last executing test programs: 6.864045817s ago: executing program 0 (id=813): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0xa9ce, 0x10100, 0x100}, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create(0x6) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.628238534s ago: executing program 0 (id=814): r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000000000102505a8a44000010203010902240001010000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000e80)={0x0, 0x0, 0x9, 0x0, 0x5}) socket$inet6(0xa, 0x6, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) 5.916126197s ago: executing program 2 (id=818): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x57, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x7d7}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x8, 0x0, 0x2}}}}}]}}]}}, 0x0) (async, rerun: 64) r1 = socket(0x2000000015, 0x80005, 0x0) (rerun: 64) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) (async, rerun: 32) syz_usb_disconnect(r0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private, {[@timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6]}]}}}}}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0x402c582a, 0x0) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async, rerun: 32) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) (async, rerun: 32) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x8932, &(0x7f0000000440)={'sit0\x00', 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x40045b17, 0x0) 5.557747839s ago: executing program 2 (id=819): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x801) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x689) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000700}, 0xa}], 0x400000000000172, 0x4000300) 4.851152476s ago: executing program 2 (id=821): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x3b, 0x20, '\x00', [@generic={0xb7, 0xe8, "ae9afe5b522fa1a0cceb3f8bc35a3daefedb4f426b5df510d348ff3b02b5d64fd990a089f6aabdab668534295362b117b9b9fdc482dfedbf94789f19fd08264a6cc5cbb5821ce2c83df315f8259037fb49606dffa25443a0be953228650439bb4d863751e61683be1fe4f88688cebc3c7e91cd9680bca50777c9055d7dc476cd69a77ae53d40fdcde58378d34b99844a195efe3e4175f155f4c1ee48a2b98f5aed2a5ccbef033a1b44d41b64e9f93d26900320b769721bc06be367c3f3f3b55aaa0731b402c86b850f7e19472d286ae9861be6f5320acad7187f79f5f4826242f7e03da0a3ff5b09"}, @jumbo={0xc2, 0x4, 0x46}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2c}}, @ra={0x5, 0x2, 0x1}]}, 0x110) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000015c0)={0x34, &(0x7f0000000c80)={0x20, 0xf, 0x6, "01001a8b29bb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.591649587s ago: executing program 1 (id=824): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0xa9ce, 0x10100, 0x100}, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create(0x6) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.443044612s ago: executing program 1 (id=826): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect(0x0, 0x23a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x8, 0x0, 0x1, 0x8, 0x9}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x0, 0x0}, {0x9a, &(0x7f00000001c0)=@string={0x9a, 0x3, "eefe194a3c0de3a3c1b27ca1e9e3b84d5ff020ca77ac24cc0c534559bd776162a86df7498253532d90547c95ca79935cdeffe51f2b388d2aa11ea026eefaa6e3a43c98a7d5067e9d98cf8e0e04fbd5e75975eab2bb3f248cb27dc01ba8920e51097570b4bc41819e2dab8f91b004885ed8db3b8631a44a75602bf2b9a9b48aff2cf1aecd869d2a2c6c1497a008cdbe746cc46bab03655793"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x440a}}, {0xaf, &(0x7f0000000e00)=ANY=[@ANYBLOB="af038c8e7712d07c84755b2a0e53c0abe1d499194dd897b138845251e5657d33a3cc692b3bf81b5deb17441186c92d4ece3e20493b3ca4ff19ed107afe2815b4abcfe6b8a995a6f90809bac627de5c8333dfc270f6f3eb2b0596beab2391d0f08d5ec7582b35d5763dacd39fdc94f9d44ffbb3f14886fb9e0a134328aef2e64d2286d40124353c00e14e2a664fb95274910283ec5222ce0af850da8cbe043a94ca2e2c7a80db30f23b68a9719b2bdcdd8f642b760e9a04f1c03960bca8fd59de9caef2a41408e5b22c43064685145e8ce15bf44039a5ffb1a3c849a3199e442ea66fb022f80ddae101241aaf1a8b451623ed33c0dde4395732b9b033329665295b832eb99e38454b194b92ac001fb2e56ad018e0469f45db18f6e7e9616f8737053e2260145607788d72f673a2feab320964e695c01a178c4ba3071d1380cf5e43c2895980c14f1e73f5d413bacc02748a9183673e3f4251295d9a08f92b6d7d468bf39e4936f6e5a9f7152ec4b9a8185f0238d20a47b8a5f64b8c676973abf687737985b46e5154d147237219b1c87e811fe3a0ac89cf549cafdcaf2a49"]}, {0x68, &(0x7f00000003c0)=ANY=[@ANYBLOB]}]}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000000000070000000f00000000000000d4f700001eb300000010080000000000040000000800000005000000080000000600000007000000ff0f00"/88]) epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0xc0002006}) io_uring_setup(0x1f3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000002480), 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a90}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x8001}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.221548125s ago: executing program 4 (id=829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}}, 0x0) 4.091778251s ago: executing program 4 (id=830): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x40, 0x0, 0x0, 0x0, 0x40, {}, {0x8, 0xce6}, {0x0, 0x0, 0x1}, {0x400, 0x200}, 0x0, 0x3f0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2d, 0x1, 0x0, 0xb}) (async) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) r2 = syz_open_pts(r1, 0x2a02) r3 = dup3(r2, r1, 0x0) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r1, 0x0, 0x0) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r4, 0x0, 0x4) (async) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mq_open(&(0x7f0000003240)='.\x00', 0x0, 0x0, 0x0) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000002004e230a010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e22ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1e01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a3926304a1b217ac367a3252c07986166129214b9e871244e25013b74c170e151472a4cb10da07b6a7e2ce8ebca6163f2ce3a4d45825109790cee5103f02e341f9948d4e66bb633f50eaa0a05b9a099c789714247acbac68a6e73b2296618ddc4293bc88e9f05aac1dc9fd86d7e12f8aca54057af2d"], 0x18c) (async) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) 3.523938028s ago: executing program 4 (id=831): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x34, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x34}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9857254138c5313562d4d2bbed24cef7597118410a5433a541cb5f10f5131466ff1487f8488ca3b13c80a759496b2e4c4b1c87eea321523679fb6964783e163106c693eed7ad30aff1b7f245c16f5fdda6ef5759e86c5ad86b51e52ff3e10584dd803806753e43d09f8b5cf99623e21a52fd55a111bce86d356205e84c59a6c60ba7c7f9d2719186e2a8e14d1d2ea3e7a292902d8f9d15fe96f90adaaf3fb2dd960841f375ca0b3d130c74262ec70406d2177fd91e25f95165c9822309ab87c44b811001a2406436fdb1735ebd11b98c0e499ad62c4e485f6ef54d1e680074bf5b11204c939c82be65f96500ffa5804c573c90440d68cb863a", @ANYRES32=0x0, @ANYRES16=r0], 0x4c}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) 3.319398919s ago: executing program 0 (id=832): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10410300", 0x33fe0}], 0x1}, 0x0) 3.298911552s ago: executing program 4 (id=833): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x45, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000000), 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f0000000500)="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", 0x561) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085200000010000001832000003000000000000000000000085100000fbffffff1852000001ffffffffffffff7f0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60012040, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c000000090605000a00000000000000000000000900020073797a30000000000500010006000000040007803bf3f5314e254812e194211af7c485b44ab13152e30e50ee91c972f744d1f91302c40c05355c046545a8501d6f4110be3e10b64adfe280cc4af0beb5ca61cc96e5ccab2ba9d2e959b9440c6fb74f2b35ce9395be94097dcf9bf677ead481f3f1213564e3578970a9246b7829b6c49a55298465e4da2d473acc29548349cc14661d4ad462934896"], 0x2c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5000002, 0x1010, r0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x24}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_io_uring_submit(r5, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="c99b57381801238c09d0fffad41cbeb3a413fc3799e60f1d0dbd308f5fd1a3579c351944ffe7e96fb8fa08b5665dc3e5fa62d5cba498f0ae2a4c7d7b398d4971cabc09de1b1311f9e4af298d789839efb10cac9a1f3941ee5eb6dd5445e4729c879ebec2661218d8be", 0x69) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x4040) 3.128035382s ago: executing program 3 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000007001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000007080011000000000008000e008000000008000d"], 0x5c}}, 0x0) 2.876659916s ago: executing program 0 (id=835): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000008210000060a010400000000000000000100000008000b4000000000e0200480300001800e000100636f6e6e6c696d69740000001c000280080002400000000008000240000000000800014000000000a020018008000100636d7000942002800800024000000000802003800400010008000140000000000800024000000000080001400000000008000240000000006020038005100200a90d8186dd9efb77945d4572e9250044624d970b50fc66cb702a177c037d5d33cb708459b4744c8034a5d40a7310a0a4211dcd872045d96e492938e6325e35ca81dc004b0ba0ce549037fd2d70d1b2d12539b1cbb5ba3555cc28f28bb45ea49f8003251eb87398fdfe0c6bccf2853eccd5a7499f529613d563fdf706ea593b8e45e0587b61da49b5b3e1321596ba311c7c3cb99e2cb62bbb73739476bc102dbfe9efd0ffbe4feb9d2cc5be7b8ae7750d134a2b00ad95f3951a49ffa0e9e6d3caad09ed25ecc1f8cbbe60f798c3b5ce1230b1958743ef0ab13af7c693a14963680a9d090687f4505a5bb48682ba21f2ca6007497708d986be5997e9bd01e2ee56f78cfec2bbd5647aae29d4376259d7ec98ec2b47e755820ee06307ae70545713a85ba88dcb197314328ea61cb1be2590e500c8189569f252bc6177a1189d786979223e91f2a488018930a21e267b23d1c91600500a4ce1aaa2786cd4bcf986befc62d9d7ae427e9e65a82b4148e4f3470d765fd8a14a30d8fbb5701ff24d8d87a95035d25c1a60a92521c56dcedb99ed9eb31898d4967fd13c016ebe4cf77ebc29d8d3a473ade50796d17a7062d05284d5f55e6078d923778fb489e4177fa63ce5c623776aa3a4dfdb9dd9566e44d6785fe73d6c26eea4fc3346637a38565ed935ad7003c22aa290abe1469aaf4352b8868613dd2d364b142480db13590ad4818c472a8f24574f00c1dcceb38a7827f84f34d04d3fc0f0bcc4629484445952323a431bc78dc8282cd12977aedfd75d16ddd7f38f0d64957d7aafb96bf75ad28e44eeade61488b065d2787632cb921811adc87f4a540ec6ac33075770a09ac8cddf4b9dddef06c47507e8eb55f9bc3ee90c946d29d4140eeec87d252ebea618beb892d0134deeca647dd0bfe33092f2aea477d755183589aad25d08f7cb03a51aca9ffe2439a2eb10093a2fdf90fec9a4f6daa4885ea803b12f895c2ecf0670d288fa1317d410d62283fb817c6a564c7be32e66750e7e7808dcd3a3c3b0a9d31c59b7639e476fa458de655cf9346a73db16ee4b9db9ede516033f5702abdd033ca75685d12d19d378dae3fc66fbce17e7ccb847d82518ec694ac07cb7995e43d4013d59bd0e388baf1dbbfb5839136b82e4d0cb5fb79879632498bd18f8434068b3e6de7a835ebff0320031738ce92433968d66b5c09b470afcbb367715b9e9109dac8b3b1fb98875d6083eb9c9788661b90b9385327215a4d90e965baa51d0e644b42239434829407d6f9ad7ede336febe80aa657d3f4187c6f572d880a9fb6bd0e308c9f9a13713da757b2e73eed56e31caef09701a4d8d88760eebd917bdc606cfb252cbdc46695a5bcaa513c24d7d49e7d3b56204e9d2d7f31b73c9f7ddf5cc1801c3906e279d2aa240719e499771d071503834c641e15a4d24a9f0b3279cb3e992bf4a9ef47ce77eb0b9d3fe62d83106b7fdaa5191632d63c713e5a10afcaeef2fb27bc9f7c8062317eafc70d7a2bc3ea97facb334bef6803534af98eca03055d48d89592825456b33"], 0x217c}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0xd, 0x7}}, {0x0, 0x0, 0x0, 0x2, @time, {}, {}, @note={0x0, 0x0, 0xb, 0x4}}], 0x38) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) (fail_nth: 3) 2.841351126s ago: executing program 3 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, {[@fragment={0x21, 0x0, 0x0, 0x1, 0x0, 0x8, 0x65}, @fragment={0x29, 0x0, 0x9, 0x0, 0x0, 0x1e, 0x64}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) (async) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000810000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802c0001800b0001007470726f787900001c000280080003400000001308000140000000010815024000000017100001800b00010072656a65637400000900010073797a30"], 0xdc}}, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='timers\x00') setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000340)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x10) (async) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000900)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b40000000000000061117c0000000000c4950000000000000000000000000000a46c46296d1a57b627849310a7cc88cad702aab7635e8a3c457130ec9eb42372d330f890bba1a9b99d30a0d043f68a178115d8b138b3c670ebebda57bd5338a350918bc9af08cae00cad2b5521ab234d7905685bbc97b9d2fd38e0f4a8d33535985bc7ad8eb85ab5cab0fc20ec754d217de68f46e7727ada11546ef982d18d6f04b9f6b09ddaf98e33721fe535298e2d0a7661"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0xcca16f4274e79eec, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="8500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c970000000000500010e00000700"], 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x8, &(0x7f0000000280)=[{0x2, 0x4, 0xe}, {0x6, 0x2, 0x7, 0x3}, {0x81, 0x2, 0x9, 0x7}, {0x4, 0x5c, 0x80, 0x5}, {0x4, 0x6, 0x0, 0x245}, {0x0, 0x3, 0x80, 0xfff}, {0x1, 0x2, 0x40, 0x4}, {0x0, 0xa, 0x5, 0x8}]}, 0x8) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000740)="ceb9adac", 0xb9ce}], 0x1}}], 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x8) mknodat(r5, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.652031234s ago: executing program 2 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010300100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.305798928s ago: executing program 2 (id=838): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect(0x0, 0x23a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x8, 0x0, 0x1, 0x8, 0x9}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x0, 0x0}, {0x9a, &(0x7f00000001c0)=@string={0x9a, 0x3, "eefe194a3c0de3a3c1b27ca1e9e3b84d5ff020ca77ac24cc0c534559bd776162a86df7498253532d90547c95ca79935cdeffe51f2b388d2aa11ea026eefaa6e3a43c98a7d5067e9d98cf8e0e04fbd5e75975eab2bb3f248cb27dc01ba8920e51097570b4bc41819e2dab8f91b004885ed8db3b8631a44a75602bf2b9a9b48aff2cf1aecd869d2a2c6c1497a008cdbe746cc46bab03655793"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x440a}}, {0xaf, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, {0x68, &(0x7f00000003c0)=ANY=[@ANYBLOB]}]}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000000000070000000f00000000000000d4f700001eb300000010080000000000040000000800000005000000080000000600000007000000ff0f00"/88]) epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0xc0002006}) io_uring_setup(0x1f3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000002480), 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a90}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x8001}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) 2.091761625s ago: executing program 3 (id=839): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc0405519, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 2.09151561s ago: executing program 4 (id=840): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$alg(r0, &(0x7f0000000240)=""/213, 0xd5) (fail_nth: 4) 2.081139648s ago: executing program 0 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x7000000, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) 1.785959917s ago: executing program 3 (id=841): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf14, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000080)=0x10000, 0x4) socketpair(0x1, 0x80000, 0x0, &(0x7f00000003c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.712027005s ago: executing program 4 (id=842): r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000000000102505a8a44000010203010902240001010000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000e80)={0x0, 0x0, 0x9, 0x0, 0x5}) socket$inet6(0xa, 0x6, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) 1.710962453s ago: executing program 0 (id=843): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x80000000, 0x3, 0x3, 0x7, 0x8, 0x5, 0x0, 0x7, 0x3, 0x7, 0x2, 0x5, 0x5}, {0x8e, 0x6, 0x9, 0x9, 0xff, 0x4, 0x6, 0x5, 0xd8, 0xf, 0x9, 0x4}, {0x1, 0x40, 0xb, 0x5, 0x8, 0x5, 0x5, 0xf, 0x5, 0xfd, 0xb, 0x3, 0xffffffffffffff88}], 0x5b}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0xf1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x9, 0x7, 0xb7, 0x9, 0x36b, 0x9, 0x4, 0x7ff, 0x1a, 0x13, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "1f087db966058f66908611a2da3e15d07ea4bbea3d646bddcbf88d74a8f9b16f89ac1296a3ebe1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe659aabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf93360c81be9c56781a57bf6ac5bd26db48b73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}]}}]}, 0x170}}, 0x0) 1.541432427s ago: executing program 1 (id=844): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000040)=0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0xfffffffd, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x1, 0x0, 0x3}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC, @ANYBLOB="000101000100ffdbdf25030000008c0009800800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x8010) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="10040100", @ANYRES16=r5, @ANYBLOB="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"], 0x410}, 0x1, 0x0, 0x0, 0x800}, 0x4) pipe2(&(0x7f0000000840), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r7, 