 [ 2291.867732][ T6351] _raw_read_lock_irqsave+0xe0/0x130 [ 2291.875199][ T6351] kill_fasync+0x199/0x4f0 [ 2291.881792][ T6351] lease_break_callback+0x26/0x30 [ 2291.889042][ T6351] __break_lease+0x753/0x1890 [ 2291.895914][ T6351] do_dentry_open+0xd43/0x1960 [ 2291.902864][ T6351] vfs_open+0x3b/0x370 [ 2291.909120][ T6351] path_openat+0x2caf/0x35d0 [ 2291.915897][ T6351] do_filp_open+0x284/0x4e0 [ 2291.922610][ T6351] do_sys_openat2+0x12b/0x1d0 [ 2291.929494][ T6351] __ia32_compat_sys_open+0x21e/0x270 [ 2291.937055][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2291.944354][ T6351] do_fast_syscall_32+0x34/0x80 [ 2291.951388][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2291.959931][ T6351] } [ 2291.962529][ T6351] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2291.971394][ T6351] ... acquired at: [ 2291.975282][ T6351] lock_acquire+0x116/0x2f0 [ 2291.979972][ T6351] _raw_read_lock_irqsave+0xe0/0x130 [ 2291.985452][ T6351] kill_fasync+0x199/0x4f0 [ 2291.990046][ T6351] evdev_pass_values+0x5a2/0xaf0 [ 2291.995173][ T6351] evdev_events+0x1c2/0x300 [ 2291.999860][ T6351] input_pass_values+0x268/0x890 [ 2292.004995][ T6351] input_event_dispose+0x31b/0x610 [ 2292.010284][ T6351] input_handle_event+0xa9c/0xc10 [ 2292.015486][ T6351] input_inject_event+0x221/0x360 [ 2292.020693][ T6351] evdev_write+0x409/0x5e0 [ 2292.025295][ T6351] vfs_write+0x2bc/0xd10 [ 2292.029718][ T6351] ksys_write+0x19d/0x2d0 [ 2292.034277][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2292.039587][ T6351] do_fast_syscall_32+0x34/0x80 [ 2292.044613][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2292.051118][ T6351] [ 2292.053447][ T6351] -> (&f_owner->lock){....}-{3:3} { [ 2292.058682][ T6351] INITIAL USE at: [ 2292.062583][ T6351] lock_acquire+0x116/0x2f0 [ 2292.068664][ T6351] _raw_write_lock_irq+0xd3/0x120 [ 2292.075255][ T6351] __f_setown+0x68/0x380 [ 2292.081070][ T6351] generic_setlease+0xc62/0x1560 [ 2292.087577][ T6351] fcntl_setlease+0x408/0x540 [ 2292.093820][ T6351] do_fcntl+0x73b/0x1b20 [ 2292.099629][ T6351] do_compat_fcntl64+0x58a/0xdc0 [ 2292.106139][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2292.112830][ T6351] do_fast_syscall_32+0x34/0x80 [ 2292.119247][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2292.127143][ T6351] INITIAL READ USE at: [ 2292.131480][ T6351] lock_acquire+0x116/0x2f0 [ 2292.137989][ T6351] _raw_read_lock_irqsave+0xe0/0x130 [ 2292.145283][ T6351] send_sigio+0x37/0x390 [ 2292.151612][ T6351] kill_fasync+0x253/0x4f0 [ 2292.158034][ T6351] lease_break_callback+0x26/0x30 [ 2292.165064][ T6351] __break_lease+0x753/0x1890 [ 2292.171739][ T6351] do_dentry_open+0xd43/0x1960 [ 2292.178506][ T6351] vfs_open+0x3b/0x370 [ 2292.184576][ T6351] path_openat+0x2caf/0x35d0 [ 2292.191184][ T6351] do_filp_open+0x284/0x4e0 [ 2292.197688][ T6351] do_sys_openat2+0x12b/0x1d0 [ 2292.204386][ T6351] __ia32_compat_sys_open+0x21e/0x270 [ 2292.211758][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2292.218871][ T6351] do_fast_syscall_32+0x34/0x80 [ 2292.225720][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2292.234051][ T6351] } [ 2292.236550][ T6351] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2292.245403][ T6351] ... acquired at: [ 2292.249201][ T6351] lock_acquire+0x116/0x2f0 [ 2292.253889][ T6351] _raw_read_lock_irqsave+0xe0/0x130 [ 2292.259362][ T6351] send_sigio+0x37/0x390 [ 2292.263782][ T6351] kill_fasync+0x253/0x4f0 [ 2292.268378][ T6351] lease_break_callback+0x26/0x30 [ 2292.273584][ T6351] __break_lease+0x753/0x1890 [ 2292.278471][ T6351] do_dentry_open+0xd43/0x1960 [ 2292.283411][ T6351] vfs_open+0x3b/0x370 [ 2292.287660][ T6351] path_openat+0x2caf/0x35d0 [ 2292.292430][ T6351] do_filp_open+0x284/0x4e0 [ 2292.297116][ T6351] do_sys_openat2+0x12b/0x1d0 [ 2292.301975][ T6351] __ia32_compat_sys_open+0x21e/0x270 [ 2292.307525][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2292.312815][ T6351] do_fast_syscall_32+0x34/0x80 [ 2292.317845][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2292.324350][ T6351] [ 2292.326672][ T6351] [ 2292.326672][ T6351] the dependencies between the lock to be acquired [ 2292.326683][ T6351] and SOFTIRQ-irq-unsafe lock: [ 2292.340189][ T6351] -> (tasklist_lock){.+.+}-{3:3} { [ 2292.345329][ T6351] HARDIRQ-ON-R at: [ 2292.349309][ T6351] lock_acquire+0x116/0x2f0 [ 2292.355470][ T6351] _raw_read_lock+0x36/0x50 [ 2292.361631][ T6351] __do_wait+0x132/0x850 [ 2292.367531][ T6351] do_wait+0x1fe/0x510 [ 2292.373254][ T6351] kernel_wait+0xeb/0x240 [ 2292.379239][ T6351] call_usermodehelper_exec_work+0xbd/0x230 [ 2292.386789][ T6351] process_scheduled_works+0xac3/0x18e0 [ 2292.393993][ T6351] worker_thread+0x870/0xd50 [ 2292.400232][ T6351] kthread+0x7b7/0x940 [ 2292.405952][ T6351] ret_from_fork+0x4b/0x80 [ 2292.412020][ T6351] ret_from_fork_asm+0x1a/0x30 [ 2292.418432][ T6351] SOFTIRQ-ON-R at: [ 2292.422419][ T6351] lock_acquire+0x116/0x2f0 [ 2292.428584][ T6351] _raw_read_lock+0x36/0x50 [ 2292.434745][ T6351] __do_wait+0x132/0x850 [ 2292.440643][ T6351] do_wait+0x1fe/0x510 [ 2292.446368][ T6351] kernel_wait+0xeb/0x240 [ 2292.452362][ T6351] call_usermodehelper_exec_work+0xbd/0x230 [ 2292.459936][ T6351] process_scheduled_works+0xac3/0x18e0 [ 2292.467150][ T6351] worker_thread+0x870/0xd50 [ 2292.473400][ T6351] kthread+0x7b7/0x940 [ 2292.479126][ T6351] ret_from_fork+0x4b/0x80 [ 2292.485192][ T6351] ret_from_fork_asm+0x1a/0x30 [ 2292.491607][ T6351] INITIAL USE at: [ 2292.495505][ T6351] lock_acquire+0x116/0x2f0 [ 2292.501582][ T6351] _raw_write_lock_irq+0xd3/0x120 [ 2292.508172][ T6351] copy_process+0x221b/0x3d10 [ 2292.514411][ T6351] kernel_clone+0x242/0x930 [ 2292.520479][ T6351] user_mode_thread+0x148/0x1c0 [ 2292.526896][ T6351] rest_init+0x23/0x300 [ 2292.532617][ T6351] start_kernel+0x484/0x510 [ 2292.538691][ T6351] x86_64_start_reservations+0x2a/0x30 [ 2292.545719][ T6351] x86_64_start_kernel+0x66/0x70 [ 2292.552221][ T6351] common_startup_64+0x13e/0x147 [ 2292.558730][ T6351] INITIAL READ USE at: [ 2292.563061][ T6351] lock_acquire+0x116/0x2f0 [ 2292.569575][ T6351] _raw_read_lock+0x36/0x50 [ 2292.576089][ T6351] __do_wait+0x132/0x850 [ 2292.582343][ T6351] do_wait+0x1fe/0x510 [ 2292.588418][ T6351] kernel_wait+0xeb/0x240 [ 2292.594768][ T6351] call_usermodehelper_exec_work+0xbd/0x230 [ 2292.602686][ T6351] process_scheduled_works+0xac3/0x18e0 [ 2292.610248][ T6351] worker_thread+0x870/0xd50 [ 2292.616847][ T6351] kthread+0x7b7/0x940 [ 2292.622924][ T6351] ret_from_fork+0x4b/0x80 [ 2292.629344][ T6351] ret_from_fork_asm+0x1a/0x30 [ 2292.636123][ T6351] } [ 2292.638624][ T6351] ... key at: [] tasklist_lock+0x18/0x40 [ 2292.646414][ T6351] ... acquired at: [ 2292.650216][ T6351] lock_acquire+0x116/0x2f0 [ 2292.654910][ T6351] _raw_read_lock+0x36/0x50 [ 2292.659598][ T6351] send_sigio+0x108/0x390 [ 2292.664126][ T6351] dnotify_handle_event+0x153/0x460 [ 