0x0, 0xb) splice(r9, 0x0, r8, 0x0, 0x1000, 0x0) splice(r6, 0x0, r10, 0x0, 0x80, 0x0) 1.039993155s ago: executing program 3 (id=845): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) socket(0x2a, 0x1, 0x2f3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000012c0)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x9, 0x6, {{0x26, 0x4, 0x0, 0x3f, 0x98, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast2, {[@noop, @lsrr={0x83, 0xb, 0xee, [@broadcast, @private=0xa010101]}, @generic={0x89, 0xd, "50aafa9eda39a446afa113"}, @generic={0x83, 0x12, "b56f1af3f23477d89effc1092d175170"}, @timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0xe, [{@local, 0x5}]}, @timestamp_addr={0x44, 0x24, 0x31, 0x1, 0x8, [{@private=0xa010102, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x4}, {@multicast2, 0xe}]}, @generic={0x7, 0x6, "1a023b34"}, @generic={0x7, 0x4, "6ea4"}, @timestamp_prespec={0x44, 0x1c, 0x80, 0x3, 0x3, [{@multicast1, 0x2}, {@broadcast, 0xb}, {@loopback, 0x4}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000018c0)={'ip6tnl0\x00', &(0x7f0000001840)={'syztnl1\x00', 0x0, 0x4, 0x78, 0x10, 0x11, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x10, 0x389, 0x0, 0x10}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001940)=0x14) r1 = syz_open_dev$dri(&(0x7f00000026c0), 0xfffffff9, 0x400) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000002740)={0x8, 0x0, &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b80)={'gre0\x00', &(0x7f0000001ac0)={'gre0\x00', 0x0, 0x80, 0x20, 0x6, 0x8, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x64, 0x0, 0xa3, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xe0, 0x3, 0x1, [{@broadcast, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0x1f, 0x3, 0x8, [{@local, 0x7fffffff}, {@local, 0x8}, {@multicast1, 0x4}, {@local, 0x800}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x3}]}, @noop, @ssrr={0x89, 0x13, 0xc9, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast]}, @generic={0x89, 0x6, "4d014bfb"}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800e8ff700008000000000000000000070000003956a4e4ca95628e25fc5d46dd7a79a656efe083", @ANYRES32=r4], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002140)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002200)={'ip6tnl0\x00', &(0x7f0000002180)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x8, 0x255d, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x1, 0x200, 0x2}}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0000ba305d413ec96be3846e82595ca4fcf69bd7e872651665f91bb7a01a96b2920d2a34e926f897c918a70495d7d23a3e1b34222cb785c3f7beb11fe4e3b1e6b2f97dad736342a1cf4923b184a431055fd97967222e1b3fcf88cd14d0099cc72d8c39ccefd62808de410b91a65d2419443a7af523f36743c552067ea692976ec9"]) read$FUSE(r8, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000000c001a8008000380000580"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002480)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0xffffffff, {{0x1c, 0x4, 0x1, 0x39, 0x70, 0x64, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x6e, [@remote, @broadcast, @remote, @empty]}, @end, @ra={0x94, 0x4}, @generic={0x89, 0xa, "3ce1f465bbcd1a50"}, @lsrr={0x83, 0xf, 0x5b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010101]}, @generic={0x17, 0x11, "2bf304077348bf0ad741447ad42586"}, @lsrr={0x83, 0x13, 0xc2, [@local, @multicast2, @remote, @multicast2]}]}}}}}) 544.165342ms ago: executing program 1 (id=846): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x8000004, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}]}}]}, 0x48}}, 0x0) 493.388163ms ago: executing program 1 (id=847): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r0, 0xd, 0x0) (async) io_uring_setup(0x564c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x340}) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) shmctl$IPC_RMID(0x0, 0x0) (rerun: 32) msgget$private(0x0, 0x0) r1 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/212) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000140), 0x2, 0x0) close_range(r2, r2, 0x2) shmctl$IPC_RMID(r1, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) msgget(0x1, 0x40) (async) fcntl$setsig(r3, 0xa, 0x76) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000340)={0x2, 0x81}) (async, rerun: 64) r5 = msgget(0x2, 0x372) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000380)=""/174) (async) msgget$private(0x0, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = open(&(0x7f0000000480)='./file0\x00', 0x40, 0xf0) close(r6) (async) msgget(0x1, 0x0) (async, rerun: 64) msgctl$MSG_STAT(0x0, 0xb, 0x0) (async, rerun: 64) write$P9_RUNLINKAT(r6, 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 431.319289ms ago: executing program 1 (id=848): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2058) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_create(0x1ff) pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x10000000}, 0x0, 0x0) 125.373935ms ago: executing program 2 (id=850): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000003600)={'filter\x00', 0x7, 0x4, 0x3b0, 0x1ec, 0x0, 0x1ec, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f29cd3809493", @empty, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, 0x8}}}, {{@arp={@private=0xa010101, @loopback, 0xff, 0xff, 0x5, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x7f, 0xff]}}, {@empty, {[0x0, 0x0, 0xc9ded47271c41c82, 0xff, 0x0, 0xff]}}, 0x7, 0xd, 0x9d15, 0xffff, 0x3d, 0xf, 'ip6_vti0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x900b17551dc56c4a}, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x97, 0x4}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a00000000000000000100000008000a40000000000000000000000900000000000900010073797a30000000000800962000000021100011800a0001006d6174636800000014006fb700001000010000000000000000000000000a9d0726135e7c8900"/157], 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4f8cad880499afeee309c31888a8", 0x5b8, 0x0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600053582c137153e37080c188004ac0f000300", 0x33fe0}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000040)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="19010000000000000000010000001400020077673100000000000000000000000000500008804c00008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392206000980"], 0x78}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x24, 0x8, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x1, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xbd7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000440), 0x4) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000037c0), 0x84) pipe(&(0x7f00000000c0)) 0s ago: executing program 3 (id=851): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x0, 0x100000000}}) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) socket$inet(0x2, 0x80000, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000003600)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002080)="b62850811fd7b911d41aff56d4e3219c754b3af25f36317140f0486391e2f0455ae9980cdfad3a4981fb4414c24b675aa22cdade707e9d473481761f3812b52490dbb24c616365c9d2ab663d7b7e97271ae28f5017056b9cb6b842d3d213ccd164d8b900e84f728c165cc7a38d1b0af49abd1d7487ec0ed3c5aa9b4cc7a233b31d98ae0ef9d747ecc809", 0x8a}, {&(0x7f0000002140)="ab3d", 0x2}, {&(0x7f0000002180)="3cce043285a0205dc818bf001200c94c5be7d366d6cbb49bb3f31e8e7c07cbc4b267c6f4fc6a2dd9cbfec21f96d668ae6c4d3094e82df88c2452f48827b72deb74159dab689baa9f6d7497265a8f6cbccd76337791f0cdf84d7756c83b3fa36555f71e37127cee508e24c5006263204fe1b598504a07dddec5192f7d8964", 0x7e}, {&(0x7f0000002200)="80b9c61c72b0fe", 0x7}, {&(0x7f0000002340)="5dff8dd72041141f19b59fbef735db3bfc6883e96cbe7ceb46a4f1de744dd09f22ca894d925e818b38dec1e59e417a97880ceab7c6a5834fd03a8fdfe5d0b5f05d39930d5bfa9acf0122810edb35dad2b223a4f33d8c83729e743928cad3d6d35718350bcb8c9fb9884d670740312a53036379b97fcfe289f4f68ced1d96e5eaf5cc9d507f00630be5c9a049e2557e4199d0553c218806c18b525b28e0f150159f836f1320c9762b24332932786849157e0130cf7462a0f2ebcbf6dfb1eeb6efedf64e6758539715123125720c5483616c71b4090956a2df56486e5328d614114d24c0eba82f767dba2fd5ea59e8013f8b4eaa", 0xf3}], 0x5}], 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x50, r6, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) kernel console output (not intermixed with test programs): ice bond0 [ 168.116373][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.128094][ T7135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.150170][ T7135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.173424][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.180689][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.218492][ T7135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.251305][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.258520][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.346252][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.373189][ T7283] netlink: 168 bytes leftover after parsing attributes in process `syz.2.532'. [ 168.385143][ T7075] veth0_vlan: entered promiscuous mode [ 168.401935][ T7075] veth1_vlan: entered promiscuous mode [ 168.426852][ T7283] netlink: 168 bytes leftover after parsing attributes in process `syz.2.532'. [ 168.428001][ T7075] veth0_macvtap: entered promiscuous mode [ 168.448870][ T7075] veth1_macvtap: entered promiscuous mode [ 168.464805][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.475622][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.485810][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.496738][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.508029][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.519163][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.529947][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.540110][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.551264][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.561284][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.571913][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.583106][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.593585][ T7075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.602452][ T7075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.611596][ T7075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.620959][ T7075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.654356][ T7135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.731002][ T5231] Bluetooth: hci3: command tx timeout [ 168.860178][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.963132][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.050477][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.057740][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.106256][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.113425][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.209227][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.217109][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.342380][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.353274][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.371457][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.387031][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.397240][ T7135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.410894][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.421010][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.443179][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.467962][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.487939][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.599405][ T7135] veth0_vlan: entered promiscuous mode [ 169.680011][ T7135] veth1_vlan: entered promiscuous mode [ 169.843550][ T7135] veth0_macvtap: entered promiscuous mode [ 169.891113][ T7135] veth1_macvtap: entered promiscuous mode [ 169.915945][ T7321] syzkaller1: entered promiscuous mode [ 169.921741][ T7321] syzkaller1: entered allmulticast mode [ 169.998653][ T5291] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 170.011077][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.039598][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.058821][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.070950][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.081325][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.092413][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.105271][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.131397][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.142728][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.154514][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 170.159781][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.171992][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.183915][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.194871][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.205374][ T5291] usb 2-1: config 8 has an invalid interface number: 249 but max is 0 [ 170.213946][ T5291] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 170.224179][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.235272][ T5291] usb 2-1: config 8 has no interface number 0 [ 170.241554][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.254721][ T5291] usb 2-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 170.267907][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.276369][ T5291] usb 2-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 170.292403][ T7310] chnl_net:caif_netlink_parms(): no params data found [ 170.298852][ T5291] usb 2-1: config 8 interface 249 has no altsetting 0 [ 170.310055][ T5291] usb 2-1: string descriptor 0 read error: -22 [ 170.316524][ T5291] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 170.328838][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.346923][ T7135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.365350][ T7135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.374322][ T7135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.383160][ T7135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.513843][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.531138][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.545260][ T7310] bridge_slave_0: entered allmulticast mode [ 170.554326][ T7310] bridge_slave_0: entered promiscuous mode [ 170.592666][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.600332][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.614527][ T7310] bridge_slave_1: entered allmulticast mode [ 170.664495][ T7310] bridge_slave_1: entered promiscuous mode [ 170.790513][ T7310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.828017][ T7310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.957128][ T7310] team0: Port device team_slave_0 added [ 171.015205][ T7310] team0: Port device team_slave_1 added [ 171.114313][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.141201][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.154040][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.168964][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.206555][ T7310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.252481][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.260789][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.307443][ T7310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.325729][ T5291] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 171.351380][ T5291] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 171.361433][ T5291] dib0700: firmware download failed at 7 with -71 [ 171.381414][ T5291] usb 2-1: USB disconnect, device number 22 [ 171.435379][ T7310] hsr_slave_0: entered promiscuous mode [ 171.452218][ T7310] hsr_slave_1: entered promiscuous mode [ 171.464677][ T7310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.476042][ T7310] Cannot create hsr debugfs directory [ 171.493089][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.508155][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.529269][ T5231] Bluetooth: hci5: command tx timeout [ 171.751101][ T7310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.866113][ T7310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.015717][ T7310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.213123][ T7310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.368631][ T2635] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 172.471045][ T7310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.501939][ T7310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.531502][ T7310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.561530][ T7310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.588455][ T2635] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.600178][ T2635] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.609794][ T2635] usb 2-1: config 1 has no interface number 0 [ 172.615941][ T2635] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 172.627295][ T2635] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.646254][ T2635] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.655651][ T2635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.664324][ T2635] usb 2-1: Product: syz [ 172.668655][ T2635] usb 2-1: Manufacturer: syz [ 172.673289][ T2635] usb 2-1: SerialNumber: syz [ 172.682301][ T2635] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 172.690910][ T2635] cdc_ncm 2-1:1.1: bind() failure [ 172.735006][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 172.827669][ T7310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.896994][ T7310] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.909940][ T29] audit: type=1326 audit(1727292166.547:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 172.910343][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.954939][ T29] audit: type=1326 audit(1727292166.547:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 172.961007][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.991482][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.999357][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.021467][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.028690][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.033527][ T29] audit: type=1326 audit(1727292166.627:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 173.044123][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.081076][ T9] usb 5-1: Product: syz [ 173.085317][ T9] usb 5-1: Manufacturer: syz [ 173.101766][ T9] usb 5-1: SerialNumber: syz [ 173.151877][ T2635] usb 2-1: USB disconnect, device number 23 [ 173.189789][ T29] audit: type=1326 audit(1727292166.627:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 173.241916][ T7310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.266879][ T29] audit: type=1326 audit(1727292166.627:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 173.300651][ T29] audit: type=1326 audit(1727292166.647:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 173.318673][ T5291] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 173.344955][ T7310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.357219][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.372794][ T29] audit: type=1326 audit(1727292166.717:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.1.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 173.399915][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.423709][ T29] audit: type=1326 audit(1727292166.717:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.1.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 173.457720][ T7310] veth0_vlan: entered promiscuous mode [ 173.469476][ T9] cdc_ncm 5-1:1.0: bind() failure [ 173.483413][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 173.492219][ T7310] veth1_vlan: entered promiscuous mode [ 173.497983][ T9] cdc_ncm 5-1:1.1: bind() failure [ 173.511118][ T5291] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 173.518244][ T29] audit: type=1326 audit(1727292166.717:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.1.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 173.520470][ T5229] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 173.561577][ T5291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.584468][ T7310] veth0_macvtap: entered promiscuous mode [ 173.591823][ T9] usb 5-1: USB disconnect, device number 19 [ 173.597061][ T29] audit: type=1326 audit(1727292166.717:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.1.553" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 173.609023][ T5231] Bluetooth: hci5: command tx timeout [ 173.627993][ T5291] usb 1-1: config 0 descriptor?? [ 173.645501][ T5291] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 173.648864][ T7310] veth1_macvtap: entered promiscuous mode [ 173.694622][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.706280][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.716690][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.727725][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.741610][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.752222][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.762287][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.774059][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.778863][ T5229] usb 3-1: Using ep0 maxpacket: 16 [ 173.799790][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.802961][ T5229] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 173.815349][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.815374][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.815387][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.815403][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.815417][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.815433][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.815448][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.815464][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.815477][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.815493][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.816846][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.829020][ T5229] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 173.853659][ T7310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.870789][ T5229] usb 3-1: config 8 has no interface number 0 [ 173.959344][ T5229] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 173.972679][ T7310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.975728][ T5291] usb 1-1: USB disconnect, device number 20 [ 173.997536][ T5229] usb 3-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 174.003099][ T7310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.014844][ T5229] usb 3-1: config 8 interface 249 has no altsetting 0 [ 174.030556][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 174.045665][ T5229] usb 3-1: string descriptor 0 read error: -22 [ 174.054005][ T5229] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 174.058827][ T7310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.064119][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.196725][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.206936][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice=31.95 [ 174.259573][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.271954][ T9] usb 5-1: config 0 descriptor?? [ 174.277821][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.289204][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.301096][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.394813][ T9] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 174.416306][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.467741][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.582693][ T7390] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 174.636633][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 174.842687][ T5229] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 174.864072][ T5229] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 174.873983][ T5229] dib0700: firmware download failed at 7 with -71 [ 174.904369][ T5229] usb 3-1: USB disconnect, device number 31 [ 174.918701][ T46] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 175.103084][ T46] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 175.117740][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.144430][ T46] usb 4-1: Product: syz [ 175.156013][ T46] usb 4-1: Manufacturer: syz [ 175.161357][ T46] usb 4-1: SerialNumber: syz [ 175.181322][ T46] usb 4-1: config 0 descriptor?? [ 175.265042][ T46] usb 5-1: USB disconnect, device number 20 [ 175.380006][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 175.409725][ T2635] usb 4-1: USB disconnect, device number 21 [ 175.485244][ T7419] syz.4.571 uses obsolete (PF_INET,SOCK_PACKET) [ 175.653757][ T7425] capability: warning: `syz.4.574' uses 32-bit capabilities (legacy support in use) [ 175.666813][ T7425] netlink: 'syz.4.574': attribute type 6 has an invalid length. [ 175.675496][ T7425] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.574'. [ 175.689791][ T5231] Bluetooth: hci5: command tx timeout [ 175.698216][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.574'. [ 175.818589][ T46] psmouse serio2: Failed to reset mouse on : -5 [ 175.994354][ T7431] FAULT_INJECTION: forcing a failure. [ 175.994354][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 176.009573][ T2635] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 176.019657][ T7431] CPU: 0 UID: 0 PID: 7431 Comm: syz.3.576 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 176.030039][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 176.040108][ T7431] Call Trace: [ 176.043422][ T7431] [ 176.046364][ T7431] dump_stack_lvl+0x241/0x360 [ 176.051089][ T7431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.056337][ T7431] ? __pfx__printk+0x10/0x10 [ 176.061111][ T7431] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 176.067025][ T7431] ? __pfx___might_resched+0x10/0x10 [ 176.072338][ T7431] should_fail_ex+0x3b0/0x4e0 [ 176.077039][ T7431] should_failslab+0xac/0x100 [ 176.081734][ T7431] __kmalloc_cache_node_noprof+0x74/0x300 [ 176.087474][ T7431] ? __get_vm_area_node+0x113/0x270 [ 176.092714][ T7431] __get_vm_area_node+0x113/0x270 [ 176.097787][ T7431] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 176.103704][ T7431] ? xt_compat_init_offsets+0xe2/0x1c0 [ 176.109184][ T7431] ? rcu_is_watching+0x15/0xb0 [ 176.113959][ T7431] ? trace_contention_end+0x3c/0x120 [ 176.119276][ T7431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.125631][ T7431] ? __pfx___mutex_lock+0x10/0x10 [ 176.130679][ T7431] ? xt_compat_init_offsets+0xe2/0x1c0 [ 176.136153][ T7431] vmalloc_noprof+0x79/0x90 [ 176.140684][ T7431] ? xt_compat_init_offsets+0xe2/0x1c0 [ 176.146162][ T7431] xt_compat_init_offsets+0xe2/0x1c0 [ 176.151463][ T7431] translate_compat_table+0x236/0x2eb0 [ 176.156959][ T7431] ? __pfx_translate_compat_table+0x10/0x10 [ 176.162870][ T7431] ? __might_fault+0xc6/0x120 [ 176.167572][ T7431] ? _copy_from_user+0xa6/0xe0 [ 176.172355][ T7431] ? copy_from_sockptr_offset+0x6b/0xb0 [ 176.177921][ T7431] do_ip6t_set_ctl+0xc2c/0x1270 [ 176.182791][ T7431] ? __pfx___might_resched+0x10/0x10 [ 176.188096][ T7431] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 176.193483][ T7431] ? __pfx_lock_release+0x10/0x10 [ 176.198543][ T7431] ? rcu_is_watching+0x15/0xb0 [ 176.203335][ T7431] ? trace_contention_end+0x3c/0x120 [ 176.208635][ T7431] ? __mutex_lock+0x2ef/0xd70 [ 176.213372][ T7431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.219367][ T7431] ? aa_sk_perm+0x96d/0xab0 [ 176.223902][ T7431] ? __pfx_aa_sk_perm+0x10/0x10 [ 176.228776][ T7431] nf_setsockopt+0x295/0x2c0 [ 176.233384][ T7431] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 176.239290][ T7431] do_sock_setsockopt+0x3af/0x720 [ 176.244334][ T7431] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 176.249900][ T7431] ? __fget_files+0x3f3/0x470 [ 176.254587][ T7431] ? __fget_files+0x29/0x470 [ 176.259197][ T7431] __sys_setsockopt+0x1a2/0x250 [ 176.264066][ T7431] __ia32_sys_setsockopt+0xb5/0xd0 [ 176.269192][ T7431] __do_fast_syscall_32+0xb4/0x110 [ 176.274321][ T7431] ? exc_page_fault+0x590/0x8c0 [ 176.279196][ T7431] do_fast_syscall_32+0x34/0x80 [ 176.284061][ T7431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.290409][ T7431] RIP: 0023:0xf739d579 [ 176.294488][ T7431] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 176.314134][ T7431] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 176.322566][ T7431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 176.330548][ T7431] RDX: 0000000000000040 RSI: 00000000200004c0 RDI: 0000000000000388 [ 176.338527][ T7431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.346504][ T7431] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.354482][ T7431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.362474][ T7431] [ 176.375068][ T7431] syz.3.576: vmalloc error: size 24, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 176.399581][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.3.576 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 176.409896][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 176.419980][ T7431] Call Trace: [ 176.423268][ T7431] [ 176.426210][ T7431] dump_stack_lvl+0x241/0x360 [ 176.430909][ T7431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.436120][ T7431] ? __pfx__printk+0x10/0x10 [ 176.440735][ T7431] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 176.447162][ T7431] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 176.453676][ T7431] warn_alloc+0x278/0x410 [ 176.458028][ T7431] ? __pfx_warn_alloc+0x10/0x10 [ 176.462898][ T7431] ? __get_vm_area_node+0x113/0x270 [ 176.468118][ T7431] ? __get_vm_area_node+0x261/0x270 [ 176.473376][ T7431] __vmalloc_node_range_noprof+0x3cb/0x13f0 [ 176.479300][ T7431] ? rcu_is_watching+0x15/0xb0 [ 176.484076][ T7431] ? trace_contention_end+0x3c/0x120 [ 176.489389][ T7431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.495739][ T7431] ? __pfx___mutex_lock+0x10/0x10 [ 176.500792][ T7431] ? xt_compat_init_offsets+0xe2/0x1c0 [ 176.506264][ T7431] vmalloc_noprof+0x79/0x90 [ 176.510788][ T7431] ? xt_compat_init_offsets+0xe2/0x1c0 [ 176.516259][ T7431] xt_compat_init_offsets+0xe2/0x1c0 [ 176.521557][ T7431] translate_compat_table+0x236/0x2eb0 [ 176.527050][ T7431] ? __pfx_translate_compat_table+0x10/0x10 [ 176.532962][ T7431] ? __might_fault+0xc6/0x120 [ 176.537658][ T7431] ? _copy_from_user+0xa6/0xe0 [ 176.542438][ T7431] ? copy_from_sockptr_offset+0x6b/0xb0 [ 176.547996][ T7431] do_ip6t_set_ctl+0xc2c/0x1270 [ 176.552865][ T7431] ? __pfx___might_resched+0x10/0x10 [ 176.558169][ T7431] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 176.563470][ T7431] ? __pfx_lock_release+0x10/0x10 [ 176.568522][ T7431] ? rcu_is_watching+0x15/0xb0 [ 176.573310][ T7431] ? trace_contention_end+0x3c/0x120 [ 176.578626][ T7431] ? __mutex_lock+0x2ef/0xd70 [ 176.583327][ T7431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.589333][ T7431] ? aa_sk_perm+0x96d/0xab0 [ 176.593878][ T7431] ? __pfx_aa_sk_perm+0x10/0x10 [ 176.598756][ T7431] nf_setsockopt+0x295/0x2c0 [ 176.603383][ T7431] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 176.609387][ T7431] do_sock_setsockopt+0x3af/0x720 [ 176.614437][ T7431] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 176.620005][ T7431] ? __fget_files+0x3f3/0x470 [ 176.624691][ T7431] ? __fget_files+0x29/0x470 [ 176.629302][ T7431] __sys_setsockopt+0x1a2/0x250 [ 176.634176][ T7431] __ia32_sys_setsockopt+0xb5/0xd0 [ 176.639314][ T7431] __do_fast_syscall_32+0xb4/0x110 [ 176.644463][ T7431] ? exc_page_fault+0x590/0x8c0 [ 176.649337][ T7431] do_fast_syscall_32+0x34/0x80 [ 176.654210][ T7431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.660562][ T7431] RIP: 0023:0xf739d579 [ 176.664641][ T7431] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 176.684281][ T7431] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 176.692721][ T7431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 176.700706][ T7431] RDX: 0000000000000040 RSI: 00000000200004c0 RDI: 0000000000000388 [ 176.708700][ T7431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.716697][ T7431] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.724767][ T7431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.732773][ T7431] [ 176.748853][ T7431] Mem-Info: [ 176.752131][ T7431] active_anon:4639 inactive_anon:0 isolated_anon:0 [ 176.752131][ T7431] active_file:13155 inactive_file:38233 isolated_file:0 [ 176.752131][ T7431] unevictable:768 dirty:137 writeback:0 [ 176.752131][ T7431] slab_reclaimable:9321 slab_unreclaimable:97434 [ 176.752131][ T7431] mapped:25938 shmem:1225 pagetables:794 [ 176.752131][ T7431] sec_pagetables:0 bounce:0 [ 176.752131][ T7431] kernel_misc_reclaimable:0 [ 176.752131][ T7431] free:1341556 free_pcp:180 free_cma:0 [ 176.778425][ T2635] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.828258][ T7431] Node 0 active_anon:18556kB inactive_anon:0kB active_file:52620kB inactive_file:152860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103752kB dirty:544kB writeback:0kB shmem:3364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10532kB pagetables:3176kB sec_pagetables:0kB all_unreclaimable? no [ 176.868645][ T7431] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 176.875033][ T2635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 176.908731][ T7431] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.937324][ T2635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.944706][ T7431] lowmem_reserve[]: 0 2465 2466 0 0 [ 176.947793][ T2635] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.955233][ T7431] Node 0 [ 176.964985][ T2635] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 176.970607][ T7431] DMA32 free:1416896kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18516kB inactive_anon:0kB active_file:52620kB inactive_file:152032kB unevictable:1536kB writepending:540kB present:3129332kB managed:2552480kB mlocked:0kB bounce:0kB free_pcp:888kB local_pcp:412kB free_cma:0kB [ 176.979909][ T2635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.016891][ T7431] lowmem_reserve[]: 0 0 0 0 0 [ 177.017072][ T2635] usb 5-1: Product: syz [ 177.023404][ T7431] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 177.025951][ T2635] usb 5-1: Manufacturer: syz [ 177.025981][ T2635] usb 5-1: SerialNumber: syz [ 177.065312][ T2635] usb 5-1: config 0 descriptor?? [ 177.070325][ T7431] lowmem_reserve[]: 0 0 0 0 0 [ 177.074418][ T2635] usb 5-1: ucan: probing device on interface #0 [ 177.083485][ T7431] Node 1 Normal free:3934392kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.083997][ T2635] usb 5-1: ucan: invalid endpoint configuration [ 177.121069][ T2635] usb 5-1: ucan: probe failed; try to update the device firmware [ 177.121255][ T7431] lowmem_reserve[]: 0 0 0 0 0 [ 177.146664][ T7431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.160090][ T7431] Node 0 DMA32: 215*4kB (UM) 402*8kB (UME) 467*16kB (UME) 171*32kB (UME) 233*64kB (UME) 36*128kB (UM) 18*256kB (UME) 14*512kB (UM) 8*1024kB (UM) 4*2048kB (UME) 330*4096kB (M) = 1416380kB [ 177.180409][ T7431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 177.192553][ T7431] Node 1 Normal: 174*4kB (UME) 50*8kB (UME) 29*16kB (UME) 157*32kB (UME) 82*64kB (UME) 25*128kB (UE) 10*256kB (UM) 10*512kB (UM) 4*1024kB (UM) 6*2048kB (UM) 951*4096kB (UME) = 3934392kB [ 177.211777][ T7431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.223212][ T7431] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 177.232876][ T7431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.242640][ T7431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 177.252152][ T7431] 52615 total pagecache pages [ 177.256847][ T7431] 0 pages in swap cache [ 177.261123][ T7431] Free swap = 124360kB [ 177.265295][ T7431] Total swap = 124996kB [ 177.269721][ T7431] 2097051 pages RAM [ 177.273545][ T7431] 0 pages HighMem/MovableOnly [ 177.278222][ T7431] 427081 pages reserved [ 177.282437][ T7431] 0 pages cma reserved [ 177.423473][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.442646][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.467589][ T5229] usb 5-1: USB disconnect, device number 21 [ 177.768614][ T5231] Bluetooth: hci5: command tx timeout [ 178.468516][ T5229] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 178.628601][ T5229] usb 5-1: Using ep0 maxpacket: 16 [ 178.641311][ T5229] usb 5-1: config 8 has an invalid interface number: 249 but max is 0 [ 178.661240][ T5229] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 178.684111][ T5229] usb 5-1: config 8 has no interface number 0 [ 178.704756][ T5229] usb 5-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 178.704800][ T5229] usb 5-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 178.704833][ T5229] usb 5-1: config 8 interface 249 has no altsetting 0 [ 178.708826][ T5229] usb 5-1: string descriptor 0 read error: -22 [ 178.708924][ T5229] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 178.708956][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.586091][ T5229] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 179.626376][ T5229] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 179.654868][ T5229] dib0700: firmware download failed at 7 with -71 [ 179.676341][ T5229] usb 5-1: USB disconnect, device number 22 [ 179.688626][ T46] misc userio: Buffer overflowed, userio client isn't keeping up [ 179.736342][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 180.001634][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 180.706723][ T7500] netlink: 'syz.3.599': attribute type 9 has an invalid length. [ 180.716369][ T7500] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.599'. [ 180.768694][ T5273] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 180.789292][ T7502] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 180.950835][ T5273] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 180.959565][ T5273] usb 1-1: config 0 has no interface number 0 [ 180.965801][ T5273] usb 1-1: config 0 interface 155 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 180.979203][ T5273] usb 1-1: New USB device found, idVendor=1bbb, idProduct=0203, bcdDevice=c0.03 [ 180.991457][ T46] input: PS/2 Generic Mouse as /devices/serio2/input/input13 [ 181.012121][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.042211][ T5273] usb 1-1: config 0 descriptor?? [ 181.067478][ T5273] option 1-1:0.155: GSM modem (1-port) converter detected [ 181.148446][ T5272] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 181.219270][ T46] psmouse serio2: Failed to enable mouse on [ 181.241766][ T7508] all: renamed from lo (while UP) [ 181.267581][ T9] usb 1-1: USB disconnect, device number 21 [ 181.279257][ T7508] netlink: 'syz.1.603': attribute type 10 has an invalid length. [ 181.296976][ T9] option 1-1:0.155: device disconnected [ 181.303929][ T7508] netlink: 184 bytes leftover after parsing attributes in process `syz.1.603'. [ 181.323042][ T5272] usb 4-1: Using ep0 maxpacket: 16 [ 181.347334][ T5272] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 181.357785][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.387515][ T5272] usb 4-1: config 0 descriptor?? [ 181.404562][ T5272] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 181.503389][ T7514] netlink: 'syz.1.606': attribute type 10 has an invalid length. [ 181.514773][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.522475][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.541425][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.548698][ T7514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.556138][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.563370][ T7514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.573709][ T7514] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.607407][ T5272] usb 4-1: Detected FT232A [ 181.631912][ T5272] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 181.662944][ T5272] usb 4-1: USB disconnect, device number 22 [ 181.678693][ T46] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 181.704604][ T5272] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.735855][ T5272] ftdi_sio 4-1:0.0: device disconnected [ 181.741686][ T5273] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 181.848449][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 181.856627][ T46] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 181.865144][ T46] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 181.875372][ T46] usb 3-1: config 8 has no interface number 0 [ 181.881813][ T46] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 181.892876][ T46] usb 3-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 181.905927][ T46] usb 3-1: config 8 interface 249 has no altsetting 0 [ 181.920751][ T46] usb 3-1: string descriptor 0 read error: -22 [ 181.927706][ T46] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 181.937830][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.947279][ T5273] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 181.956059][ T5273] usb 1-1: config 0 has no interface number 0 [ 181.962345][ T5273] usb 1-1: config 0 interface 155 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 181.985246][ T5273] usb 1-1: New USB device found, idVendor=1bbb, idProduct=0203, bcdDevice=c0.03 [ 181.995556][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.013626][ T5273] usb 1-1: config 0 descriptor?? [ 182.025062][ T5273] option 1-1:0.155: GSM modem (1-port) converter detected [ 182.401319][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 182.422194][ T5273] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 182.533081][ T46] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 182.553401][ T46] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 182.567204][ T46] dib0700: firmware download failed at 7 with -71 [ 182.581933][ T46] usb 3-1: USB disconnect, device number 32 [ 182.608290][ T5273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.618841][ T5273] usb 2-1: config 0 has no interfaces? [ 182.624444][ T5273] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.648904][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.668172][ T5273] usb 2-1: config 0 descriptor?? [ 182.886110][ T8] usb 2-1: USB disconnect, device number 24 [ 183.403362][ T7540] sctp: [Deprecated]: syz.2.614 (pid 7540) Use of int in max_burst socket option. [ 183.403362][ T7540] Use struct sctp_assoc_value instead [ 183.472591][ T7540] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.614'. [ 183.498288][ T7540] netlink: 61396 bytes leftover after parsing attributes in process `syz.2.614'. [ 183.503867][ T7546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.571929][ T46] usb 1-1: USB disconnect, device number 22 [ 183.580480][ T46] option 1-1:0.155: device disconnected [ 183.756310][ T5273] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 183.835934][ T7555] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 183.846883][ T7555] netlink: 'syz.0.620': attribute type 2 has an invalid length. [ 183.908598][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 183.943246][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 183.949192][ T5273] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 183.970109][ T5273] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 183.980008][ T5273] usb 2-1: can't read configurations, error -61 [ 184.048494][ T8] usb 4-1: device descriptor read/64, error -71 [ 184.128464][ T5273] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 184.221638][ T7567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (200000 ns). Using initial count to start timer. [ 184.288742][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 184.299112][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 184.309600][ T5273] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 184.359313][ T5273] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 184.366966][ T5273] usb 2-1: can't read configurations, error -61 [ 184.386345][ T7572] netlink: 'syz.2.625': attribute type 29 has an invalid length. [ 184.388705][ T5273] usb usb2-port1: attempt power cycle [ 184.398158][ T7572] netlink: 'syz.2.625': attribute type 29 has an invalid length. [ 184.428608][ T8] usb 4-1: device descriptor read/64, error -71 [ 184.468612][ T5272] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 184.539016][ T8] usb usb4-port1: attempt power cycle [ 184.620585][ T5272] usb 1-1: Using ep0 maxpacket: 16 [ 184.639783][ T5272] usb 1-1: config 8 has an invalid interface number: 249 but max is 0 [ 184.655092][ T5272] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 184.665652][ T5272] usb 1-1: config 8 has no interface number 0 [ 184.666769][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 184.672232][ T5272] usb 1-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 184.700594][ T5272] usb 1-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 184.714331][ T5272] usb 1-1: config 8 interface 249 has no altsetting 0 [ 184.724222][ T5272] usb 1-1: string descriptor 0 read error: -22 [ 184.733757][ T5272] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 184.743235][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.768471][ T5273] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 184.791800][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 184.798915][ T5273] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 184.810274][ T5273] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 184.817926][ T5273] usb 2-1: can't read configurations, error -61 [ 184.853752][ T5229] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.918509][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 184.926839][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 184.942403][ T8] usb 4-1: device descriptor read/8, error -71 [ 184.963535][ T5273] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 184.989431][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 185.004728][ T5273] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 185.010312][ T5229] usb 5-1: Using ep0 maxpacket: 16 [ 185.020877][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.021396][ T5273] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 185.032791][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.052298][ T5229] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 185.067056][ T5273] usb 2-1: can't read configurations, error -61 [ 185.067858][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.084843][ T9] usb 3-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config [ 185.087735][ T5273] usb usb2-port1: unable to enumerate USB device [ 185.109562][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.159650][ T9] usb 3-1: New USB device found, idVendor=067b, idProduct=25a1, bcdDevice=52.fd [ 185.170295][ T5229] usb 5-1: config 0 descriptor?? [ 185.175363][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.188169][ T9] usb 3-1: Product: syz [ 185.188456][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 185.204338][ T9] usb 3-1: Manufacturer: syz [ 185.210221][ T9] usb 3-1: SerialNumber: syz [ 185.220332][ T8] usb 4-1: device descriptor read/8, error -71 [ 185.257928][ T9] usb 3-1: config 0 descriptor?? [ 185.325692][ T5272] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 185.329157][ T8] usb usb4-port1: unable to enumerate USB device [ 185.355144][ T5272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 185.365252][ T5272] dib0700: firmware download failed at 7 with -71 [ 185.377856][ T5272] usb 1-1: USB disconnect, device number 23 [ 185.405243][ T5229] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0935.0009/input/input14 [ 185.479497][ T7587] ip6gretap0: entered promiscuous mode [ 185.486510][ T7587] batadv_slave_1: entered promiscuous mode [ 185.502448][ T5229] uclogic 0003:28BD:0935.0009: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.4-1/input0 [ 185.559803][ T9] usb 3-1: USB disconnect, device number 33 [ 185.600945][ T8] usb 5-1: USB disconnect, device number 23 [ 186.398860][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 186.560028][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 186.594325][ T8] usb 3-1: config index 0 descriptor too short (expected 31780, got 36) [ 186.610076][ T8] usb 3-1: config 27 has too many interfaces: 185, using maximum allowed: 32 [ 186.624949][ T8] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 186.667277][ T8] usb 3-1: config 27 has 1 interface, different from the descriptor's value: 185 [ 186.702400][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=86.ae [ 186.739205][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.747274][ T8] usb 3-1: Product: syz [ 186.750642][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 186.768067][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 186.789935][ T8] usb 3-1: Manufacturer: syz [ 186.794608][ T8] usb 3-1: SerialNumber: syz [ 186.826611][ T7614] ipvlan2: entered allmulticast mode [ 186.848708][ T7614] veth0_vlan: entered allmulticast mode [ 186.995531][ T7620] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 187.005471][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.642'. [ 187.031049][ T8] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 187.043981][ T8] gspca_sn9c20x: Write register 1000 failed -71 [ 187.067289][ T8] gspca_sn9c20x: Device initialization failed [ 187.114128][ T8] gspca_sn9c20x 3-1:27.0: probe with driver gspca_sn9c20x failed with error -71 [ 187.167530][ T8] usb 3-1: USB disconnect, device number 34 [ 188.218645][ T5272] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 188.249242][ T5273] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 188.461050][ T5272] usb 5-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 188.470550][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.489384][ T5273] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 188.501946][ T5273] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.520973][ T5272] usb 5-1: Product: syz [ 188.539672][ T5272] usb 5-1: Manufacturer: syz [ 188.544293][ T5272] usb 5-1: SerialNumber: syz [ 188.560316][ T5273] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 188.586637][ T5272] usb 5-1: config 0 descriptor?? [ 188.617504][ T5273] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.643098][ T5272] r8712u: register rtl8712_netdev_ops to netdev_ops [ 188.656968][ T5272] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 188.667337][ T5273] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 188.688456][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.729601][ T5273] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.737050][ T5273] usb 3-1: invalid MIDI out EP 0 [ 188.798587][ T46] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 189.009033][ T6782] udevd[6782]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.035081][ T7681] FAULT_INJECTION: forcing a failure. [ 189.035081][ T7681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.041985][ T5273] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 189.062167][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.1.665 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 189.072475][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.082551][ T7681] Call Trace: [ 189.085868][ T7681] [ 189.088816][ T7681] dump_stack_lvl+0x241/0x360 [ 189.093558][ T7681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.098821][ T7681] ? __pfx__printk+0x10/0x10 [ 189.103464][ T7681] ? __pfx_lock_release+0x10/0x10 [ 189.108532][ T7681] should_fail_ex+0x3b0/0x4e0 [ 189.113231][ T7681] _copy_from_user+0x2f/0xe0 [ 189.117850][ T7681] __sys_bpf+0x1a4/0x810 [ 189.122152][ T7681] ? __pfx___sys_bpf+0x10/0x10 [ 189.126969][ T7681] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.133339][ T7681] __ia32_sys_bpf+0x7c/0x90 [ 189.137894][ T7681] __do_fast_syscall_32+0xb4/0x110 [ 189.143029][ T7681] ? exc_page_fault+0x590/0x8c0 [ 189.147925][ T7681] do_fast_syscall_32+0x34/0x80 [ 189.152810][ T7681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.159163][ T7681] RIP: 0023:0xf7f97579 [ 189.163261][ T7681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 189.182881][ T7681] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 189.191315][ T7681] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040 [ 189.199307][ T7681] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.207289][ T7681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.215268][ T7681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.223255][ T7681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.231252][ T7681] [ 189.234422][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.255370][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 189.265238][ T46] usb 4-1: not running at top speed; connect to a high speed hub [ 189.284116][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.323239][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.352342][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.379834][ T5272] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 189.386670][ T5272] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 189.397130][ T7686] program syz.4.