2292.669513][ T6351] fsnotify+0x1f05/0x2310 [ 2292.674031][ T6351] vfs_mkdir+0x46e/0x500 [ 2292.678469][ T6351] do_mkdirat+0x273/0x3f0 [ 2292.682987][ T6351] __ia32_sys_mkdirat+0x87/0xa0 [ 2292.688023][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2292.693315][ T6351] do_fast_syscall_32+0x34/0x80 [ 2292.698341][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2292.704852][ T6351] [ 2292.707178][ T6351] [ 2292.707178][ T6351] stack backtrace: [ 2292.713084][ T6351] CPU: 0 UID: 0 PID: 6351 Comm: syz.5.9130 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2292.713117][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2292.713129][ T6351] Call Trace: [ 2292.713138][ T6351] [ 2292.713146][ T6351] dump_stack_lvl+0x241/0x360 [ 2292.713176][ T6351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2292.713202][ T6351] ? __pfx__printk+0x10/0x10 [ 2292.713230][ T6351] validate_chain+0x22bb/0x24e0 [ 2292.713258][ T6351] __lock_acquire+0xad5/0xd80 [ 2292.713286][ T6351] lock_acquire+0x116/0x2f0 [ 2292.713309][ T6351] ? send_sigio+0x108/0x390 [ 2292.713332][ T6351] _raw_read_lock+0x36/0x50 [ 2292.713358][ T6351] ? send_sigio+0x108/0x390 [ 2292.713376][ T6351] send_sigio+0x108/0x390 [ 2292.713397][ T6351] dnotify_handle_event+0x153/0x460 [ 2292.713418][ T6351] fsnotify+0x1f05/0x2310 [ 2292.713451][ T6351] ? fsnotify+0x78d/0x2310 [ 2292.713474][ T6351] ? __pfx_fsnotify+0x10/0x10 [ 2292.713498][ T6351] ? shmem_mknod+0x32c/0x3d0 [ 2292.713525][ T6351] ? inc_nlink+0x4e/0x150 [ 2292.713553][ T6351] vfs_mkdir+0x46e/0x500 [ 2292.713578][ T6351] do_mkdirat+0x273/0x3f0 [ 2292.713602][ T6351] ? __pfx_do_mkdirat+0x10/0x10 [ 2292.713625][ T6351] ? getname_flags+0x1e0/0x530 [ 2292.713643][ T6351] __ia32_sys_mkdirat+0x87/0xa0 [ 2292.713666][ T6351] __do_fast_syscall_32+0xb4/0x110 [ 2292.713685][ T6351] ? ret_from_fork_asm+0x1a/0x30 [ 2292.713701][ T6351] ? lockdep_hardirqs_on+0x9d/0x150 [ 2292.713719][ T6351] do_fast_syscall_32+0x34/0x80 [ 2292.713738][ T6351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2292.713760][ T6351] RIP: 0023:0xf712d539 [ 2292.713776][ T6351] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2292.713791][ T6351] RSP: 002b:00000000f511d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 2292.713811][ T6351] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 2292.713824][ T6351] RDX: 0000000000000098 RSI: 0000000000000000 RDI: 0000000000000000 [ 2292.713835][ T6351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2292.713846][ T6351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2292.713857][ T6351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2292.713876][ T6351] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2293.190413][ T6353] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2664684503 (341079616384 ns) > initial count (267703238144 ns). Using initial count to start timer. [ 2293.323247][T20164] hdpvr 2-1:0.0: device init failed [ 2293.328676][T20164] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 2293.391203][T20164] usb 2-1: USB disconnect, device number 77 [ 2293.599025][ T6354] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 2294.052886][T22731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2294.208093][T22731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2294.289405][T22731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2294.358575][T22731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2294.469372][T22731] bridge_slave_1: left allmulticast mode [ 2294.477676][T22731] bridge_slave_1: left promiscuous mode [ 2294.483415][T22731] bridge0: port 2(bridge_slave_1) entered disabled state [ 2294.508060][T22731] bridge_slave_0: left allmulticast mode [ 2294.515789][T22731] bridge_slave_0: left promiscuous mode [ 2294.521991][T22731] bridge0: port 1(bridge_slave_0) entered disabled state [ 2295.114293][T22731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2295.123141][T22731] bond_slave_0: left allmulticast mode [ 2295.130368][T22731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2295.139335][T22731] bond_slave_1: left allmulticast mode [ 2295.145155][T22731] bond0 (unregistering): Released all slaves [ 2295.155409][T22731] bond1 (unregistering): (slave bond2): Releasing backup interface [ 2295.163993][T22731] bond1 (unregistering): Released all slaves [ 2295.317989][T22731] bond2 (unregistering): Released all slaves [ 2295.455775][T22731] bond3 (unregistering): Released all slaves [ 2295.529378][T22731] : left promiscuous mode [ 2295.776247][T22731] hsr_slave_0: left promiscuous mode [ 2295.783102][T22731] hsr_slave_1: left promiscuous mode [ 2295.791243][T22731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2295.799951][T22731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2296.136518][T22731] team0 (unregistering): Port device team_slave_1 removed [ 2296.177974][T22731] team0 (unregistering): Port device team_slave_0 removed [ 2296.856379][T22731] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.903625][T22731] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.935915][T22731] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.993400][T22731] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.098253][T22731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.153548][T22731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.212703][T22731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.251369][T22731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.368856][T22731] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.412934][T22731] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.478505][T22731] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.550746][T22731] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.917491][T22731] bridge_slave_1: left allmulticast mode [ 2297.923230][T22731] bridge_slave_1: left promiscuous mode [ 2297.929271][T22731] bridge0: port 2(bridge_slave_1) entered disabled state [ 2297.941072][T22731] bridge_slave_0: left allmulticast mode [ 2297.946893][T22731] bridge_slave_0: left promiscuous mode [ 2297.952565][T22731] bridge0: port 1(bridge_slave_0) entered disabled state [ 2297.962244][T22731] bridge_slave_1: left allmulticast mode [ 2297.968644][T22731] bridge_slave_1: left promiscuous mode [ 2297.974336][T22731] bridge0: port 2(bridge_slave_1) entered disabled state [ 2297.984052][T22731] bridge_slave_0: left allmulticast mode [ 2297.990112][T22731] bridge_slave_0: left promiscuous mode [ 2297.996151][T22731] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.005956][T22731] batadv1: left promiscuous mode [ 2298.011190][T22731] bridge0: port 3(batadv1) entered disabled state [ 2298.019053][T22731] bridge_slave_1: left allmulticast mode [ 2298.024726][T22731] bridge_slave_1: left promiscuous mode [ 2298.030439][T22731] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.038905][T22731] bridge_slave_0: left allmulticast mode [ 2298.044566][T22731] bridge_slave_0: left promiscuous mode [ 2298.050336][T22731] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.062208][T22731] batadv1: left promiscuous mode [ 2298.067410][T22731] bridge0: port 1(batadv1) entered disabled state [ 2298.077919][T22731] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 2298.194542][T22731] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2298.368950][T22731] gretap0 (unregistering): left promiscuous mode [ 2298.832606][T22731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2298.843125][T22731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2298.854540][T22731] bond0 (unregistering): Released all slaves [ 2298.870417][T22731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2298.880720][T22731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2298.890381][T22731] bond0 (unregistering): Released all slaves [ 2299.003233][T22731] bond1 (unregistering): Released all slaves [ 2299.114098][T22731] bond1 (unregistering): Released all slaves [ 2299.247029][T22731] tipc: Left network mode [ 2299.863739][T22731] hsr_slave_0: left promiscuous mode [ 2299.870410][T22731] hsr_slave_1: left promiscuous mode [ 2299.876445][T22731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2299.886795][T22731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2299.895630][T22731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2299.903411][T22731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2299.913896][T22731] hsr_slave_0: left promiscuous mode [ 2299.920008][T22731] hsr_slave_1: left promiscuous mode [ 2299.925956][T22731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2299.938380][T22731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2299.946313][T22731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2299.954561][T22731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2299.973908][T22731] hsr_slave_0: left promiscuous mode [ 2299.982948][T22731] hsr_slave_1: left promiscuous mode [ 2299.990154][T22731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2300.001514][T22731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2300.010007][T22731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2300.021725][T22731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2300.032411][T22731] hsr_slave_0: left promiscuous mode [ 2300.040489][T22731] hsr_slave_1: left promiscuous mode [ 2300.056174][T22731] veth1_macvtap: left promiscuous mode [ 2300.065313][T22731] veth0_macvtap: left promiscuous mode [ 2300.071731][T22731] veth1_vlan: left promiscuous mode [ 2300.078340][T22731] veth0_vlan: left promiscuous mode [ 2300.084428][T22731] veth1_macvtap: left promiscuous mode [ 2300.090523][T22731] veth0_macvtap: left promiscuous mode [ 2300.096131][T22731] veth1_vlan: left promiscuous mode [ 2300.101851][T22731] veth0_vlan: left promiscuous mode [ 2300.108936][T22731] veth1_macvtap: left promiscuous mode [ 2300.114471][T22731] veth0_macvtap: left promiscuous mode [ 2300.120722][T22731] veth1_vlan: left promiscuous mode [ 2300.126030][T22731] veth0_vlan: left promiscuous mode [ 2300.362860][T22731] team0 (unregistering): Port device team_slave_1 removed [ 2300.374616][T22731] team0 (unregistering): Port device team_slave_0 removed [ 2300.514596][T22731] team0 (unregistering): Port device team_slave_1 removed [ 2300.536284][T22731] team0 (unregistering): Port device team_slave_0 removed