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.408781][ T5272] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 189.422905][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.432623][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.458689][ T7655] bridge_slave_0: default FDB implementation only supports local addresses [ 189.478419][ T46] usb 4-1: Product: syz [ 189.488806][ T46] usb 4-1: Manufacturer: syz [ 189.494799][ T46] usb 4-1: SerialNumber: syz [ 189.540261][ T8] usb 3-1: USB disconnect, device number 35 [ 189.625377][ T7686] bond0: entered promiscuous mode [ 189.630788][ T7686] bond_slave_0: entered promiscuous mode [ 189.636983][ T7686] bond_slave_1: entered promiscuous mode [ 189.947544][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.989297][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.095081][ T25] usb 5-1: USB disconnect, device number 24 [ 190.361395][ T46] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 190.389496][ T46] cdc_ncm 4-1:1.0: bind() failure [ 190.423561][ T46] usb 4-1: USB disconnect, device number 27 [ 190.533136][ T5272] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 190.722854][ T5272] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.775535][ T5272] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 190.818480][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.857840][ T5272] usb 1-1: config 0 descriptor?? [ 190.866425][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 190.866449][ T29] audit: type=1326 audit(1727292184.497:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 190.909169][ T7735] FAULT_INJECTION: forcing a failure. [ 190.909169][ T7735] name failslab, interval 1, probability 0, space 0, times 0 [ 190.922555][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 190.924604][ T29] audit: type=1326 audit(1727292184.497:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 190.953212][ T46] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 190.962503][ T29] audit: type=1326 audit(1727292184.537:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 190.984420][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 190.994092][ T29] audit: type=1326 audit(1727292184.547:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 191.019985][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.4.674 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 191.030359][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 191.040453][ T7735] Call Trace: [ 191.043761][ T7735] [ 191.046873][ T7735] dump_stack_lvl+0x241/0x360 [ 191.051575][ T7735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.056790][ T7735] ? __pfx__printk+0x10/0x10 [ 191.061397][ T7735] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 191.066891][ T7735] ? __pfx___might_resched+0x10/0x10 [ 191.072195][ T7735] ? audit_log_format+0xdb/0x130 [ 191.077414][ T7735] should_fail_ex+0x3b0/0x4e0 [ 191.082133][ T7735] should_failslab+0xac/0x100 [ 191.086819][ T7735] ? audit_log_d_path+0xbb/0x310 [ 191.091772][ T7735] __kmalloc_cache_noprof+0x6c/0x2c0 [ 191.097072][ T7735] ? audit_log_n_string+0x397/0x5f0 [ 191.102281][ T7735] audit_log_d_path+0xbb/0x310 [ 191.107053][ T7735] ? get_mm_exe_file+0x1c/0x170 [ 191.111917][ T7735] audit_log_d_path_exe+0x42/0x70 [ 191.116951][ T7735] audit_log_task+0x219/0x2f0 [ 191.121638][ T7735] ? __pfx_audit_log_task+0x10/0x10 [ 191.126844][ T7735] ? __pfx___cant_migrate+0x10/0x10 [ 191.132059][ T7735] audit_seccomp+0x7b/0x1f0 [ 191.136572][ T7735] __seccomp_filter+0xb38/0x1fe0 [ 191.141564][ T7735] ? ksys_write+0x229/0x2b0 [ 191.146119][ T7735] ? vfs_write+0x7bf/0xc90 [ 191.150555][ T7735] ? __pfx___seccomp_filter+0x10/0x10 [ 191.155955][ T7735] ? __mutex_unlock_slowpath+0x21d/0x750 [ 191.161606][ T7735] ? __pfx_vfs_write+0x10/0x10 [ 191.166408][ T7735] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.172405][ T7735] ? __fget_files+0x3f3/0x470 [ 191.177119][ T7735] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.183473][ T7735] ? __secure_computing+0x125/0x370 [ 191.188694][ T7735] syscall_trace_enter+0xa8/0x150 [ 191.193746][ T7735] __do_fast_syscall_32+0x9b/0x110 [ 191.198875][ T7735] ? exc_page_fault+0x590/0x8c0 [ 191.203761][ T7735] do_fast_syscall_32+0x34/0x80 [ 191.208627][ T7735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.214986][ T7735] RIP: 0023:0xf743d579 [ 191.219071][ T7735] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 191.238771][ T7735] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 00000000000000f2 [ 191.247199][ T7735] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000008 [ 191.255181][ T7735] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.263174][ T7735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.271160][ T7735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.279229][ T7735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.287226][ T7735] [ 191.298117][ T29] audit: type=1326 audit(1727292184.547:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 191.319754][ T29] audit: type=1326 audit(1727292184.927:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 191.328147][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.341489][ T29] audit: type=1326 audit(1727292184.927:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 191.341535][ T29] audit: type=1326 audit(1727292184.927:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 191.341575][ T29] audit: type=1326 audit(1727292184.927:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 191.341624][ T29] audit: type=1326 audit(1727292184.927:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 191.379245][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 191.396335][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.397827][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 191.465041][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.474144][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 191.485475][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 191.505241][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 191.514631][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.526032][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.536437][ T8] usb 3-1: config 0 descriptor?? [ 191.541974][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.555059][ T8] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 191.563373][ T9] usb 2-1: Product: syz [ 191.564845][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 191.567600][ T9] usb 2-1: Manufacturer: syz [ 191.596990][ T46] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 191.607856][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.610703][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 191.627906][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 191.638163][ T46] usb 4-1: Product: syz [ 191.643159][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 191.652402][ T46] usb 4-1: Manufacturer: syz [ 191.658498][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 191.670792][ T46] usb 4-1: SerialNumber: syz [ 191.699417][ T46] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 191.774703][ T8] usb 3-1: USB disconnect, device number 36 [ 191.887714][ T7748] sch_tbf: peakrate 99188736 is lower than or equals to rate 609633705495981855 ! [ 192.462869][ T7764] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 192.515033][ T5272] usb 2-1: USB disconnect, device number 29 [ 192.605216][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 192.614473][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 192.640105][ T4667] bcm5974 4-1:1.0: could not read from device [ 192.673488][ T4667] bcm5974 4-1:1.0: could not read from device [ 192.684203][ T46] usb 4-1: USB disconnect, device number 28 [ 192.728806][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 192.772682][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 192.868420][ T7773] FAULT_INJECTION: forcing a failure. [ 192.868420][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 192.883515][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.3.683 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 192.893815][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 192.903897][ T7773] Call Trace: [ 192.907193][ T7773] [ 192.910174][ T7773] dump_stack_lvl+0x241/0x360 [ 192.914891][ T7773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.920105][ T7773] ? __pfx__printk+0x10/0x10 [ 192.924710][ T7773] ? __kmalloc_noprof+0xb0/0x400 [ 192.929662][ T7773] ? __pfx___might_resched+0x10/0x10 [ 192.934964][ T7773] should_fail_ex+0x3b0/0x4e0 [ 192.939663][ T7773] ? bpf_map_meta_alloc+0x196/0x770 [ 192.944880][ T7773] should_failslab+0xac/0x100 [ 192.949569][ T7773] ? bpf_map_meta_alloc+0x196/0x770 [ 192.954784][ T7773] __kmalloc_noprof+0xd8/0x400 [ 192.959566][ T7773] bpf_map_meta_alloc+0x196/0x770 [ 192.964610][ T7773] htab_of_map_alloc+0x38/0xc0 [ 192.969395][ T7773] map_create+0x946/0x11c0 [ 192.973828][ T7773] __sys_bpf+0x6d1/0x810 [ 192.978086][ T7773] ? __pfx___sys_bpf+0x10/0x10 [ 192.982872][ T7773] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.989232][ T7773] __ia32_sys_bpf+0x7c/0x90 [ 192.993759][ T7773] __do_fast_syscall_32+0xb4/0x110 [ 192.998891][ T7773] ? exc_page_fault+0x590/0x8c0 [ 193.003781][ T7773] do_fast_syscall_32+0x34/0x80 [ 193.008671][ T7773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.015028][ T7773] RIP: 0023:0xf739d579 [ 193.019109][ T7773] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 193.038852][ T7773] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 193.047291][ T7773] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040 [ 193.055286][ T7773] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.063272][ T7773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.071256][ T7773] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.079239][ T7773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.087237][ T7773] [ 193.098514][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 193.136015][ T25] usb 5-1: config 8 has an invalid interface number: 249 but max is 0 [ 193.156238][ T25] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 193.166976][ T46] usb 1-1: USB disconnect, device number 24 [ 193.183957][ T25] usb 5-1: config 8 has no interface number 0 [ 193.223768][ T25] usb 5-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 193.235928][ T25] usb 5-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 193.250830][ T25] usb 5-1: config 8 interface 249 has no altsetting 0 [ 193.274688][ T25] usb 5-1: string descriptor 0 read error: -22 [ 193.283846][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 193.315435][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.700222][ T5291] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 193.712369][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.688'. [ 193.891688][ T5291] usb 4-1: Using ep0 maxpacket: 16 [ 193.940094][ T5291] usb 4-1: config 8 has an invalid interface number: 249 but max is 0 [ 193.948815][ T5291] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 193.988440][ T5291] usb 4-1: config 8 has no interface number 0 [ 194.001676][ T5291] usb 4-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 194.025759][ T5291] usb 4-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 194.049904][ T7796] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.118516][ T5291] usb 4-1: config 8 interface 249 has no altsetting 0 [ 194.160645][ T5291] usb 4-1: string descriptor 0 read error: -22 [ 194.167065][ T5291] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 194.209994][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.690'. [ 194.241374][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.355943][ T7795] bridge_slave_1: left allmulticast mode [ 194.404635][ T7795] bridge_slave_1: left promiscuous mode [ 194.417153][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.565378][ T7795] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 194.601327][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.618853][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.821219][ T25] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 194.903645][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 194.948692][ T25] dib0700: firmware download failed at 7 with -71 [ 194.986152][ T25] usb 5-1: USB disconnect, device number 25 [ 195.108495][ T5229] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 195.298451][ T5229] usb 2-1: Using ep0 maxpacket: 16 [ 195.330537][ T5229] usb 2-1: config 0 has no interfaces? [ 195.337968][ T5229] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.352168][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.369286][ T5229] usb 2-1: SerialNumber: syz [ 195.388982][ T5229] usb 2-1: config 0 descriptor?? [ 195.394833][ T7804] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 195.514068][ T5291] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 195.559480][ T5291] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 195.586809][ T5291] dib0700: firmware download failed at 7 with -71 [ 195.638509][ T5291] usb 4-1: USB disconnect, device number 29 [ 195.741933][ T5229] usb 2-1: USB disconnect, device number 30 [ 195.817250][ T7818] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.698'. [ 195.826941][ T7818] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 195.878466][ T2635] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 195.993397][ T7775] coredump: 443(syz.2.684): written to core: VMAs: 34, size 93495296; core: 55983299 bytes, pos 93503488 [ 196.068461][ T2635] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.077149][ T2635] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 196.094268][ T2635] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.118042][ T2635] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 196.170256][ T2635] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 196.194955][ T2635] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.214277][ T2635] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.232423][ T2635] usb 5-1: Product: syz [ 196.236665][ T2635] usb 5-1: Manufacturer: syz [ 196.268537][ T2635] cdc_wdm 5-1:1.0: skipping garbage [ 196.277666][ T2635] cdc_wdm 5-1:1.0: skipping garbage [ 196.308627][ T2635] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 196.314607][ T2635] cdc_wdm 5-1:1.0: Unknown control protocol [ 196.524386][ T7835] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 196.873416][ T5231] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 197.092487][ T2635] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 197.127148][ T25] usb 5-1: USB disconnect, device number 26 [ 197.253536][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 197.264446][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 197.273680][ T2635] usb 1-1: Using ep0 maxpacket: 16 [ 197.296210][ T2635] usb 1-1: config 8 has an invalid interface number: 249 but max is 0 [ 197.304880][ T2635] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 197.320234][ T7855] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.329423][ T7855] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.338159][ T7855] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.347006][ T7855] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.361832][ T2635] usb 1-1: config 8 has no interface number 0 [ 197.367991][ T2635] usb 1-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 197.383345][ T7855] vxlan0: entered promiscuous mode [ 197.394814][ T2635] usb 1-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 197.428719][ T2635] usb 1-1: config 8 interface 249 has no altsetting 0 [ 197.450999][ T2635] usb 1-1: string descriptor 0 read error: -22 [ 197.462772][ T2635] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 197.479005][ T2635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.601540][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 197.624795][ T46] IPVS: starting estimator thread 0... [ 197.749988][ T7869] IPVS: using max 18 ests per chain, 43200 per kthread [ 197.776269][ T8] usb 3-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 197.788538][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.806130][ T8] usb 3-1: Product: syz [ 197.859918][ T8] usb 3-1: Manufacturer: syz [ 197.869009][ T8] usb 3-1: SerialNumber: syz [ 197.897759][ T8] usb 3-1: config 0 descriptor?? [ 197.908548][ T46] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 197.927577][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 197.945383][ T8] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 198.118463][ T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 198.138422][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 198.154200][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.214053][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 198.236679][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.255877][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 198.288494][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 198.296112][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.306540][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.324113][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 198.337233][ T29] audit: type=1326 audit(1727292191.967:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.719" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf743d579 code=0x0 [ 198.359209][ T46] usb 4-1: SerialNumber: syz [ 198.365732][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 198.375383][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.442825][ T25] usb 2-1: Product: syz [ 198.447966][ T7868] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 198.465253][ T25] usb 2-1: Manufacturer: syz [ 198.476206][ T25] usb 2-1: SerialNumber: syz [ 198.481527][ T7880] program syz.2.705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.486065][ T25] usb 2-1: config 0 descriptor?? [ 198.574613][ T7880] bond0: entered promiscuous mode [ 198.581179][ T7880] bond_slave_0: entered promiscuous mode [ 198.587943][ T7880] bond_slave_1: entered promiscuous mode [ 198.708742][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.732158][ T8] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 198.742849][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.763329][ T8] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 198.787014][ T25] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 198.816782][ T25] usb 2-1: No valid video chain found. [ 198.824512][ T8] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 198.853467][ T25] usb 2-1: USB disconnect, device number 31 [ 198.891949][ T46] usb 4-1: USB disconnect, device number 30 [ 199.083698][ T2635] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 199.103452][ T2635] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 199.113104][ T2635] dib0700: firmware download failed at 7 with -71 [ 199.139168][ T2635] usb 1-1: USB disconnect, device number 25 [ 199.595034][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 199.612896][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 199.718663][ T46] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 199.911283][ T2635] usb 3-1: USB disconnect, device number 37 [ 199.959687][ T46] usb 2-1: no configurations [ 199.964352][ T46] usb 2-1: can't read configurations, error -22 [ 200.059561][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 200.128547][ T46] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 200.231502][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.268507][ T5291] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 200.279443][ T25] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.304540][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.314179][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.322983][ T46] usb 2-1: no configurations [ 200.327925][ T46] usb 2-1: can't read configurations, error -22 [ 200.342307][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.350437][ T46] usb usb2-port1: attempt power cycle [ 200.356489][ T25] usb 4-1: invalid MIDI out EP 0 [ 200.452238][ T25] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 200.462639][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.473261][ T5432] udevd[5432]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.490341][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.510328][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.528012][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.554088][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.583506][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.708511][ T46] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 200.734756][ T46] usb 2-1: no configurations [ 200.739706][ T46] usb 2-1: can't read configurations, error -22 [ 200.806451][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.816034][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.878417][ T46] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 200.909792][ T46] usb 2-1: no configurations [ 200.914474][ T46] usb 2-1: can't read configurations, error -22 [ 200.921236][ T46] usb usb2-port1: unable to enumerate USB device [ 201.129844][ T5229] usb 4-1: USB disconnect, device number 31 [ 201.422701][ T7940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.497174][ T7940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.507516][ T5271] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 201.569473][ T7940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.590352][ T5229] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 201.679049][ T5271] usb 3-1: Using ep0 maxpacket: 16 [ 201.686970][ T5271] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 201.696421][ T5271] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 201.707561][ T5271] usb 3-1: config 8 has no interface number 0 [ 201.714149][ T5271] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 201.725864][ T5271] usb 3-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 201.747737][ T5271] usb 3-1: config 8 interface 249 has no altsetting 0 [ 201.756239][ T5229] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.759973][ T5271] usb 3-1: string descriptor 0 read error: -22 [ 201.765394][ T5229] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.781963][ T5229] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.784523][ T5271] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 201.792931][ T5229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 201.814012][ T5229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 201.825687][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.860788][ T5229] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.888455][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.898454][ T5229] usb 4-1: Product: syz [ 201.902719][ T5229] usb 4-1: Manufacturer: syz [ 201.930634][ T5229] cdc_wdm 4-1:1.0: skipping garbage [ 201.936027][ T5229] cdc_wdm 4-1:1.0: skipping garbage [ 201.961066][ T5229] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 201.967346][ T5229] cdc_wdm 4-1:1.0: Unknown control protocol [ 202.122026][ T7919] coredump: 154(syz.0.726): written to core: VMAs: 33, size 93491200; core: 56003718 bytes, pos 93499392 [ 202.538650][ T5291] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.591288][ T5291] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 202.620830][ T5291] usb 1-1: can't read configurations, error -71 [ 202.896905][ T7952] fuse: Bad value for 'fd' [ 203.170832][ T46] usb 4-1: USB disconnect, device number 32 [ 203.312748][ T5271] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 203.329830][ T5271] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 203.362773][ T5271] dib0700: firmware download failed at 7 with -71 [ 203.385436][ T5271] usb 3-1: USB disconnect, device number 38 [ 203.598464][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 203.769071][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 203.780708][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 203.789437][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.803468][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.824229][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.857232][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.873192][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.945029][ T8] usb 2-1: config 0 descriptor?? [ 204.481615][ T8] HID 045e:07da: Invalid code 65791 type 1 [ 204.492147][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input17 [ 204.534372][ T8] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 204.621300][ T7997] program syz.4.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.633964][ T7997] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.690109][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 204.690127][ T8] usb 2-1: USB disconnect, device number 36 [ 205.606845][ T29] audit: type=1326 audit(1727292199.237:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.674006][ T29] audit: type=1326 audit(1727292199.237:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.728600][ T29] audit: type=1326 audit(1727292199.237:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.751885][ T29] audit: type=1326 audit(1727292199.237:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.774806][ T5271] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 205.793851][ T29] audit: type=1326 audit(1727292199.237:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.817953][ T29] audit: type=1326 audit(1727292199.267:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.840455][ T29] audit: type=1326 audit(1727292199.267:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.858496][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 205.865103][ T29] audit: type=1326 audit(1727292199.267:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.920116][ T5271] usb 4-1: device descriptor read/64, error -71 [ 205.942037][ T29] audit: type=1326 audit(1727292199.267:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 205.964868][ T29] audit: type=1326 audit(1727292199.267:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 206.074213][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 206.100627][ T8] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 206.109033][ T8] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 206.117243][ T8] usb 5-1: config 0 has no interface number 1 [ 206.124608][ T8] usb 5-1: config 0 has no interface number 2 [ 206.131071][ T8] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 206.142501][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.160151][ T5271] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 206.170001][ T8] usb 5-1: config 0 descriptor?? [ 206.426473][ T8] qcserial 5-1:0.6: Qualcomm USB modem converter detected [ 206.459260][ T5271] usb 4-1: device descriptor read/64, error -71 [ 206.492068][ T8034] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 206.537290][ T8033] binder_alloc: 8024: binder_alloc_buf, no vma [ 206.569410][ T5271] usb usb4-port1: attempt power cycle [ 206.637211][ T46] usb 5-1: USB disconnect, device number 27 [ 206.645412][ T46] qcserial 5-1:0.6: device disconnected [ 206.900769][ T8042] FAULT_INJECTION: forcing a failure. [ 206.900769][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 206.917303][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.1.765 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 206.918860][ T5271] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 206.927671][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.927690][ T8042] Call Trace: [ 206.927700][ T8042] [ 206.927711][ T8042] dump_stack_lvl+0x241/0x360 [ 206.927750][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.927779][ T8042] ? __pfx__printk+0x10/0x10 [ 206.927809][ T8042] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 206.972584][ T8042] ? __pfx___might_resched+0x10/0x10 [ 206.977913][ T8042] should_fail_ex+0x3b0/0x4e0 [ 206.982611][ T8042] should_failslab+0xac/0x100 [ 206.987302][ T8042] ? __alloc_skb+0x1c3/0x440 [ 206.991911][ T8042] kmem_cache_alloc_node_noprof+0x71/0x320 [ 206.997736][ T8042] __alloc_skb+0x1c3/0x440 [ 207.002179][ T8042] ? __pfx___alloc_skb+0x10/0x10 [ 207.007131][ T8042] ? netlink_autobind+0xd6/0x2f0 [ 207.012081][ T8042] ? netlink_autobind+0x2b0/0x2f0 [ 207.017124][ T8042] netlink_sendmsg+0x638/0xcb0 [ 207.021933][ T8042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.027323][ T8042] ? __pfx_lock_release+0x10/0x10 [ 207.032364][ T8042] ? aa_sock_msg_perm+0x91/0x160 [ 207.037318][ T8042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.042615][ T8042] __sock_sendmsg+0x221/0x270 [ 207.047396][ T8042] ____sys_sendmsg+0x52a/0x7e0 [ 207.052185][ T8042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.057523][ T8042] __sys_sendmsg+0x292/0x380 [ 207.062140][ T8042] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.067277][ T8042] ? __pfx_vfs_write+0x10/0x10 [ 207.072102][ T8042] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 207.078728][ T8042] ? lockdep_hardirqs_on+0x99/0x150 [ 207.083944][ T8042] __do_fast_syscall_32+0xb4/0x110 [ 207.089076][ T8042] ? exc_page_fault+0x590/0x8c0 [ 207.093957][ T8042] do_fast_syscall_32+0x34/0x80 [ 207.098844][ T8042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.105202][ T8042] RIP: 0023:0xf7f97579 [ 207.109287][ T8042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.128967][ T8042] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 207.137514][ T8042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001080 [ 207.145514][ T8042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.153783][ T8042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.162036][ T8042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.170026][ T8042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.178033][ T8042] [ 207.189310][ T5271] usb 4-1: device descriptor read/8, error -71 [ 207.337625][ T8048] xt_CONNSECMARK: invalid mode: 0 [ 207.421935][ T8054] IPVS: sync thread started: state = BACKUP, mcast_ifn = virt_wifi0, syncid = 0, id = 0 [ 207.448757][ T5271] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 207.486181][ T5271] usb 4-1: device descriptor read/8, error -71 [ 207.598634][ T5271] usb usb4-port1: unable to enumerate USB device [ 207.599461][ T5291] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 207.728666][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 207.758612][ T5291] usb 1-1: Using ep0 maxpacket: 16 [ 207.771003][ T5291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.785652][ T5291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.803324][ T5291] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 207.814038][ T5291] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 207.826413][ T5291] usb 1-1: Product: syz [ 207.831704][ T5291] usb 1-1: Manufacturer: syz [ 207.840323][ T5291] usb 1-1: config 0 descriptor?? [ 207.888483][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 207.897760][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 207.907172][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.915406][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 207.925293][ T8] usb 2-1: Product: syz [ 207.929836][ T8] usb 2-1: Manufacturer: syz [ 207.935897][ T8] usb 2-1: SerialNumber: syz [ 207.946459][ T8] usb 2-1: config 0 descriptor?? [ 207.955120][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 208.068648][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 208.077892][ T9] usb 5-1: config 8 has an invalid interface number: 249 but max is 0 [ 208.086793][ T9] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 208.097436][ T9] usb 5-1: config 8 has no interface number 0 [ 208.104287][ T9] usb 5-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 208.115717][ T9] usb 5-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 208.129430][ T9] usb 5-1: config 8 interface 249 has no altsetting 0 [ 208.149002][ T9] usb 5-1: string descriptor 0 read error: -22 [ 208.155886][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 208.165814][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.264805][ T5291] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0xd [ 208.278144][ T5291] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 208.690875][ T5229] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 208.812413][ T9] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 208.814090][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 208.827005][ T9] dib0700: firmware download failed at 7 with -71 [ 208.832404][ T9] usb 5-1: USB disconnect, device number 28 [ 208.877548][ T5229] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 208.877588][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.881288][ T5229] usb 3-1: config 0 descriptor?? [ 208.913793][ T5229] gspca_main: spca508-2.14.0 probing 8086:0110 [ 209.068948][ T8] gspca_sonixj: reg_r err -110 [ 209.074015][ T8] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 209.086765][ T5229] gspca_spca508: reg_read err -32 [ 209.104883][ T5291] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device [ 209.122449][ T5291] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse [ 209.142671][ T5291] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -71 [ 209.155381][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 209.159925][ T5291] usb 1-1: USB disconnect, device number 28 [ 209.191596][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 209.228067][ T5229] gspca_spca508: reg_read err -71 [ 209.237403][ T5229] gspca_spca508: reg_read err -71 [ 209.260026][ T5229] gspca_spca508: reg_read err -71 [ 209.277263][ T5229] gspca_spca508: reg_read err -71 [ 209.292034][ T5229] gspca_spca508: reg write: error -71 [ 209.326010][ T5229] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 209.366754][ T5229] usb 3-1: USB disconnect, device number 39 [ 209.517449][ T8084] netlink: 184 bytes leftover after parsing attributes in process `syz.2.779'. [ 209.543245][ T8080] binder_alloc: 8071: binder_alloc_buf, no vma [ 209.868692][ T5229] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 209.878543][ T46] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 210.056204][ T5229] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.067646][ T5229] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 210.068946][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 210.079603][ T5229] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.087021][ T8100] pim6reg: entered allmulticast mode [ 210.094051][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.101646][ T46] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.122075][ T46] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.136470][ T8089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.151495][ T5229] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.152255][ T2635] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 210.172540][ T46] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.215407][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.228944][ T46] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 210.238123][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.267607][ T46] usb 5-1: config 0 descriptor?? [ 210.338481][ T2635] usb 1-1: device descriptor read/64, error -71 [ 210.383678][ T5229] usb 3-1: USB disconnect, device number 40 [ 210.524899][ T5291] usb 2-1: USB disconnect, device number 37 [ 210.601898][ T2635] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 210.678570][ T5273] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 210.701605][ T46] hid-generic 0003:045E:05DA.000C: ignoring exceeding usage max [ 210.712099][ T46] hid-generic 0003:045E:05DA.000C: item fetching failed at offset 18/34 [ 210.721509][ T46] hid-generic 0003:045E:05DA.000C: probe with driver hid-generic failed with error -22 [ 210.749102][ T2635] usb 1-1: device descriptor read/64, error -71 [ 210.828443][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 210.835317][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.850474][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.860407][ T5273] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 210.869869][ T2635] usb usb1-port1: attempt power cycle [ 210.877572][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.887426][ T5273] usb 4-1: config 0 descriptor?? [ 210.898553][ T5291] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 211.058554][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 211.074401][ T5291] usb 2-1: config 8 has an invalid interface number: 249 but max is 0 [ 211.088469][ T5291] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 211.108532][ T5291] usb 2-1: config 8 has no interface number 0 [ 211.116669][ T5291] usb 2-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 211.128724][ T5291] usb 2-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 211.142186][ T5291] usb 2-1: config 8 interface 249 has no altsetting 0 [ 211.152873][ T5291] usb 2-1: string descriptor 0 read error: -22 [ 211.159378][ T5291] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 211.168839][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.220095][ T2635] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 211.249225][ T2635] usb 1-1: device descriptor read/8, error -71 [ 211.366177][ T5273] elecom 0003:056E:00FC.000D: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.3-1/input0 [ 211.509706][ T2635] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 211.543084][ T2635] usb 1-1: device descriptor read/8, error -71 [ 211.569780][ T5271] usb 4-1: USB disconnect, device number 37 [ 211.659642][ T2635] usb usb1-port1: unable to enumerate USB device [ 211.729186][ T5229] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 211.876596][ T8123] --map-set only usable from mangle table [ 211.918572][ T5229] usb 3-1: Using ep0 maxpacket: 16 [ 211.925728][ T5229] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 211.945033][ T5229] usb 3-1: config 0 has an invalid interface number: 43 but max is 0 [ 211.959624][ T5229] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 211.976275][ T5229] usb 3-1: config 0 has no interface number 0 [ 211.991580][ T5229] usb 3-1: config 0 has no interface number 1 [ 212.002425][ T5229] usb 3-1: config 0 interface 249 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 212.015273][ T5229] usb 3-1: config 0 interface 249 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.032729][ T5229] usb 3-1: too many endpoints for config 0 interface 43 altsetting 115: 249, using maximum allowed: 30 [ 212.063385][ T5229] usb 3-1: config 0 interface 43 altsetting 115 has 1 endpoint descriptor, different from the interface descriptor's value: 249 [ 212.095393][ T5229] usb 3-1: config 0 interface 249 has no altsetting 0 [ 212.108283][ T5291] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 212.120062][ T5229] usb 3-1: config 0 interface 43 has no altsetting 0 [ 212.132537][ T5291] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 212.144625][ T5291] dib0700: firmware download failed at 7 with -71 [ 212.155378][ T5229] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=a5.06 [ 212.186267][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.195731][ T5291] usb 2-1: USB disconnect, device number 38 [ 212.204112][ T5229] usb 3-1: Product: syz [ 212.210507][ T5229] usb 3-1: Manufacturer: syz [ 212.215514][ T5229] usb 3-1: SerialNumber: syz [ 212.232887][ T5229] usb 3-1: config 0 descriptor?? [ 212.451847][ T8134] xt_CT: No such helper "netbios-ns" [ 212.454593][ T5229] ljca 3-1:0.249: bulk endpoints not found [ 212.480594][ T5229] ljca 3-1:0.43: bulk endpoints not found [ 212.508626][ T5229] usb 3-1: USB disconnect, device number 41 [ 212.754980][ T8142] netlink: 48 bytes leftover after parsing attributes in process `syz.3.801'. [ 212.791586][ T8142] veth1_macvtap: left promiscuous mode [ 212.828116][ T8145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.802'. [ 212.859177][ T8145] veth1_macvtap: left promiscuous mode [ 212.877581][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 212.900191][ T8146] netlink: 72 bytes leftover after parsing attributes in process `syz.3.801'. [ 212.909736][ T8146] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 212.938827][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 212.969448][ T8147] netlink: 72 bytes leftover after parsing attributes in process `syz.1.802'. [ 213.012903][ T8147] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 213.075224][ T8150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.803'. [ 213.117485][ T8153] FAULT_INJECTION: forcing a failure. [ 213.117485][ T8153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.149460][ T8150] veth1_macvtap: left promiscuous mode [ 213.195810][ T8153] CPU: 0 UID: 0 PID: 8153 Comm: syz.4.803 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 213.206142][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 213.216236][ T8153] Call Trace: [ 213.219552][ T8153] [ 213.222512][ T8153] dump_stack_lvl+0x241/0x360 [ 213.227249][ T8153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.232495][ T8153] ? __pfx__printk+0x10/0x10 [ 213.237127][ T8153] ? __pfx_lock_release+0x10/0x10 [ 213.242213][ T8153] should_fail_ex+0x3b0/0x4e0 [ 213.246943][ T8153] _copy_from_user+0x2f/0xe0 [ 213.251578][ T8153] get_compat_msghdr+0xae/0x730 [ 213.256480][ T8153] ? __fget_files+0x29/0x470 [ 213.261116][ T8153] ? __pfx_get_compat_msghdr+0x10/0x10 [ 213.266617][ T8153] ? __fget_files+0x3f3/0x470 [ 213.271352][ T8153] __sys_sendmsg+0x25d/0x380 [ 213.275998][ T8153] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.281172][ T8153] ? __pfx_vfs_write+0x10/0x10 [ 213.286018][ T8153] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 213.292652][ T8153] ? lockdep_hardirqs_on+0x99/0x150 [ 213.297866][ T8153] __do_fast_syscall_32+0xb4/0x110 [ 213.302993][ T8153] ? exc_page_fault+0x590/0x8c0 [ 213.307854][ T8153] do_fast_syscall_32+0x34/0x80 [ 213.312716][ T8153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.319060][ T8153] RIP: 0023:0xf743d579 [ 213.323141][ T8153] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 213.342845][ T8153] RSP: 002b:00000000f570556c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 213.351267][ T8153] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200001c0 [ 213.359246][ T8153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.367224][ T8153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.375204][ T8153] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.383181][ T8153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.391170][ T8153] [ 213.505029][ T8162] fuse: Unknown parameter '–' [ 213.536925][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.538636][ T5291] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 213.553047][ T5229] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 213.563807][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.738426][ T5229] usb 4-1: Using ep0 maxpacket: 16 [ 213.745168][ T5291] usb 1-1: Using ep0 maxpacket: 8 [ 213.752402][ T5229] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.764060][ T5229] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.786367][ T5291] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 213.806318][ T5291] usb 1-1: config 0 has no interface number 0 [ 213.826756][ T5291] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.839141][ T5229] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.857373][ T5291] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 213.881516][ T5229] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.888193][ T5229] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 213.906245][ T5291] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 213.932081][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.951595][ T5291] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 213.985164][ T5229] usb 4-1: config 0 descriptor?? [ 213.994353][ T5291] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.081345][ T5291] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 214.092289][ T5291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.118548][ T5291] usb 1-1: Product: syz [ 214.134785][ T5291] usb 1-1: Manufacturer: syz [ 214.151633][ T5291] usb 1-1: SerialNumber: syz [ 214.193420][ T5291] usb 1-1: config 0 descriptor?? [ 214.389113][ T937] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 214.427279][ T5291] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 214.473154][ T5229] hid-generic 0003:045E:05DA.000E: ignoring exceeding usage max [ 214.502616][ T5229] hid-generic 0003:045E:05DA.000E: item fetching failed at offset 18/34 [ 214.511861][ T5291] usb 1-1: USB disconnect, device number 33 [ 214.528508][ T937] usb 2-1: device descriptor read/64, error -71 [ 214.579875][ T5229] hid-generic 0003:045E:05DA.000E: probe with driver hid-generic failed with error -22 [ 214.610571][ T5291] iowarrior 1-1:0.186: I/O-Warror #0 now disconnected [ 214.843844][ T937] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 215.008567][ T937] usb 2-1: device descriptor read/64, error -71 [ 215.111298][ T8113] coredump: 150(syz.4.783): written to core: VMAs: 32, size 99389440; core: 62078723 bytes, pos 99393536 [ 215.139695][ T937] usb usb2-port1: attempt power cycle [ 215.276377][ T8173] tap0: tun_chr_ioctl cmd 1074025677 [ 215.291421][ T8173] tap0: linktype set to 821 [ 215.296633][ T5291] usb 5-1: USB disconnect, device number 29 [ 215.499977][ T937] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 215.551053][ T937] usb 2-1: device descriptor read/8, error -71 [ 215.714599][ T5271] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 215.815430][ T937] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 215.829398][ T5273] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 215.868626][ T937] usb 2-1: device descriptor read/8, error -71 [ 215.939568][ T5271] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.950459][ T5271] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 215.965257][ T5271] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 215.985587][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.993988][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 216.003259][ T5271] usb 1-1: Product: syz [ 216.007727][ T5271] usb 1-1: Manufacturer: syz [ 216.018805][ T5271] usb 1-1: SerialNumber: syz [ 216.019515][ T937] usb usb2-port1: unable to enumerate USB device [ 216.044938][ T5273] usb 5-1: config 8 has an invalid interface number: 249 but max is 0 [ 216.054535][ T5273] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 216.064757][ T5273] usb 5-1: config 8 has no interface number 0 [ 216.098431][ T5273] usb 5-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 216.125169][ T5273] usb 5-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 216.171308][ T5273] usb 5-1: config 8 interface 249 has no altsetting 0 [ 216.219367][ T5273] usb 5-1: string descriptor 0 read error: -22 [ 216.249577][ T5273] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 216.268375][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.680771][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.715800][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.804056][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.839168][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.016852][ T5273] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 217.029523][ T5273] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 217.054224][ T5273] dib0700: firmware download failed at 7 with -71 [ 217.082496][ T5273] usb 5-1: USB disconnect, device number 30 [ 217.488456][ T2635] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 217.671941][ T2635] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 217.710350][ T2635] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 217.750147][ T2635] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 217.759433][ T2635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.776424][ T2635] usb 3-1: Product: syz [ 217.798751][ T2635] usb 3-1: Manufacturer: syz [ 217.806480][ T2635] usb 3-1: SerialNumber: syz [ 217.822354][ T2635] usb 3-1: config 0 descriptor?? [ 217.830009][ T8207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 217.837418][ T8207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 217.858521][ T5291] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 217.873789][ T8178] coredump: 140(syz.3.805): written to core: VMAs: 32, size 99389440; core: 62074627 bytes, pos 99393536 [ 218.004621][ T46] usb 4-1: USB disconnect, device number 38 [ 218.029215][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 218.049078][ T5291] usb 2-1: config 8 has an invalid interface number: 249 but max is 0 [ 218.049115][ T5291] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 218.049139][ T5291] usb 2-1: config 8 has no interface number 0 [ 218.049174][ T5291] usb 2-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 218.049201][ T5291] usb 2-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 218.049222][ T5291] usb 2-1: config 8 interface 249 has no altsetting 0 [ 218.054124][ T5291] usb 2-1: string descriptor 0 read error: -22 [ 218.054212][ T5291] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 218.054242][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.085298][ T8207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 218.085420][ T8207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 218.517660][ T2635] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 218.646357][ T46] usb 1-1: USB disconnect, device number 34 [ 218.726808][ T2635] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 218.769304][ T2635] usb 3-1: USB disconnect, device number 43 [ 218.921946][ T8237] netlink: 'syz.0.832': attribute type 9 has an invalid length. [ 218.945208][ T8237] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.832'. [ 219.260854][ T8242] FAULT_INJECTION: forcing a failure. [ 219.260854][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 219.312067][ T8242] CPU: 1 UID: 0 PID: 8242 Comm: syz.0.835 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 219.322379][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 219.332450][ T8242] Call Trace: [ 219.335765][ T8242] [ 219.338721][ T8242] dump_stack_lvl+0x241/0x360 [ 219.343522][ T8242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.348754][ T8242] ? __pfx__printk+0x10/0x10 [ 219.353391][ T8242] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 219.358890][ T8242] ? __pfx___might_resched+0x10/0x10 [ 219.364224][ T8242] should_fail_ex+0x3b0/0x4e0 [ 219.368930][ T8242] should_failslab+0xac/0x100 [ 219.373633][ T8242] ? sg_read+0x9a3/0x1720 [ 219.377986][ T8242] __kmalloc_cache_noprof+0x6c/0x2c0 [ 219.383312][ T8242] sg_read+0x9a3/0x1720 [ 219.387498][ T8242] ? __lock_acquire+0x1384/0x2050 [ 219.392545][ T8242] ? __pfx_sg_read+0x10/0x10 [ 219.397165][ T8242] ? common_file_perm+0x1a6/0x210 [ 219.402228][ T8242] ? rw_verify_area+0x568/0x6f0 [ 219.407115][ T8242] vfs_readv+0x6bc/0xa80 [ 219.411407][ T8242] ? __pfx_sg_read+0x10/0x10 [ 219.416033][ T8242] ? __pfx_vfs_readv+0x10/0x10 [ 219.420843][ T8242] ? fdget_pos+0x19a/0x320 [ 219.425292][ T8242] do_readv+0x1b1/0x350 [ 219.429471][ T8242] ? __pfx_do_readv+0x10/0x10 [ 219.434178][ T8242] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 219.440793][ T8242] ? lockdep_hardirqs_on+0x99/0x150 [ 219.446027][ T8242] __do_fast_syscall_32+0xb4/0x110 [ 219.451166][ T8242] ? exc_page_fault+0x590/0x8c0 [ 219.456063][ T8242] do_fast_syscall_32+0x34/0x80 [ 219.460944][ T8242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.467312][ T8242] RIP: 0023:0xf739d579 [ 219.471398][ T8242] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 219.491036][ T8242] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 219.499484][ T8242] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 219.507469][ T8242] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.515464][ T8242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.523457][ T8242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.531542][ T8242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.539552][ T8242] [ 219.833398][ T5291] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 219.856840][ T5291] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 219.866644][ T5291] dib0700: firmware download failed at 7 with -71 [ 219.889486][ T5291] usb 2-1: USB disconnect, device number 43 [ 219.965010][ T8253] FAULT_INJECTION: forcing a failure. [ 219.965010][ T8253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.968588][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 219.996085][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.4.840 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 220.006386][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 220.016481][ T8253] Call Trace: [ 220.019791][ T8253] [ 220.022752][ T8253] dump_stack_lvl+0x241/0x360 [ 220.027569][ T8253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.032834][ T8253] ? __pfx__printk+0x10/0x10 [ 220.037465][ T8253] ? __pfx_lock_release+0x10/0x10 [ 220.042535][ T8253] ? __lock_acquire+0x1384/0x2050 [ 220.047631][ T8253] should_fail_ex+0x3b0/0x4e0 [ 220.052354][ T8253] _copy_from_user+0x2f/0xe0 [ 220.057111][ T8253] kstrtouint_from_user+0xc6/0x190 [ 220.062247][ T8253] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 220.067232][ T8257] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 220.067984][ T8253] ? __pfx_lock_acquire+0x10/0x10 [ 220.080806][ T8253] proc_fail_nth_write+0xaa/0x2d0 [ 220.085875][ T8253] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 220.091812][ T8253] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 220.097498][ T8253] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 220.103275][ T8253] vfs_write+0x29c/0xc90 [ 220.107584][ T8253] ? __pfx_vfs_write+0x10/0x10 [ 220.112410][ T8253] ? __fget_files+0x3f3/0x470 [ 220.117141][ T8253] ? fdget_pos+0x24e/0x320 [ 220.121606][ T8253] ksys_write+0x183/0x2b0 [ 220.126001][ T8253] ? __pfx_ksys_write+0x10/0x10 [ 220.130903][ T8253] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 220.137533][ T8253] ? lockdep_hardirqs_on+0x99/0x150 [ 220.138517][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 220.142752][ T8253] __do_fast_syscall_32+0xb4/0x110 [ 220.153007][ T8253] ? exc_page_fault+0x590/0x8c0 [ 220.158071][ T8253] do_fast_syscall_32+0x34/0x80 [ 220.162966][ T8253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.169340][ T8253] RIP: 0023:0xf743d579 [ 220.173440][ T8253] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 220.179763][ T25] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 220.193056][ T8253] RSP: 002b:00000000f57265a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 220.193089][ T8253] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5726620 [ 220.193106][ T8253] RDX: 0000000000000001 RSI: 00000000f742bff4 RDI: 0000000000000000 [ 220.193120][ T8253] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 220.193134][ T8253] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 220.193149][ T8253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.193179][ T8253] [ 220.193202][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.352402][ T25] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 220.366079][ T25] usb 3-1: config 8 has no interface number 0 [ 220.382126][ T25] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 220.397287][ T25] usb 3-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 220.415310][ T25] usb 3-1: config 8 interface 249 has no altsetting 0 [ 220.461958][ T25] usb 3-1: string descriptor 0 read error: -22 [ 220.468277][ T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 220.477467][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.598900][ T2635] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 220.618480][ T5229] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 220.805401][ T2635] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.830062][ T5229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.849271][ T5229] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 220.864238][ T2635] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.870555][ T5229] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.903833][ T2635] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.904234][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.946438][ T5229] usb 5-1: Product: syz [ 220.978927][ T2635] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 221.007971][ T5229] usb 5-1: Manufacturer: syz [ 221.012604][ T2635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.036545][ T8260] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 221.041345][ T5229] usb 5-1: SerialNumber: syz [ 221.288568][ T25] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 221.301999][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 221.310456][ T25] dib0700: firmware download failed at 7 with -71 [ 221.333654][ T25] usb 3-1: USB disconnect, device number 44 [ 221.703068][ T2635] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 221.718444][ T2635] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input18 [ 221.753472][ T2635] usb 1-1: USB disconnect, device number 35 [ 221.753522][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 221.965069][ T8289] [ 221.967480][ T8289] ====================================================== [ 221.974526][ T8289] WARNING: possible circular locking dependency detected [ 221.981560][ T8289] 6.11.0-syzkaller-10547-g684a64bf32b6 #0 Not tainted [ 221.988326][ T8289] ------------------------------------------------------ [ 221.995342][ T8289] syz.2.850/8289 is trying to acquire lock: [ 222.001234][ T8289] ffff888079f52798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 222.010914][ T8289] [ 222.010914][ T8289] but task is already holding lock: [ 222.018278][ T8289] ffff88806027e4c0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 222.029024][ T8289] [ 222.029024][ T8289] which lock already depends on the new lock. [ 222.029024][ T8289] [ 222.039424][ T8289] [ 222.039424][ T8289] the existing dependency chain (in reverse order) is: [ 222.048438][ T8289] [ 222.048438][ T8289] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 222.057144][ T8289] lock_acquire+0x1ed/0x550 [ 222.062182][ T8289] down_write+0x99/0x220 [ 222.066959][ T8289] process_measurement+0x439/0x1fb0 [ 222.072701][ T8289] ima_file_mmap+0x13d/0x2b0 [ 222.077816][ T8289] security_mmap_file+0x7e7/0xa40 [ 222.083372][ T8289] __se_sys_remap_file_pages+0x6e6/0xa50 [ 222.089539][ T8289] __do_fast_syscall_32+0xb4/0x110 [ 222.095176][ T8289] do_fast_syscall_32+0x34/0x80 [ 222.100553][ T8289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.107409][ T8289] [ 222.107409][ T8289] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 222.114991][ T8289] validate_chain+0x18ef/0x5920 [ 222.120371][ T8289] __lock_acquire+0x1384/0x2050 [ 222.125842][ T8289] lock_acquire+0x1ed/0x550 [ 222.130877][ T8289] down_read_killable+0xca/0xd30 [ 222.136350][ T8289] mmap_read_lock_killable+0x1d/0x70 [ 222.142159][ T8289] lock_mm_and_find_vma+0x29c/0x2f0 [ 222.147890][ T8289] exc_page_fault+0x1bf/0x8c0 [ 222.153180][ T8289] asm_exc_page_fault+0x26/0x30 [ 222.158559][ T8289] fault_in_readable+0x108/0x2b0 [ 222.164026][ T8289] fault_in_iov_iter_readable+0x229/0x280 [ 222.170273][ T8289] generic_perform_write+0x259/0x6d0 [ 222.176081][ T8289] shmem_file_write_iter+0xf9/0x120 [ 222.181813][ T8289] vfs_write+0xa6d/0xc90 [ 222.186590][ T8289] ksys_write+0x183/0x2b0 [ 222.191458][ T8289] __do_fast_syscall_32+0xb4/0x110 [ 222.197102][ T8289] do_fast_syscall_32+0x34/0x80 [ 222.202484][ T8289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.209346][ T8289] [ 222.209346][ T8289] other info that might help us debug this: [ 222.209346][ T8289] [ 222.219660][ T8289] Possible unsafe locking scenario: [ 222.219660][ T8289] [ 222.227111][ T8289] CPU0 CPU1 [ 222.232476][ T8289] ---- ---- [ 222.237836][ T8289] lock(&sb->s_type->i_mutex_key#12); [ 222.243397][ T8289] lock(&mm->mmap_lock); [ 222.250251][ T8289] lock(&sb->s_type->i_mutex_key#12); [ 222.258243][ T8289] rlock(&mm->mmap_lock); [ 222.262669][ T8289] [ 222.262669][ T8289] *** DEADLOCK *** [ 222.262669][ T8289] [ 222.270816][ T8289] 3 locks held by syz.2.850/8289: [ 222.275848][ T8289] #0: ffff888022f3a478 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 222.284927][ T8289] #1: ffff88807c4d4420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 222.293838][ T8289] #2: ffff88806027e4c0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120 [ 222.305002][ T8289] [ 222.305002][ T8289] stack backtrace: [ 222.310891][ T8289] CPU: 1 UID: 0 PID: 8289 Comm: syz.2.850 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 222.321128][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 222.331270][ T8289] Call Trace: [ 222.334550][ T8289] [ 222.337483][ T8289] dump_stack_lvl+0x241/0x360 [ 222.342174][ T8289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.347388][ T8289] ? __pfx__printk+0x10/0x10 [ 222.351994][ T8289] print_circular_bug+0x13a/0x1b0 [ 222.357024][ T8289] check_noncircular+0x36a/0x4a0 [ 222.361971][ T8289] ? __pfx_check_noncircular+0x10/0x10 [ 222.367438][ T8289] ? lockdep_lock+0x123/0x2b0 [ 222.372125][ T8289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.378122][ T8289] ? __pfx_validate_chain+0x10/0x10 [ 222.383331][ T8289] validate_chain+0x18ef/0x5920 [ 222.388191][ T8289] ? finish_task_switch+0x1e5/0x870 [ 222.393403][ T8289] ? __pfx_validate_chain+0x10/0x10 [ 222.398610][ T8289] ? mark_lock+0x9a/0x360 [ 222.402954][ T8289] ? __pfx_validate_chain+0x10/0x10 [ 222.408156][ T8289] ? __lock_acquire+0x1384/0x2050 [ 222.413199][ T8289] ? mark_lock+0x9a/0x360 [ 222.417534][ T8289] ? __lock_acquire+0x1384/0x2050 [ 222.422579][ T8289] ? mark_lock+0x9a/0x360 [ 222.426915][ T8289] __lock_acquire+0x1384/0x2050 [ 222.431783][ T8289] lock_acquire+0x1ed/0x550 [ 222.436296][ T8289] ? mmap_read_lock_killable+0x1d/0x70 [ 222.441850][ T8289] ? __pfx_lock_acquire+0x10/0x10 [ 222.446888][ T8289] ? __pfx_fixup_exception+0x10/0x10 [ 222.452184][ T8289] ? __pfx___might_resched+0x10/0x10 [ 222.457477][ T8289] ? __folio_batch_add_and_move+0x845/0xf00 [ 222.463472][ T8289] ? __pfx_lru_add+0x10/0x10 [ 222.468068][ T8289] ? __pfx___folio_batch_add_and_move+0x10/0x10 [ 222.474324][ T8289] down_read_killable+0xca/0xd30 [ 222.479280][ T8289] ? mmap_read_lock_killable+0x1d/0x70 [ 222.484748][ T8289] ? mark_lock+0x9a/0x360 [ 222.489083][ T8289] ? cmp_ex_search+0x74/0xa0 [ 222.493681][ T8289] ? mmap_read_lock_killable+0x1d/0x70 [ 222.499144][ T8289] ? bsearch+0x98/0xc0 [ 222.503222][ T8289] ? __pfx_down_read_killable+0x10/0x10 [ 222.508783][ T8289] ? search_extable+0xb3/0x100 [ 222.513574][ T8289] ? __pfx_search_extable+0x10/0x10 [ 222.518777][ T8289] ? fault_in_readable+0x108/0x2b0 [ 222.523898][ T8289] ? __pfx_down_read_trylock+0x10/0x10 [ 222.529361][ T8289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.535700][ T8289] ? irqentry_exit+0x63/0x90 [ 222.540296][ T8289] mmap_read_lock_killable+0x1d/0x70 [ 222.545587][ T8289] lock_mm_and_find_vma+0x29c/0x2f0 [ 222.550801][ T8289] exc_page_fault+0x1bf/0x8c0 [ 222.555484][ T8289] asm_exc_page_fault+0x26/0x30 [ 222.560340][ T8289] RIP: 0010:fault_in_readable+0x108/0x2b0 [ 222.566074][ T8289] Code: 00 00 00 0f 01 cb 0f ae e8 48 89 de 48 81 e6 ff 0f 00 00 31 ff e8 d8 d2 b3 ff 48 89 d8 48 25 ff 0f 00 00 4c 89 74 24 18 74 30 <8a> 1b e8 e1 cd b3 ff 43 0f b6 04 2f 84 c0 0f 85 4d 01 00 00 88 5c [ 222.585696][ T8289] RSP: 0018:ffffc9001674fa20 EFLAGS: 00050206 [ 222.591772][ T8289] RAX: 00000000000000c0 RBX: 00000000203070c0 RCX: ffff88807bce5a00 [ 222.599767][ T8289] RDX: ffffc900091c1000 RSI: 00000000000000c0 RDI: 0000000000000000 [ 222.607739][ T8289] RBP: ffffc9001674fad8 R08: ffffffff81e0e748 R09: ffffffff84b90999 [ 222.615733][ T8289] R10: 0000000000000002 R11: ffff88807bce5a00 R12: 00000000000f9000 [ 222.623737][ T8289] R13: dffffc0000000000 R14: 1ffff92002ce9f48 R15: 1ffff92002ce9f4c [ 222.631727][ T8289] ? fault_in_iov_iter_readable+0x49/0x280 [ 222.637547][ T8289] ? fault_in_readable+0xf8/0x2b0 [ 222.642681][ T8289] ? __pfx_fault_in_readable+0x10/0x10 [ 222.648158][ T8289] ? folio_unlock+0x126/0x2f0 [ 222.652939][ T8289] ? inode_to_bdi+0x69/0xf0 [ 222.657478][ T8289] fault_in_iov_iter_readable+0x229/0x280 [ 222.663219][ T8289] generic_perform_write+0x259/0x6d0 [ 222.668516][ T8289] ? __pfx_generic_perform_write+0x10/0x10 [ 222.674351][ T8289] ? __pfx_generic_write_checks+0x10/0x10 [ 222.680101][ T8289] ? rcu_read_lock_any_held+0xb7/0x160 [ 222.685593][ T8289] ? file_update_time+0x2a0/0x430 [ 222.690640][ T8289] shmem_file_write_iter+0xf9/0x120 [ 222.695851][ T8289] vfs_write+0xa6d/0xc90 [ 222.700224][ T8289] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 222.706043][ T8289] ? __pfx_vfs_write+0x10/0x10 [ 222.710831][ T8289] ? fdget_pos+0x24e/0x320 [ 222.715259][ T8289] ksys_write+0x183/0x2b0 [ 222.719612][ T8289] ? __pfx_ksys_write+0x10/0x10 [ 222.724482][ T8289] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 222.731173][ T8289] ? lockdep_hardirqs_on+0x99/0x150 [ 222.736383][ T8289] __do_fast_syscall_32+0xb4/0x110 [ 222.741506][ T8289] ? exc_page_fault+0x590/0x8c0 [ 222.746553][ T8289] do_fast_syscall_32+0x34/0x80 [ 222.751427][ T8289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.757770][ T8289] RIP: 0023:0xf73cd579 [ 222.761843][ T8289] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 222.781462][ T8289] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 222.789891][ T8289] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000200000c0 [ 222.797957][ T8289] RDX: 000000006db6e559 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.805934][ T8289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.813923][ T8289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.821910][ T8289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.829899][ T8289] [ 223.095665][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.173726][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.279923][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.322581][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.384424][ T25] usb 5-1: USB disconnect, device number 31 [ 223.414577][ T53] bridge_slave_0: left allmulticast mode [ 223.421794][ T53] bridge_slave_0: left promiscuous mode [ 223.430257][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.501887][ T53] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 223.563887][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.575821][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.586078][ T53] bond0 (unregistering): Released all slaves [ 223.783779][ T53] hsr_slave_0: left promiscuous mode [ 223.792130][ T53] hsr_slave_1: left promiscuous mode [ 223.797993][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.806393][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.821462][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.829652][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.840191][ T53] veth0_macvtap: left promiscuous mode [ 223.845988][ T53] veth1_vlan: left promiscuous mode [ 223.852577][ T53] veth0_vlan: left promiscuous mode [ 224.005849][ T53] team0 (unregistering): Port device team_slave_1 removed [ 224.032742][ T53] team0 (unregistering): Port device team_slave_0 removed [ 224.446716][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.457365][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.505929][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.516762][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.564110][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.575792][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.653709][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.665700][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.780236][ T53] bridge_slave_1: left allmulticast mode [ 224.792039][ T53] bridge_slave_1: left promiscuous mode [ 224.797862][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.807435][ T53] bridge_slave_0: left allmulticast mode [ 224.815464][ T53] bridge_slave_0: left promiscuous mode [ 224.821520][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.974898][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.985731][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.996112][ T53] bond0 (unregistering): Released all slaves [ 225.205953][ T53] hsr_slave_0: left promiscuous mode [ 225.212983][ T53] hsr_slave_1: left promiscuous mode [ 225.221861][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.229561][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.237294][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.246790][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.259434][ T53] veth0_macvtap: left promiscuous mode [ 225.265039][ T53] veth1_vlan: left promiscuous mode [ 225.270418][ T53] veth0_vlan: left promiscuous mode [ 225.336270][ T53] pim6reg (unregistering): left allmulticast mode [ 225.457865][ T53] team0 (unregistering): Port device team_slave_1 removed [ 225.482705][ T53] team0 (unregistering): Port device team_slave_0 removed [ 225.850672][ T53] IPVS: stop unused estimator thread 0...